0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) dup2(r1, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40010) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000540)) 09:12:16 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 43) 09:12:16 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 42) [ 916.190264] FAULT_INJECTION: forcing a failure. [ 916.190264] name failslab, interval 1, probability 0, space 0, times 0 [ 916.194200] CPU: 0 PID: 9206 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 916.195795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.197704] Call Trace: [ 916.198306] dump_stack+0x107/0x167 [ 916.199168] should_fail.cold+0x5/0xa [ 916.200075] ? prepare_creds+0x25/0x5e0 [ 916.201015] should_failslab+0x5/0x20 [ 916.201036] loop4: detected capacity change from 0 to 41948160 [ 916.201899] kmem_cache_alloc+0x5b/0x310 [ 916.201927] prepare_creds+0x25/0x5e0 [ 916.201950] selinux_setprocattr+0x354/0xa20 [ 916.205480] ? selinux_shm_shmctl+0x180/0x180 [ 916.206515] security_setprocattr+0xb7/0x120 [ 916.207520] proc_pid_attr_write+0x340/0x7d0 [ 916.208532] ? rw_verify_area+0x11d/0x350 [ 916.209516] do_iter_write+0x4f0/0x700 [ 916.210435] vfs_writev+0x1ae/0x620 [ 916.211291] ? vfs_iter_write+0xa0/0xa0 [ 916.212255] ? __fdget_pos+0xf1/0x190 [ 916.213155] ? lock_downgrade+0x6d0/0x6d0 [ 916.214128] ? ksys_write+0x12d/0x260 [ 916.214982] ? __fget_files+0x2f8/0x520 [ 916.215917] do_writev+0x139/0x300 [ 916.216732] ? vfs_writev+0x620/0x620 [ 916.217633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.218852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.220061] do_syscall_64+0x33/0x40 [ 916.220918] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.222151] RIP: 0033:0x7f7b39e69b19 [ 916.223027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.227291] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 916.229037] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 916.230699] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 916.232391] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.234023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.235677] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:12:16 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000029) [ 916.255274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.260175] FAULT_INJECTION: forcing a failure. [ 916.260175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.261628] CPU: 1 PID: 9207 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 916.262440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.263415] Call Trace: [ 916.263740] dump_stack+0x107/0x167 [ 916.264176] should_fail.cold+0x5/0xa [ 916.264642] _copy_from_user+0x2e/0x1b0 [ 916.265116] memdup_user+0x65/0xd0 [ 916.265556] proc_pid_attr_write+0x247/0x7d0 [ 916.266083] ? rw_verify_area+0x11d/0x350 [ 916.266581] do_iter_write+0x4f0/0x700 [ 916.267053] vfs_writev+0x1ae/0x620 [ 916.267489] ? vfs_iter_write+0xa0/0xa0 [ 916.267963] ? __fdget_pos+0xf1/0x190 [ 916.268422] ? lock_downgrade+0x6d0/0x6d0 [ 916.268921] ? ksys_write+0x12d/0x260 [ 916.269384] ? __fget_files+0x2f8/0x520 [ 916.269870] do_writev+0x139/0x300 [ 916.270292] ? vfs_writev+0x620/0x620 [ 916.270746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.271376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.271992] do_syscall_64+0x33/0x40 [ 916.272441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.273052] RIP: 0033:0x7f2c8f209b19 [ 916.273501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.275681] RSP: 002b:00007f2c8c77f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 916.276600] RAX: ffffffffffffffda RBX: 00007f2c8f31cf60 RCX: 00007f2c8f209b19 [ 916.277445] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 916.278274] RBP: 00007f2c8c77f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.279104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.279934] R13: 00007ffe799e453f R14: 00007f2c8c77f300 R15: 0000000000022000 [ 916.285960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:12:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46040000000000000000000000020006000000e4ff00008d293800000000000000000000000000200001000000000000000003000000"], 0x58) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r7 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r6}) keyctl$chown(0x4, r6, 0xee01, r7) write$bt_hci(r4, &(0x7f0000000040)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x5, @none}}}, 0xb) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r8) close(r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 916.320390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:12:16 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 43) 09:12:16 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002a) 09:12:16 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000001a) 09:12:16 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 44) [ 916.404931] FAULT_INJECTION: forcing a failure. [ 916.404931] name failslab, interval 1, probability 0, space 0, times 0 [ 916.406293] CPU: 1 PID: 9226 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 916.407090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.408042] Call Trace: [ 916.408352] dump_stack+0x107/0x167 [ 916.408785] should_fail.cold+0x5/0xa [ 916.409224] ? prepare_creds+0x25/0x5e0 [ 916.409695] should_failslab+0x5/0x20 [ 916.410125] kmem_cache_alloc+0x5b/0x310 [ 916.410591] prepare_creds+0x25/0x5e0 [ 916.411033] selinux_setprocattr+0x354/0xa20 [ 916.411543] ? selinux_shm_shmctl+0x180/0x180 [ 916.412072] security_setprocattr+0xb7/0x120 [ 916.412582] proc_pid_attr_write+0x340/0x7d0 [ 916.413084] ? rw_verify_area+0x11d/0x350 [ 916.413567] do_iter_write+0x4f0/0x700 [ 916.414026] vfs_writev+0x1ae/0x620 [ 916.414443] ? vfs_iter_write+0xa0/0xa0 [ 916.414905] ? __fdget_pos+0xf1/0x190 [ 916.415338] ? lock_downgrade+0x6d0/0x6d0 [ 916.415813] ? ksys_write+0x12d/0x260 [ 916.416247] ? __fget_files+0x2f8/0x520 [ 916.416720] do_writev+0x139/0x300 [ 916.417132] ? vfs_writev+0x620/0x620 [ 916.417574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.418165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.418748] do_syscall_64+0x33/0x40 [ 916.419166] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.419744] RIP: 0033:0x7f2c8f209b19 [ 916.420160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.422233] RSP: 002b:00007f2c8c77f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 916.423090] RAX: ffffffffffffffda RBX: 00007f2c8f31cf60 RCX: 00007f2c8f209b19 [ 916.423906] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 916.424704] RBP: 00007f2c8c77f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.425520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.426333] R13: 00007ffe799e453f R14: 00007f2c8c77f300 R15: 0000000000022000 [ 916.444023] FAULT_INJECTION: forcing a failure. [ 916.444023] name failslab, interval 1, probability 0, space 0, times 0 [ 916.445502] CPU: 1 PID: 9236 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 916.446260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.447180] Call Trace: [ 916.447471] dump_stack+0x107/0x167 [ 916.447881] should_fail.cold+0x5/0xa [ 916.448308] ? create_object.isra.0+0x3a/0xa20 [ 916.448823] should_failslab+0x5/0x20 [ 916.449238] kmem_cache_alloc+0x5b/0x310 [ 916.449702] create_object.isra.0+0x3a/0xa20 [ 916.450186] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 916.450746] kmem_cache_alloc+0x159/0x310 [ 916.451212] prepare_creds+0x25/0x5e0 [ 916.451638] selinux_setprocattr+0x354/0xa20 [ 916.452123] ? selinux_shm_shmctl+0x180/0x180 [ 916.452629] security_setprocattr+0xb7/0x120 [ 916.453126] proc_pid_attr_write+0x340/0x7d0 [ 916.453610] ? rw_verify_area+0x11d/0x350 [ 916.454071] do_iter_write+0x4f0/0x700 [ 916.454510] vfs_writev+0x1ae/0x620 [ 916.454913] ? vfs_iter_write+0xa0/0xa0 [ 916.455352] ? __fdget_pos+0xf1/0x190 [ 916.455777] ? lock_downgrade+0x6d0/0x6d0 [ 916.456249] ? __fget_files+0x2f8/0x520 [ 916.456698] do_writev+0x139/0x300 [ 916.457092] ? vfs_writev+0x620/0x620 [ 916.457516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 916.458091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 916.458654] do_syscall_64+0x33/0x40 [ 916.459063] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 916.459624] RIP: 0033:0x7f7b39e69b19 [ 916.460036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 916.462046] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 916.462884] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 916.463669] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 916.464460] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.465245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.466035] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:12:16 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000001b) 09:12:16 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, 0xa0}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) 09:12:30 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 45) 09:12:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2, 0xa}) r3 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='-{$\x00', r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r3, 0x1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r1, 0x0) 09:12:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:12:30 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="6c65300000002cd3b82ba002dd347e692bd9660c2e2b772c75b591e424e54acaa8b0dccd14d0128733ec88a7f8ada6a4b3f24376d4234ad8af0df056c88e40e60e85722e705b0e4b9e671ad83a9b75a691cf7e051d779383f1b1aabb750298838f6af8c1d81c009740"]) keyctl$chown(0x4, 0x0, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x0) fallocate(r4, 0x1, 0x6786, 0x7) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="a26e135ceb7ae26f7a24fe01bf80cdefac4c835ef69018645dfbac16df1b571be1b3f64954531b4ebda2d8428e4e439509ac6a2c1a8d90ce9ecc8ce1192bf8b2cdd1c5394bdfb380f84a0341a85214bfba03124f1137c18176e8d0a08aa0e5359c019e532cbcd61c9365f5176568bd1d9ac603f481523e5d77b6fbe0030acb2df86e98b0d2db937b3f8d7ffd11bb24d56ca8be7a8f49b9a17e6f9696202ca233e95ea7ebe7", 0xa5, 0x2}, {&(0x7f0000000200)="1ffca3bc4e69f15b0aebb1f6ef1e9abdc14cb323f709d0615725d1bc4706d1f1ccfd66ae4e2350fb96505074111e6ff4cdcfa24132f5d55c0869c1bf9cb261a22a87a0b1d39ad99ede084f6209d4ded4f5600f0c3f42c1278aa00ce847e6", 0x5e, 0x2}], 0x10000, &(0x7f00000002c0)={[{@norecovery}, {@resgid={'resgid', 0x3d, r1}}, {@noblock_validity}], [{@uid_lt={'uid<', r0}}, {@uid_gt={'uid>', r5}}, {@fsmagic}]}) 09:12:30 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 44) 09:12:30 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002b) 09:12:30 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000001c) 09:12:30 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0]) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, 0x26, 0x101, 0x0, 0x0, {0x1}, [@typed={0x90, 0x63, 0x0, 0x0, @binary="a0eab51f24f4074cfbfbbb07324cc62f701d9f2905855dd18b1f0d5ce7f3493090af5beef11c281fbcc10f4675223ffc29811a6d82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5b695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefbfd2d17065093"}]}, 0xa4}, 0x1, 0x0, 0x0, 0xb0}, 0x8044) r2 = syz_io_uring_setup(0x22, &(0x7f0000000240)={0x0, 0x813d, 0x0, 0x0, 0x12d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000002a40)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x802073, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRESDEC]) r5 = gettid() r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x140010, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f0000000200), 0x0, 0x0, 0x1000, 0x0, {0x0, r7}}, 0x9) ptrace$peek(0x1, r5, &(0x7f0000000280)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpriority(0x2, r5) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x39}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x5b}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x28000000}, 0x48000) getuid() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100007ddd6500000000c75a4321a215e7bab6731718d85d4b14275b082dda76aad74c6b4f975dc63af7eb2985d71ec24f735522519bf01f6981c4748713099acbc687a62231cc4a5c7c18eaf726b241f58fc68253dd001000000000000076d4ddc051f95990270b3251113aae192ca0f94bd2dc118b9ac34b0b8a254dba594c0bc67ce810d62bc3cd4950", @ANYRES32=r1, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$nl_generic(r8, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x308}, 0x1, 0x0, 0x0, 0x2000800}, 0x4008040) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x4000010, r2, 0x8000000) [ 930.882016] FAULT_INJECTION: forcing a failure. [ 930.882016] name failslab, interval 1, probability 0, space 0, times 0 [ 930.883811] CPU: 1 PID: 9263 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 930.884823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 930.886039] Call Trace: [ 930.886427] dump_stack+0x107/0x167 [ 930.886959] should_fail.cold+0x5/0xa [ 930.887523] ? create_object.isra.0+0x3a/0xa20 [ 930.888187] should_failslab+0x5/0x20 [ 930.888743] kmem_cache_alloc+0x5b/0x310 [ 930.889334] create_object.isra.0+0x3a/0xa20 [ 930.889977] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 930.890728] kmem_cache_alloc+0x159/0x310 [ 930.891338] prepare_creds+0x25/0x5e0 [ 930.891871] selinux_setprocattr+0x354/0xa20 [ 930.892514] ? selinux_shm_shmctl+0x180/0x180 [ 930.892896] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 930.893173] security_setprocattr+0xb7/0x120 [ 930.895778] proc_pid_attr_write+0x340/0x7d0 [ 930.896316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.896405] ? rw_verify_area+0x11d/0x350 [ 930.896434] do_iter_write+0x4f0/0x700 [ 930.899344] FAULT_INJECTION: forcing a failure. [ 930.899344] name failslab, interval 1, probability 0, space 0, times 0 [ 930.899567] vfs_writev+0x1ae/0x620 [ 930.899583] ? vfs_iter_write+0xa0/0xa0 [ 930.899598] ? __fdget_pos+0xf1/0x190 [ 930.899621] ? lock_downgrade+0x6d0/0x6d0 [ 930.904287] ? ksys_write+0x12d/0x260 [ 930.904867] ? __fget_files+0x2f8/0x520 [ 930.905461] do_writev+0x139/0x300 [ 930.905977] ? vfs_writev+0x620/0x620 [ 930.906557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 930.907347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 930.908127] do_syscall_64+0x33/0x40 [ 930.908694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 930.909470] RIP: 0033:0x7f2c8f209b19 [ 930.910033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 930.912810] RSP: 002b:00007f2c8c77f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 930.913964] RAX: ffffffffffffffda RBX: 00007f2c8f31cf60 RCX: 00007f2c8f209b19 [ 930.915038] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 930.916112] RBP: 00007f2c8c77f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 930.917186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 930.918270] R13: 00007ffe799e453f R14: 00007f2c8c77f300 R15: 0000000000022000 [ 930.919376] CPU: 0 PID: 9271 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 930.921155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 930.923074] Call Trace: [ 930.923689] dump_stack+0x107/0x167 [ 930.924532] should_fail.cold+0x5/0xa [ 930.925425] ? security_prepare_creds+0x112/0x190 [ 930.926537] should_failslab+0x5/0x20 [ 930.927412] __kmalloc+0x72/0x390 [ 930.928218] security_prepare_creds+0x112/0x190 [ 930.929288] prepare_creds+0x452/0x5e0 [ 930.930195] selinux_setprocattr+0x354/0xa20 [ 930.931212] ? selinux_shm_shmctl+0x180/0x180 [ 930.932252] security_setprocattr+0xb7/0x120 [ 930.933270] proc_pid_attr_write+0x340/0x7d0 [ 930.934278] ? rw_verify_area+0x11d/0x350 [ 930.935220] do_iter_write+0x4f0/0x700 [ 930.936121] vfs_writev+0x1ae/0x620 [ 930.936944] ? vfs_iter_write+0xa0/0xa0 [ 930.937851] ? __fdget_pos+0xf1/0x190 [ 930.938722] ? lock_downgrade+0x6d0/0x6d0 [ 930.939666] ? ksys_write+0x12d/0x260 [ 930.940541] ? __fget_files+0x2f8/0x520 [ 930.941475] do_writev+0x139/0x300 [ 930.942288] ? vfs_writev+0x620/0x620 [ 930.943161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 930.944350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 930.945529] do_syscall_64+0x33/0x40 [ 930.946377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 930.947544] RIP: 0033:0x7f7b39e69b19 [ 930.948388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 930.952554] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 930.954284] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 930.955898] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 930.957513] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 930.959128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 930.960745] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:12:30 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002c) 09:12:30 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000001d) [ 930.986296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:12:30 executing program 6: fremovexattr(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) preadv(r1, &(0x7f0000000b80)=[{&(0x7f0000000400)=""/150, 0x96}, {&(0x7f00000007c0)=""/215, 0xd7}, {&(0x7f00000008c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f00000009c0)=""/247, 0xf7}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000ac0)=""/82, 0x52}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f0000000b40)=""/51, 0x33}], 0xa, 0x3f, 0x6) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0xffffffad, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="94000000a0152f6cc49d626a33812114e47d9c6665c3f629e8860ab3d4404e275b3f25eef99e5ce10c4bb0564615621064577e8485914eeee44bbf6ba9b27b4e3d4f972d407cb96cb5167dc1e215bdfa2d28336597cc19ff9736d89f48942c38237f3a64d170d6a257781b0e4eea3b81c463e007e99fd653a6c783bde60ac24b", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000450000000c00430000080000000000001800bd0005000100020001800400030007004000007004000c00430008000000000000000600b500010500001c0011800400050004000300040006000400020004000400040002000600120004000000050029000a00000006001a0104000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000891}, 0x24000880) openat$sr(0xffffffffffffff9c, &(0x7f0000000c40), 0x30a00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) fallocate(r4, 0x0, 0x0, 0x1000002) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000005c0)) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 09:12:30 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002d) 09:12:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote}}}}}, 0x0) syz_emit_ethernet(0x1015, &(0x7f0000001840)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@x25={0x805, {0x2, 0xd4, 0xf, "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"}}}}, &(0x7f0000000100)={0x0, 0x2, [0x66c, 0x31d, 0xca5, 0x773]}) syz_emit_ethernet(0x101f, &(0x7f0000000480)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @empty, @val={@val={0x9100, 0x5, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x2}}, {@llc={0x4, {@snap={0x1, 0x154, "2b90", "c2e66b", 0xf5, "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"}}}}}, &(0x7f0000000140)={0x1, 0x4, [0x6, 0x61b, 0x2c8, 0x1c8]}) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@remote, @remote, @val={@val={0x9100, 0x6, 0x1, 0x80}, {0x8100, 0x0, 0x0, 0x1}}, {@canfd={0xd, {{0x4, 0x0, 0x1}, 0x2b, 0x1, 0x0, 0x0, "ecdae21bba3ffd69e4f62c6cc6edffdeb3747c06526f60bf159ae6d1b66b87f65ff0fabcaed867de06da1f3af87d6fb011a096d8f00efdb769c81182ca72b8dc"}}}}, &(0x7f0000000080)={0x0, 0x3, [0xf38, 0xb1d, 0xac0, 0x73d]}) syz_emit_ethernet(0x6c, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "599f1e", 0x36, 0x21, 0xfe, @loopback, @loopback, {[], {{0x4e24, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x5, 0x4, "1f6afb", 0x4, "f33c3b"}, "a9d200fa979693e90bc10af3df3b56b5d719dddf1f5c3556d323b39696299df0c16669e1b9e9"}}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0xdaa, 0x78d, 0x760, 0xc48]}) [ 931.063084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 09:12:31 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000001e) 09:12:31 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x404, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x200, 0x0, 0x6, 0x3, 0x100000000, 0x40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000001c0)=""/252) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='comm\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xffff) fallocate(r1, 0x32, 0xce35, 0x8000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) [ 931.123016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.124038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.125090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:12:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote}}}}}, 0x0) syz_emit_ethernet(0x1015, &(0x7f0000001840)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@x25={0x805, {0x2, 0xd4, 0xf, "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"}}}}, &(0x7f0000000100)={0x0, 0x2, [0x66c, 0x31d, 0xca5, 0x773]}) syz_emit_ethernet(0x101f, &(0x7f0000000480)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @empty, @val={@val={0x9100, 0x5, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x2}}, {@llc={0x4, {@snap={0x1, 0x154, "2b90", "c2e66b", 0xf5, "83c64e45898304619b9ba4295d1b992ef836c2c08c1b3296d0d32e314add93c0bfbe1124ee60ea1288bdc7713ff2d1b17af3820cf10dc957829a7c2a1172d0e9ba0a41ee1d0984a8c198eff3c3c482f67bb73aa6c4d756ce96818388dbe9da30da93a5473f964f4f2e82320c1751903b08700b2def49d6260b7b63f67b90f6878c18f44987e36d153525b5e76a35b5ce6dda5e19bc729973ab22fa9cd0b6cc07d5127cfdbc477cf8af2971fdf2455ffefdf231b5b28f25aa0df5951f602a46a71682d444e2da1d1e7b2669e37872abc233e205010b53b13b4a230de9e42ea093c2562996735baab77f3c2d36b15844861e50e31f28e32b150af3c6bc20b379cbc0acbfabb7be2e359722c76ff8c5e2fcdabf6a5e849e3af97cdf87623f783742ec0e52968167c89a44f185997b52f080c8c7e5032aaf340662f05ee31b7146f5dc7d8b0d374ca6afbb33cee9ffb21f129d96697805ce0825a9136dca2e23e8fabdafa1e96e7864a35e856471a0f55f76a948f0c295b1e16ad94fcf31bdd89178ecfbbdfdf5b03ca31a99575a2fd4e018a0e7a25640556762c6d81d3fce24fd591964bdb60e13368ca0f1b8f2ec911c96622aeaa7f32d87e6f16ad7cbc6a82f9f6072043270dba16b8863751455a7263269ce8077f6d82bf3042bbb63edfe74545d35c674bd418fff2e563724b1a994ddee60bf518b76d2e9555eb9fcce73764221f32c6d00ebbd3095355caed93fe79b752f5b89f823b2ffe6904b9f89b35cc89585d24a65dc57ee988a901e24f431bfccc35218cf727e36ddc6c22dd5ffac0859570b99ff61a058179e08e7f78ae7dd8b080e867ca90f8d1a8868d5a2366ea3d9ecdbf2fc092fa3c14e3ccae6c751e03180702d05a10e35778db6ae4e34b51e34bb6cde237fc36a28a1c10f238f8a0b6b6f07ae0abe08be3e96c468cc00bd9a22e2d5c060c5fe28fbb5cce004511a7911540b818d65e2cd0d237a93dbc7c2f72a0872293d427cb5682376ef1c57e337106ba0f47b4602ace6ec5af0a44c2eb34b5e18075b64ee6118b9122598a2cce12ebb4e83e757b53a2129f308da7db069ef6b5d7c98076f8212c75bac422e72743452a8defc2696ca262b54bcd820e7fe1d49743d6316412d265073c31234768faa9b86dd9d1717a111a674744dc487f416f65ac6737a29fd730bfd73861a85ca593c77337d2a77ab4cde5b289b7056a8894bb3c645abdfa6afe2f8609b85334963444a5f913703ab8248b07c431e0a3eef8416f195cd3b5326fc2732013eb47ee619bf978e5785255a8784dc8069846689f77c3ffbb16dc4f20c7fc41bec135b308c5bdb8e68eba73c6880fb04ec4bd828b23e7afaf208405272951a883b3d6c401acb07da1fad5605385433c7aecfd033cd6996a4b7ea1c463d4689c58464cf9aedb5595dc3c6b43a36f9e14995fce646ec725d961ee3552cd91be09af7141394d91251a920ed60ecea93225471cdd2e6388419ba9d911f2e9b3faa63ff5250cc9ec16b168f094658e1b360c18689d3c57010441f2c1646f849cb251ee1a27655d648e53d45637f5c2c07cce7fd5ca6be86a9771f3a5a0de0a88c3467820ccbd8e5d4aceaf7aac637fa818113f84dc8ce358eb03ce8259c361367d47175ddd601429ce6631304181ae929fd32ad470dd6f2b3bef92fb09dc4626e7c6768470f6f987ef9e90a3e884c5ae222fb898fec470b7f57e4be0bacf6793366c355cd7d5898e0431b092780cd0920e34e3e5a7227acf9ee879d89d6f8c64878c352ba3b3f3a7c7354ac7628b30ba6128a831f87b170ad151e5becc26a0716fd32640f0d3b526d00c278ebf179a66df7a75cef3e1c06034f9426d6568462d9af7937a8de3d872cff60bc4a780b888ce3f692b29dafe5a61dcf04f122006b074b038e68b88f14f4f89bd567386feb52a6a3cf4b92e1b352e1edadc87646b8d84afa597191f86664a69eb6058138356465554e8029154c2238c32b25d117abbe93b68988f86354132cc7538a3742ab88b499f969f4cc5b080f608d117824185cb017b778a1494d2530e870dafd7b1f8a0aedbe10d15a235ec3a4c8b1ee6a45ba7ea82ed3f330926b108ee86a8ef4a6f67784cd93bc016f8a7511575c4d7cf43c222202bd408ce64487460dc3e35d7ca3c8e247b84433bc7a7725c270683533d0c2ff9ddf4f130c4b3c7e0a03282bea021aea7e3d38bf79cd68f2cbb83e630ec0f533e5c82f58e70edd6f427ddb8fd896a15e4907dcaba71dd1b74bd991b6511252685b614c8a653f03e096b82c58fa4c51e1ff74afa401718a167f2a93118bcbec9eb7e3df6cf304fc01db0db560d9da2dbbc82b58ca7d7f1f432fd5341d77e0c864a79f4dc8d7b839c7cc727db2ca0c801a3f5d4d6974983258dd9a82810ed0a7963c6fbfca14414555c30c6da52be444ad735e3627f3c5456b437dbaa60854f28cf98ae8b72ed048bb4f8fe8e9ecc6ce76f5f6a129bf42a8f9b484a0a25c7b67ec62a395fe9d55ed8916707737a6f16ecf6a10933240a53db6f7aa8746ccf80a30295728dcb1b56381644bbdc31755cb4b8f89265b92642ffa8ab6f9a25e50c570b7fb95d19fbce871194b864884f20f348d57f0dc52d6957bf81875a1d7515af319844717271b727e2e748c9c5c649cd587e213bd387a5e5fcc5823336ff77eb6f00caf02120134030270a43a7e8373488df500e66f439923d73292173a89546464a669e0f77cdfdc8ea8e1bda95bd75a17454f336ef5873eb9ee73e9ba160f0e83f7ec615d6c3408c015096ed3b47476e2ce50721df62ef21d3953257e76df9d1f05579c8c9a63fb71c4b5f00b6da9410d229f35d9679374e020a693a77f7d57feee5af63ceb09fb83ebc74b2a111460565670f107acb57b9a8e948f94560826480b5ae058708dad91f426a7d0d6e5c840fbb14c3b745a2c3252b6027d95fdfa1f82bab9c7a3f2176519aba098d6d5930474fc055b15ce40ce67c87a84a61512f1cee4d720d91ca23fdb76f244a033a1ac5db803919f4035ef96a9c06d1e6339b4d7f61f0875f96862f5830d358ae1fcf329cc29cf7af400bc41d4b2fa74b65811bd4ee8f44db2dba1b2c16baedce89d6c405210fdc8342ab51f5e32cffcc332bc64cfb47271d51ef7e5476d350bf70f83339ceed3e782b33254279539bf532b5ac13a44771af70a00d29a2c00ab31a7c977cfd41cabde93d0a6e22dd0d3d151e15bea77ee132e5fe75ed3719f289abcb44b57cf8f6f44e796056dd51cd1a750d0152185334c0179880833c074d8047c847e334da69ddcd12b4c9a2efcc363de5229b2e01c842fa9bb1b3ba2c94b0cf3f1c0ab79fc6f9ca79c06bb071b00c237379a729a5a499fe4b0469e6e6bf3767f228401247c5e90134dc62243ea4fd05df8d53a69b8f420a580ac5ac115396af2c3db3289833870831e5c98e25dfbfa99f889fa6ce5b8ec0d4c428959a50aa844af019aa0be8ac9abf4175499bc08d00122b357792b7047629e42bcbb976cd24a14cf21082fd0d0a2761a18b664b4c2e81c3336aef008eb8524d68ea619ac08e1215aa7aa87103ece3c92ead5b65410964e3358c651fc876c3bb1638c88a72ee996308e586c7551e74e5a478d87af361db4a1adb43bc37704fd9f74408a9048891f21873e7b623f1fb3db2db13653762381db1bbfe809984d96e13ca59ba6047001f25e8c47aff910ca62aee32246a30be14bb6e765066b20936452e5183061188da78b794710c4397245d632c57419be8b7c655995090b2108736df219d0171158aa2175de132053f836afd757133389757e95f92c7650d59ccafc30b8328eff0df58e5581b4f9ba7514bc0e00ba1c991294d8ba7adb2d08876b099839efaa7d5edab6e8186ca536f948022ad9fba687210aef297d28383398fa274e4046b1b512e85c0628e409a7c6f889891acf041a9e6f429cf73aecdf81fdfe99b29ef27cd6a044558f85273d8c99e433884bd9eb4d66e500ca429448cd95c77c997fbeba51518f819cbe76a9582535ad00debca24b5965ff59726c40f24d082d5d67fb3f9b51b0376ac69d69f3780e0c796df7e5cbec6a4c9f760fe06e9dd34e0bbc035856391b4557a9ed012500396eb7c081312eae2dbfc6488a4c41a6054a0bc9f09d3dbeca0bf771db366ea3a26ab67daf6a3a0b8a3efa0dbddc6e33d978236307244a20f79169c91decdb57d217317b6ac699808fe99e2098aa001483280177393e1e13b855180aee7acfa9aef4e7094ca35298446fdd391126e25309186344ee696254937361edab578f30dc854a3be0a93e0c5442bf14f255e950522e93c214b41b38100026c1e5e0f7d697baa2829f15302e196fc6d6e7c57f48547ca05a96eebb6e6e14d09be40a62e54c2c315c68dbed87ff7f8987439a80e6cb4e5a09bfddfcf204ed0f9741a8d2dc23be826dfe4973f3170133f232d81b570496b3a8568e165945d6c2f15e5d3bb52b5bfe42dab8f904ed5609ceadeba19941c4ffff4aa053b6eda82106683d276f583b9e81ec7279587db21590bf7118aa493e10baedb05c9998d2edf31e873f1d17fbbec76ee97000085c97d4e9b0502d3deb479294f76d25fad7f9635a0befd646489c1a35c4ba836d4d5f242cf7ee3d9cc8c4ff1ba54d740e2283fe8c095d912b612c96ce63e7f84ec0e9b2c248218c6195b8d93aed9fcd62d6f6b8cf676aa65e52e8af5c2649f4f38adb53c96c4c006fd0aa4dfffeefe61732dc6c0ce00e82722e7746e1b8f9ab98ec3d09cf7d058a338d73e2117ac34a8d2763932f09930a70e51e5f235d4d3e8ffc28fb77c3a6d176d55d74e9d4e9b749a7865a2fbe72008a8ce28d93a3f4fb5a101956392bf30332c5dbbdfc2b09888589147f780610d64742a2bca296fab9b5461b8d465a8b309db5a39ac087c32990e878b2f9b3e926b6c2ab07a0b99dc6e63848fcd48c25126b23b7c120c5228b465f0685d50fb18a9cf5abc8c4c2a69ae4c12083af9cb2f42151118db87383848f64bf3a5b9a9a90a75245736955b1d8b2083040dafa3d36094ec434bb1884df89b789079e9ea0f3a39210229fd36e2fb600f78f62d07beece60c922ee7a3a01490c95cace9815faf557daf6f052963356f56cee92ef33189ad67366af440d8d1efadae9615eaee20f7dc8538c5087188c4c3c55e9185ae63803a832143f965e3fb5bd0edc6e993d8b1857fd89190303260f7e6e20ae07c77c2ae7797b4f1263102babfd619c103f3063224498eab208080f11571af9eddb25a24b619a9e88fea7c4de5d351937aeef1f23a1e3337bdb2bc4daaa8a150aedbd6a6a0295b613e29da829a75a1041516e6965917919ca10e14f2eb47076a9f24f9bf5f6691778944305c788c1d70c0b30c0d2fe0031cc0036a4f47fab7345e3cfb70c3324c6ee49aba0fc4ec819175531c816331d2b198c3c208c72b8efccdddeeb25a51a0cf96806af63529b51a7c2366b7affe7a8fea74fa831c2c1bcd5b1c2b956f59c3ec7a556d9f3f8f7f0805e79c76d41c9973c5b4d08ac9d3182eb1077c85603412b1de9ee83050bbd54beb93821b305595d338ae91a09877a286f080e356557fb79001a36037b8a4f2f317af5f470c93274faaa504d347a7b662744cda34633bf5c3440306ba34061ae035dc143016fbfe7dd18facfc05520dbeaad844c940c76cdeac483b21f0969fd15957aa0f7fea68ab26df2b6ff63d24d1374174a2662bd82a25099f6cfa6ba804df034f257978c63d02dda5e930de34c07a9c0d45a9386c35b5ce9"}}}}}, &(0x7f0000000140)={0x1, 0x4, [0x6, 0x61b, 0x2c8, 0x1c8]}) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@remote, @remote, @val={@val={0x9100, 0x6, 0x1, 0x80}, {0x8100, 0x0, 0x0, 0x1}}, {@canfd={0xd, {{0x4, 0x0, 0x1}, 0x2b, 0x1, 0x0, 0x0, "ecdae21bba3ffd69e4f62c6cc6edffdeb3747c06526f60bf159ae6d1b66b87f65ff0fabcaed867de06da1f3af87d6fb011a096d8f00efdb769c81182ca72b8dc"}}}}, &(0x7f0000000080)={0x0, 0x3, [0xf38, 0xb1d, 0xac0, 0x73d]}) syz_emit_ethernet(0x6c, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "599f1e", 0x36, 0x21, 0xfe, @loopback, @loopback, {[], {{0x4e24, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x5, 0x4, "1f6afb", 0x4, "f33c3b"}, "a9d200fa979693e90bc10af3df3b56b5d719dddf1f5c3556d323b39696299df0c16669e1b9e9"}}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0xdaa, 0x78d, 0x760, 0xc48]}) [ 931.148770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 09:12:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:12:44 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000021) 09:12:44 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getuid() dup3(0xffffffffffffffff, r0, 0x80000) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000003c0)=@allocspi={0x34c, 0x16, 0x20, 0x70bd29, 0x25dfdbfe, {{{@in=@multicast2, @in=@multicast1, 0x4e22, 0x0, 0x4e23, 0x6, 0x2, 0xa0, 0x20, 0x0, 0x0, r1}, {@in=@local, 0x4d4, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x7, 0x400004, 0x2, 0x4, 0x3, 0x1b88, 0x0, 0x3ff}, {0x7, 0x400, 0x1fc, 0x80000001}, {0x6, 0x2, 0x1}, 0x70bd25, 0x3500, 0x2, 0x0, 0x81, 0x40}, 0x3, 0xb}, [@algo_auth_trunc={0x134, 0x14, {{'hmac(sha256-ce)\x00'}, 0x740, 0x100, "cc5cf2a82511ee6e83fdeafeb3b419b2eeab021447e3da15ab99fc6690aa744b702b2e95ccca2552a7d9ac442c72ea6e2fd296e45558922c0a508feed491e517acd0fc8b26b602f044bbabf34752869380b1a22906578f1c64edff4c76849e7fac7c2ab661d6b25cad0cbee96d37f1aeaec5584bb98d9ab87dbc19ba880df4112b296a8e592804294045b70f851d165a933653102c633efc2398a52c3b046fa3c453f09c4df830fa9684c9b155aa7ee9e9f07136b108fa11a3289f21a4afe48dd743b505b2e745c0bc57ed824ee8938f888983cf2c83b2b15900c680f94a76116d016b638c58b7da"}}, @sa={0xe4, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in=@private=0xa010100, 0x4e22, 0x9, 0x4e22, 0x0, 0xa, 0x20, 0x100, 0x2f}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0xff}, @in=@private=0xa010101, {0x4, 0xfffffffffffff693, 0x40, 0x4, 0x8000001, 0x5, 0x5, 0x2}, {0x4, 0x2, 0xfffffffffffffff8, 0x1}, {0xfffffe03, 0x4, 0x4}, 0x70bd27, 0x3507, 0xa, 0x2, 0x2, 0x5}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2a, 0xd0}}, @lifetime_val={0x24, 0x9, {0x1f, 0x2, 0x8}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}]}, 0x34c}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 09:12:44 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002e) 09:12:44 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x20010, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00001e01000000030015c1e10000030000000220000001dee8fc139fc92b570000000100008027b2e454bba368fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec46065"]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000480)={0x0, 0x2560}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x20000004}}, 0x81) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) 09:12:44 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 46) 09:12:44 executing program 4: madvise(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0xa) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) fork() pkey_mprotect(&(0x7f0000cae000/0x4000)=nil, 0x4000, 0xc, 0xffffffffffffffff) 09:12:44 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 45) [ 944.138783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.143125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.151071] FAULT_INJECTION: forcing a failure. [ 944.151071] name failslab, interval 1, probability 0, space 0, times 0 [ 944.151095] CPU: 0 PID: 9322 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 944.151107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 09:12:44 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000022) [ 944.151113] Call Trace: [ 944.151139] dump_stack+0x107/0x167 [ 944.151162] should_fail.cold+0x5/0xa [ 944.151184] ? security_prepare_creds+0x112/0x190 [ 944.151207] should_failslab+0x5/0x20 [ 944.151224] __kmalloc+0x72/0x390 [ 944.151250] security_prepare_creds+0x112/0x190 [ 944.151275] prepare_creds+0x452/0x5e0 [ 944.151295] selinux_setprocattr+0x354/0xa20 [ 944.151315] ? selinux_shm_shmctl+0x180/0x180 [ 944.151347] security_setprocattr+0xb7/0x120 [ 944.151375] proc_pid_attr_write+0x340/0x7d0 [ 944.151393] ? rw_verify_area+0x11d/0x350 09:12:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x20000}) fcntl$setflags(r1, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000500)='z', 0x1}, {&(0x7f0000000040)='Z', 0x1}], 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x74}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000100)={0x0, 0x100}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x10000132}}], 0x28, 0x8080) sendmsg$inet6(r5, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140), 0x92, 0x4000092) 09:12:44 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002f) 09:12:44 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 46) 09:12:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="696f636861727365743d6973cab63835392d312c00"]) [ 944.151424] do_iter_write+0x4f0/0x700 [ 944.151461] vfs_writev+0x1ae/0x620 [ 944.151482] ? vfs_iter_write+0xa0/0xa0 [ 944.151501] ? __fdget_pos+0xf1/0x190 [ 944.151521] ? lock_downgrade+0x6d0/0x6d0 09:12:44 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000023) [ 944.151548] ? ksys_write+0x12d/0x260 [ 944.151574] ? __fget_files+0x2f8/0x520 [ 944.151615] do_writev+0x139/0x300 [ 944.151635] ? vfs_writev+0x620/0x620 [ 944.151659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.151680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.151703] do_syscall_64+0x33/0x40 [ 944.151722] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.151734] RIP: 0033:0x7f2c8f209b19 09:12:44 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000030) [ 944.151752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.151762] RSP: 002b:00007f2c8c77f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 944.151783] RAX: ffffffffffffffda RBX: 00007f2c8f31cf60 RCX: 00007f2c8f209b19 [ 944.151794] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 944.151804] RBP: 00007f2c8c77f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.151815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.151826] R13: 00007ffe799e453f R14: 00007f2c8c77f300 R15: 0000000000022000 [ 944.157240] FAULT_INJECTION: forcing a failure. [ 944.157240] name failslab, interval 1, probability 0, space 0, times 0 [ 944.157259] CPU: 0 PID: 9319 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 944.157269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.157275] Call Trace: [ 944.157294] dump_stack+0x107/0x167 [ 944.157316] should_fail.cold+0x5/0xa [ 944.157336] ? create_object.isra.0+0x3a/0xa20 [ 944.157357] should_failslab+0x5/0x20 [ 944.157383] kmem_cache_alloc+0x5b/0x310 [ 944.157410] create_object.isra.0+0x3a/0xa20 [ 944.157426] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 944.157451] __kmalloc+0x16e/0x390 [ 944.157477] security_prepare_creds+0x112/0x190 [ 944.157514] prepare_creds+0x452/0x5e0 [ 944.157534] selinux_setprocattr+0x354/0xa20 [ 944.157555] ? selinux_shm_shmctl+0x180/0x180 [ 944.157588] security_setprocattr+0xb7/0x120 [ 944.157615] proc_pid_attr_write+0x340/0x7d0 [ 944.157632] ? rw_verify_area+0x11d/0x350 [ 944.157657] do_iter_write+0x4f0/0x700 [ 944.157694] vfs_writev+0x1ae/0x620 [ 944.157717] ? vfs_iter_write+0xa0/0xa0 [ 944.157738] ? __fdget_pos+0xf1/0x190 [ 944.157762] ? lock_downgrade+0x6d0/0x6d0 [ 944.157796] ? ksys_write+0x12d/0x260 [ 944.157828] ? __fget_files+0x2f8/0x520 [ 944.157877] do_writev+0x139/0x300 [ 944.157902] ? vfs_writev+0x620/0x620 [ 944.157928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.157948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.157970] do_syscall_64+0x33/0x40 [ 944.157989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.158000] RIP: 0033:0x7f7b39e69b19 [ 944.158017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.158027] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 944.158047] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 944.158058] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 944.158068] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.158079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.158090] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 944.292871] FAULT_INJECTION: forcing a failure. [ 944.292871] name failslab, interval 1, probability 0, space 0, times 0 [ 944.292892] CPU: 0 PID: 9339 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 944.292902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.292908] Call Trace: [ 944.292933] dump_stack+0x107/0x167 [ 944.292955] should_fail.cold+0x5/0xa [ 944.292977] ? create_object.isra.0+0x3a/0xa20 [ 944.293001] should_failslab+0x5/0x20 [ 944.293019] kmem_cache_alloc+0x5b/0x310 [ 944.293046] create_object.isra.0+0x3a/0xa20 [ 944.293062] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 944.293088] __kmalloc+0x16e/0x390 [ 944.293115] security_prepare_creds+0x112/0x190 [ 944.293140] prepare_creds+0x452/0x5e0 [ 944.293161] selinux_setprocattr+0x354/0xa20 [ 944.293182] ? selinux_shm_shmctl+0x180/0x180 [ 944.293215] security_setprocattr+0xb7/0x120 [ 944.293242] proc_pid_attr_write+0x340/0x7d0 [ 944.293268] do_iter_write+0x4f0/0x700 [ 944.293306] vfs_writev+0x1ae/0x620 [ 944.293328] ? vfs_iter_write+0xa0/0xa0 [ 944.293348] ? __fdget_pos+0xf1/0x190 [ 944.293369] ? lock_downgrade+0x6d0/0x6d0 [ 944.293397] ? ksys_write+0x12d/0x260 [ 944.293432] ? __fget_files+0x2f8/0x520 [ 944.293473] do_writev+0x139/0x300 [ 944.293509] ? vfs_writev+0x620/0x620 [ 944.293534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.293555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.293578] do_syscall_64+0x33/0x40 [ 944.293598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.293611] RIP: 0033:0x7f2c8f209b19 [ 944.293630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.293641] RSP: 002b:00007f2c8c77f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 944.293662] RAX: ffffffffffffffda RBX: 00007f2c8f31cf60 RCX: 00007f2c8f209b19 [ 944.293673] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 944.293685] RBP: 00007f2c8c77f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.293696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.293707] R13: 00007ffe799e453f R14: 00007f2c8c77f300 R15: 0000000000022000 [ 944.321516] loop2: detected capacity change from 0 to 32768 [ 944.360745] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 944.442538] FAT-fs (loop2): IO charset isʶ859-1 not found [ 944.465752] loop2: detected capacity change from 0 to 32768 [ 944.470398] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 944.554566] FAT-fs (loop2): IO charset isʶ859-1 not found 09:12:58 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 47) 09:12:58 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000024) 09:12:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290300000000000000000500"], 0x28}}, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) r3 = eventfd(0x0) dup2(r3, r0) 09:12:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:12:58 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000031) 09:12:58 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 47) 09:12:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffff0000000000002e2f66696c653000"]) io_uring_enter(r6, 0x647c, 0xad9f, 0x2, &(0x7f0000000240)={[0x5]}, 0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12]}) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000080)=0x3ff, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x800, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0xffff) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r8, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r6, &(0x7f00000000c0)=0x80, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x0, 0x400, 0x1, {0x0, r7}}, 0x0) 09:12:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) r3 = getgid() r4 = getegid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000007280)=0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, 0x0) syz_mount_image$tmpfs(&(0x7f0000005f80), &(0x7f0000005fc0)='./file0\x00', 0x4400000000000000, 0x4, &(0x7f0000007200)=[{&(0x7f0000006000)="17a97830648f778ce7ec9eb15ee4082dcf030ddf5f86f2a6698e8e6e6c8ad26d3a31d1a947a79c4eae3d7e31cbda57beb47c1beb75023ea1b1d4a0f7af4ae0595daec4b271557f22b50af4513b77cc9199", 0x51, 0x400}, {&(0x7f0000006080)="63813832eec580381239ba45910d092904701474f15a65f9d3be04d8d41e3a1486f1d6e66747bd9cc5ff029ed2ee829e4df3cdc640ea36a85948999d14712ad90d47eb9220302cfb41ac9c19362efa9c41902c06a6182e567c436f201db37c47508c2b5ed77626da0abc79eae042d0a72229018428c0e22a5ffbcf5c5a5c04cf320e5bb4ee62ee1e8cff54d621b83995", 0x90, 0x1}, {&(0x7f0000006140)="6fc3c19d94f38d6a1d93a1e899e6269f3b0f0774e2415b16b5a8f764c3f17303756119cd8138be00c23a1fa06bef34cf39d07fe8d9b656be400c493635ce7a0997d9b55a4ac88a7ca812751694d291df41c30c511fa66c9a0d8a70e7f50dff4410687f5ce9b6d2ef92c363d83ec6cab0bdad0d9e8261caff55234383cb6f914ea25d34420b3b40da4fa0bcccd95823cb3106fc166a81e91b2cb9d49ad923faf1b73c4ca52dbf909967a61e04f534b69cf62830fe1f67d32f6dab0d668e57761e80230468d6fb5858b50e5fe1a69f9f86b1342ae42a54b1d732eb0379dcf8e1d1c2cba92d0b63923ab52aed1e7d160db2c0d67f654a95bdf1673612f5c0056bd30ec7e999b82f152d5928549411c35d8e138edd35eda93a7796c1594375c09f9373061aa400f8df902d9e39a65df3684d8b74297a38ec719865c65a748f60a05e6206cfe9993137062bf5c6ae6c9e896fea08e2f2630113de638f497615222b3c08c2aa1e5608b670d5559f5f624724a9bc40cc0ed3769dbf8e432147e06b96cdbe9c0d939129cb598ec490cd5638aac31f4ca5dbde59e97e59816c9723980c9fe71d7cfe540b33bdbb23691e7a3280a9b569aea22550759b8eb8e195d187cdfd15235c018b1f736393eee33f5554d8af30b9de49fae304815c2523d4d20004995a6f3902b8498ec55d23c2eae123b57e96c2cd4800fae63087a8f8b45e684cb60b09701c79bcbf97ffae21a415f1326614ba6302cfe629b26eea555a3a29f1b40a56fdfd53a02682c822edb71aece67a9d2f80048542c886b357a0bdcf1ed693ac874386d494f041cb74220e63f14fbeeb615aa60a516bcc9b004c9643a65ef932aca576e6f06c30710477e35d3bc2674b0f378c5fb21f6b19ccba6251d54a9a0ad60e4d47927660f9ade48d36153acf9e3e85e74ae7e70b66d8fac59cd041429cd5a6efa468d69191cf970069b4784d62f46f9ba5c0a640472c0b5e2c7a76911134c59758f740075ef1911f5c9b388bab22c2df62551fc987d672afafe7a27b0c64fbe9843abe542119f1fd2df5cc36a05686a384a264bb7f31bd9b0ddb146dbbe267fb0891934ed6a5aceee8150543df3c078f834deb2d420c15b0fc8c0fb28919233afd283edfc1cecbfbfadab0a2e8353b28520478586dcb9cc9b0fcbea845465d8b68177c7eb1a1761ed3ddd096692ced8e1b92865777de69e314cec55d86d4fb12d51f7ec5f4f0945d5aa134728810e2921f206802f2ca47eda3fccf366d65b437843e424d0a52731756b922d60e3450463ab82adc26532173edd6749dd56e271e1881ee13012d86666326402c4a7ec709f1b8473921db45ac2395f080100d12c5a45b317b96e78c6da5502333d1de43990ef6b7ce4b8038728af369f628b8b653082eafad8d17a4c8e85aaac2c7b140da426eb917d58db015953995b4531c55dbafb75f20dee85038cd8e84cad669848c4c7d2c2206b73b7e75b6131a663b3d92aff7b17e1b264c6a04d53b406b67631d1e02a99b04e4a29efcff730a122137f371e1c9d67b2fb57ded667a546b138f5d854f480327aa55d5862093dc9fd948664adb29850699837fd44635da18ead6cbf9ffd2ecaf494acf874c553fc9850d353345a23024df8262da89766c65ed6939794dc5f6a4ab1042352c4ccf5e52ba25db2af9f550486284643c955fff30143170844e8a144dc3ca0dc22073d9eff4adf95de9b83e98bea2e8e5fc3b8f47997177c3c74b47504add43efea2e09e02c8a2b8456b07b2f0d6e87c5c20734ae9f013bf039158587dd40992a9d46976da1e54218004ae66d8e1ac90e87f8a8c2b8fa9c55f8a74cea467cb2441f96fe9c01dd848d858a1398d69819ad42be3d291aa0e8cec038558ed5fb51a75047a56751e758dc57cab5f6e1cf94c835146199c5bc96d59c480739cac35901d33637d20f97ee199d1fa9d4983eea8b647318a669ccb436086c911b497f0be4f9bff33b24d4f338de93ba7a4545a937ef3e7404ae6039ab9d0ffcc1a8325e9832bcb3c379d251f5cc77971bc9e31f06c3b6fc4be0d6b8628271d3ba2b76532a9a1b33fa43ea51ee49427aa8ab1e6b4235a883bb8114cd625fdb838586619fb71b6aa0447f1eb0ba10d29eba68a19766c6f9625a26664256617c039da2fb45fb6398755bcdb8822a043a420bee4167da56e7c55f77929d895221262c19b1b0ba8e9805ba885c56cdd08e8fd857ecccd677f17441350fd33b5cd00b4c0b618b82a46b77f47c23ce977b4e50f956be56fc6918f9e641945611f32d58650b7709297d8931b6747574f5f67a3058719851decba99fbc5f5c151a3ba4d6e4520ef5fda5cbae553919c465b52493dd864e5446246527565842d79cd3e3785d1941441d41025facf81f410281193fb13e9598d9ec9dcf4220ff219af9f321ecf04f04b3e2629044b22bb1e1e8890a5639ffbd8904b2050ac53ce923dbf88cc578326ac182fe2e91f0b559709384ba05e860eb162481580a7df86c76b0b57daefd9ecde435244b1d8002913c4cb2c566220738db5b62c98a8d3d3cd0b5188806d5fc04874d30d7ba0c71ef864290bae4cf0296acf61ee09f2cff1f1d1918dedab69adcb70581d1a0cb619429ebd8ff19bb93274e89d81916f5b81408ad01d62d3af0e8f34201869acb84ad575cd99ae680d5869122264be9b111cb6c9d426577d424dc7174ca46a099e4e99aa54f3cad7c6bbb37bce2f4c9f621e7859e0ab269d9d8f5a58ecacc783eb11e2f6788d9592dad0a7931a39b25698ef5dd4b8952097598976c0f2470dfda0f19beb9a3c8ba2adadb6826fb09f9116661b94e79a454d645e4b648f7ee2adfb874c8b69673d10b216959fff702dcf22960f7808f46633846f91ed2d844d2dccfee38ed47d047921ca4909a316f2cf3386513ae1f6cf1dd7531d2f78f5c0d74df2c861330c13324413f392fd1eb58cedad34f62c51640466ebab21796625fbdddb930efb7d3477b4d00a2b167dcf8060eb8f5a6ef75a214018f8ae7ff34e7cf78e31842f00cc56ea1ca3fdb0860fd2d680eff788205b498308f142a27e0d44607de9cfb2c1bbd63a1fb5463e90b7cb06c1f456bb19b480e08ee5fa333d670edc4b963d3ee04092730d45fbd87b00e0c95c3125cbfeee4d137d687036259109bdd84eb587be1c4a2c6766315aee0d03bf02a54628f871ac81fd88033d5514312d5cb16dee1572ba32b8c081c6f4e476cb75448ab2ef48d124f3fab5b5fa4fafc332ce211bf4085f9d11fe5bba21a65d2fe69e82c0e34c09796d087f32a762158a4194d9cb876a6f19aff3684fc9922495e02087f9ff639658e03c2375e63db0e284b66d41ccbfea03185df346fa1e05829536ae56d66d1e5483136c7fd855cfb974b04a76b5697aa4cdceaecb08ac2240c489830cbf6e2c17229176fb2c26d6e1cef51903367d4b62fdd85330ac60dd36624f8b4da06d157405900d53589d7dd44960b1e6bca57db36567838bd4acc2901cc6664a91c3ff90f23176044217b92baec1febf6a66eba57c9f9ad4e4c0b216649212ebef3b6e97e38eb2e5c4f79b4248ad0a49f3d048684579463279e4764fa5a6a21904a310398d01ad3e8e88cf88be6bcd18488213a1cc9704ef7840d89f111776c64c9b61d913d2f0a2c81f574ebbc238bf4c85e9a72fef782fd238887b95e68c7410d4debd551472d732779dbbe26b99ef271015acfe802b93a3a55056f20cbf51a800344994f58b779427eaf466240b2b5b4f8ed89d9cb683629789460abf924145c330ddb1fd37949bdfea151925cc8f2fe1b2401ac59e95a0b9047416c5116a673ad4371e1f41c956a84ea8d9614b08821811f58e20a68b12d90e595393cfb930dde586ac03d776da419440c1a0f56716e8be1c34eff1fc1414ee4a1ba65a2f1aa3e9f496cf3208e2392120002454e4a7b5758e4d29cd439d8ffe6d46af6813fe84c0d74e4fac83a988c0c1d5e2e5926997161d7f88ea183f7f521bb9d427cc0695a5911a4ccd3a80820ea0ddd6af34e296b7d93f553deeafcbce59f401fb3130f917e73f332ccd340365d53d03c491f6cb07878dd6db77bba93303007d1e8927f83509a7a44615d3536893151318a369f79d4647f0bfad2de147c192e8f4fe6754b8fbe11ccf6df58811daeae48b29aba4dce0c11a3d0136c075ca35911fcbe2b64aa27c3e4b74c3619b992a8416ee1a414dec8501664be75c2ae3df87b81165906ca508fa907ed0e2928309ae1a8512bb72b3455adee022fc9268da54ada4d5430fe0adbbdb1e12eaf6bd4f24a9809c6616d7ccf9ffde79cf6f837f8b71f551bd297b1e5a8d15d10b6447cdf88614b96c38263ec1cb71206c28dd984c3d77565928185ee59d2c3ff8aaf0edb8939222e23b2220a511b1fb32986342e0c28e70412eab57e23af2e64b1e1706fe4bff0189615d60757596b1ba530b8bef2cd945070494892b1569f08b21f16ecd85671b4baa0190ac93ce66abe289aa9be9554ecbc0b119489377cc75300393cb984184510be8db593ca1a67e03b7c167589bfe8a62220543f16f78c47c6835df7046dbf8633922a7d1ef1a13b88d95d9d5beee5e9ad2e21078fa63c2508107eaa31360f4790a31cf8e03166a289d42abef5048539934a08cff7ab01d01ab8e96e3cd9687832aa63c418bc7275f1d82609f00cb609d34f70eb35676b86848f4ca94040d73a2b7abb4d5afeeef64c7db9db1c6e2aee2e43a1648a5c2c4bcea7e9db3445004656cf850e1a1312e42b69737d7ae461ce6d1f152be03eb2c62a89797c56a33e5cf7bd51535d872d4a854c66f024a73c250afad0d091f2f727c28fe617186706b24742d734344d942a6dbc596898c0cc0dcb44e6de71440655cb05059d0cbebf6950006472743439adf24059efcd93a9c383b1c081670b50c5340cb96094f670601f008e0bbbd18bbc77cd54468a84f11020aed78cda53282b6dda0ae8d4fb68b94e2d391bd96dbbb93f37a0ce90a6829f05a17012d839b38450381cdc59b0525445a5eed8e263b25d7473cae62c683e12a0f58e1a114ed52c08991994ea952095d22365d5aaab2a1ac47c0bcdc09a47a18bbb24c23b68281727e65f612d4726552384f08f66b92552d874f2c4288976ff51318d36f048c37eb91eb30c874045cf4a3cbe13127c34abfd234198d27276d60ddc6523b06d3d71c765d5c73bbb6bbf89f71788e398b485014752bd8c7dfa8738369baaf834d843384945928bc7e47e2fd69601fe256d8d89fa122d8410d1aa1fcf2313a0d8e61a1e612419e0e52abf998b0819ed83b0817df2fe86f4e566baa9b1b1e5aac483aad364a5abb73f3e912a2b781373451250c51798a03dc0b874cbe2b77198a1c1bbf37cf124e6d5b7402dbb343b2d3f19ee0067ada69c415774749ae505d06eab78e1d16bce53ecee71a5ca73ad0cb28a5d0566377583d07fcec4f32bf47be7d1332b43263c03cfe1d745a7b405f3a10ab2eb51a45465b280baa02c53e83b67893f0bc2e22f9d9101a8a9b4f5a5f263bdb556df27a4183d4a181ebb28f47b7e03b93b49cc81d9a9ada250c92abf219f6489ef8041f13665aa99022a5ba1e50fe4832cea2287038dc45057bd45b5bd0b1903adacc6c076ed95519d4501763fb0eb9817037668d1c26dc8677122809bce236c67845249c01d0a34ba6a5b9a0be4ab7310640916edfa98aefc80e6e6333feef1662ccc3e6b834c0ad61009ea577a9add56cab4a45ffd2a09742f552ba6d14fb3fb4d6bbeb890993af2ed3d9c467d", 0x1000, 0xf3}, {&(0x7f0000007140)="767503a6a1d65b2b22463517f55345fd0e207c574e0034ddf838104f0b70ec89cdfbfe0f046236a0106acb11b6e2856fe778b5ba8c3ea6265bea072dfd05b707c6608e04354bedc5fdb3d5a80f97dba4a29e37cf06f4c88fc64e7073123938d31d3c8491d29fa599c73546178c1b204a385e758b652749b68b6f4ee26e395dbbcd1df3bac25a0a62bcf71fae4b107a8c1581e5f435fd8189d22261b84d01bcbce08d", 0xa2, 0x1}], 0x18, &(0x7f00000072c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB=',euid<', @ANYRESDEC=r6, @ANYBLOB=',pcr=00000000000000000039,permIt_directio,eefcontext=staff_u,smackfshat=system.posix_acl_default\x00,smackfsdef=\x00,rootcontext=system_u,fowner<', @ANYRESDEC=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r7, @ANYBLOB=',uid>', @ANYRESDEC=r2, @ANYBLOB=',\x00']) setresgid(r4, r4, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000036c0)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005f40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005f00)={&(0x7f0000005dc0)={0x134, 0x35, 0x0, 0x70bd2a, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x2e, 0x0, 0x0, @pid=r8}, @generic="0d0a2ca169cc72097a306317d67dbbc7c843a79b5ca7e4b00321ed2ef9d5f7e4c8f739218d46f066aaa42ef95bb5cff045c21eeab3babbaa786053ccddb96e87024ffd1f246594724e903dfe4893df01933da2882224210850f5aecc4577b85cc5e33271cc0d295765a914fcf2a54ea8023c93a9faa087a52b20beabe407d111276e76b1c07fd6b585cabebd42d2ff1fa2c555ee5327c2bc3ae1212aba721e507999f96e82deada1bb339323b5a3b2edb09a0a5a9bf09f719279b1f8e583cbf47b91e5f2ddab1f697b3863956366dfe764507c701fa95c996359f4741f92bfbfbaf3c853521e1973501546ea2ba3c6", @generic="b96cd3cb0b9d8b159e3517e990aef93077da88fec7606a6b39d965041f55eef4b12a93ccff69"]}, 0x134}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000540)=""/171, 0xab}], 0x3}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000680)=""/219, 0xdb}, {&(0x7f0000000780)=""/200, 0xc8}, {&(0x7f0000000880)=""/176, 0xb0}], 0x3, &(0x7f0000000980)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/85, 0x55}, {&(0x7f0000000ac0)=""/220, 0xdc}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xe8}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000002140)=[{&(0x7f0000000d80)=""/132, 0x84}, {&(0x7f0000000e40)=""/48, 0x30}, {&(0x7f0000000e80)=""/14, 0xe}, {&(0x7f0000000ec0)=""/151, 0x97}, {&(0x7f0000000f80)=""/113, 0x71}, {&(0x7f0000001000)=""/90, 0x5a}, {&(0x7f0000001080)=""/177, 0xb1}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001100100000000000000001000000010200001c0000000000f7ff0000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/200, 0xc8}, {&(0x7f00000033c0)=""/102, 0x66}, {&(0x7f0000003440)=""/130, 0x82}, {&(0x7f0000003500)=""/143, 0x8f}, {&(0x7f00000035c0)=""/205, 0xcd}, {&(0x7f00000036c0)}, {&(0x7f0000003700)=""/4096, 0x1000}], 0x8}}, {{0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000004780)=""/146, 0x92}, {&(0x7f0000004840)=""/16, 0x10}, {&(0x7f0000004880)=""/136, 0x88}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/54, 0x36}], 0x5, &(0x7f0000005a00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000ee000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="10000000000000000100000001000000"], 0x128}}], 0x6, 0x2000, &(0x7f0000005cc0)={0x0, 0x989680}) r10 = getegid() setresgid(r10, r10, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000005d00)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=0xee00, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="02000700", @ANYRES32=0xee00, @ANYBLOB="80000000", @ANYRES32, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000400", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="10000200000000002000020000000000"], 0x8c, 0x0) r11 = syz_io_uring_setup(0x3a75, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) io_uring_enter(r11, 0x0, 0x0, 0x0, 0x0, 0x0) [ 958.122261] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 958.126949] FAULT_INJECTION: forcing a failure. [ 958.126949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.128667] CPU: 0 PID: 9378 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 958.129623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 958.130783] Call Trace: [ 958.131156] dump_stack+0x107/0x167 [ 958.131659] should_fail.cold+0x5/0xa [ 958.132186] _copy_from_user+0x2e/0x1b0 [ 958.132720] memdup_user+0x65/0xd0 [ 958.133203] proc_pid_attr_write+0x247/0x7d0 [ 958.133796] ? rw_verify_area+0x11d/0x350 [ 958.134373] do_iter_write+0x4f0/0x700 [ 958.134923] vfs_writev+0x1ae/0x620 [ 958.135436] ? vfs_iter_write+0xa0/0xa0 [ 958.135993] ? __fdget_pos+0xf1/0x190 [ 958.136535] ? lock_downgrade+0x6d0/0x6d0 [ 958.137106] ? ksys_write+0x12d/0x260 [ 958.137632] ? __fget_files+0x2f8/0x520 [ 958.138200] do_writev+0x139/0x300 [ 958.138684] ? vfs_writev+0x620/0x620 [ 958.139217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 958.139946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 958.140656] do_syscall_64+0x33/0x40 [ 958.141173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 958.141888] RIP: 0033:0x7f7b39e69b19 [ 958.142394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 958.144936] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 958.145994] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 958.146985] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 958.147941] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 958.148925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.149891] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 958.150978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 958.154821] FAULT_INJECTION: forcing a failure. [ 958.154821] name fail_usercopy, interval 1, probability 0, space 0, times 0 09:12:58 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000032) [ 958.154835] CPU: 0 PID: 9379 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 958.154842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 958.154845] Call Trace: [ 958.154858] dump_stack+0x107/0x167 [ 958.154872] should_fail.cold+0x5/0xa [ 958.154888] _copy_from_user+0x2e/0x1b0 [ 958.154901] memdup_user+0x65/0xd0 [ 958.154915] proc_pid_attr_write+0x247/0x7d0 [ 958.154926] ? rw_verify_area+0x11d/0x350 [ 958.154941] do_iter_write+0x4f0/0x700 [ 958.154964] vfs_writev+0x1ae/0x620 [ 958.154978] ? vfs_iter_write+0xa0/0xa0 [ 958.154989] ? __fdget_pos+0xf1/0x190 [ 958.155002] ? lock_downgrade+0x6d0/0x6d0 09:12:58 executing program 2: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000023) 09:12:58 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000025) [ 958.155019] ? ksys_write+0x12d/0x260 [ 958.155035] ? __fget_files+0x2f8/0x520 [ 958.155060] do_writev+0x139/0x300 [ 958.155073] ? vfs_writev+0x620/0x620 [ 958.155089] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 958.155101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 958.155115] do_syscall_64+0x33/0x40 09:12:58 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000033) [ 958.155128] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 958.155136] RIP: 0033:0x7f2c8f209b19 [ 958.155149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:12:58 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 48) [ 958.155157] RSP: 002b:00007f2c8c77f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 958.155171] RAX: ffffffffffffffda RBX: 00007f2c8f31cf60 RCX: 00007f2c8f209b19 [ 958.155178] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 958.155185] RBP: 00007f2c8c77f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 958.155192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:12:58 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000034) [ 958.155199] R13: 00007ffe799e453f R14: 00007f2c8c77f300 R15: 0000000000022000 09:12:58 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 49) [ 958.270815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 958.349065] FAULT_INJECTION: forcing a failure. [ 958.349065] name failslab, interval 1, probability 0, space 0, times 0 09:12:58 executing program 6: unlinkat(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x18c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000040}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) setresuid(0xee00, 0x0, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r2 = syz_mount_image$iso9660(0x0, &(0x7f0000000140)='./file0\x00', 0x100000000, 0x4, &(0x7f0000001540)=[{&(0x7f0000001240), 0x0, 0x3}, {&(0x7f00000017c0)="be02ed363a43b06481eac78b74168b8cbcef379d248b4faa8ff2dc9436d17d7eda308a32533f8a8bc600733a11be3f1080e7b6e120443ed0f1aeaa704e82ee6710e11b4b7fc1340ac7837307849d75d7fd8dd754a801d93b7c67affbeecf6d1745a8af00b7662b0b5bd00bde74753971e0a486aefeee99e45a51f33d9188f417f830e15ddf5d00e221b56c5f6b734c01dd74f6587e704573e0834cb2321941f49f7690f7e674f8203c619f06ca31c6f8aa89e9ee4b9b7138981b1fed", 0xbc, 0x8}, {&(0x7f0000001680)="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", 0x13d, 0x3ff}, {&(0x7f0000001440)="901c0c5da76f501c45afb6bbacf7caf62fa669fe8fc238ed8adcfcb514bf5dec84f15e7625a86fb7f1edbf93138c4c8d54e4ec909b8a58a8b45cd72b0df897256a2b77953c94654031638f9cd35d051a727ebbbd696c5ff64f80925c9526", 0x5e, 0x80000000}], 0x394c011, &(0x7f0000001240)={[{@map_acorn}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@euid_lt}, {@euid_eq={'euid', 0x3d, r1}}, {@permit_directio}]}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x1, 0x83) r4 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000380)) finit_module(r4, 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/4126], 0x444502) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000015c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32, @ANYBLOB="000001010000000000004e02653000b44d82fa818878a8e8a50fb8eb8b325ef97b3b6e231822d5b9b91d2ae4a4964305af976c4de8bba238c210"]) ioprio_set$uid(0x3, 0x0, 0x4000) dup2(r2, 0xffffffffffffffff) [ 958.349080] CPU: 0 PID: 9402 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 958.349087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 958.349091] Call Trace: [ 958.349109] dump_stack+0x107/0x167 [ 958.349121] should_fail.cold+0x5/0xa [ 958.349135] ? prepare_creds+0x25/0x5e0 [ 958.349149] should_failslab+0x5/0x20 [ 958.349160] kmem_cache_alloc+0x5b/0x310 [ 958.349174] prepare_creds+0x25/0x5e0 [ 958.349186] selinux_setprocattr+0x354/0xa20 [ 958.349198] ? selinux_shm_shmctl+0x180/0x180 [ 958.349216] security_setprocattr+0xb7/0x120 [ 958.349232] proc_pid_attr_write+0x340/0x7d0 [ 958.349243] ? rw_verify_area+0x11d/0x350 [ 958.349256] do_iter_write+0x4f0/0x700 [ 958.349276] vfs_writev+0x1ae/0x620 [ 958.349288] ? vfs_iter_write+0xa0/0xa0 [ 958.349300] ? __fdget_pos+0xf1/0x190 [ 958.349311] ? lock_downgrade+0x6d0/0x6d0 [ 958.349326] ? ksys_write+0x12d/0x260 [ 958.349341] ? __fget_files+0x2f8/0x520 [ 958.349363] do_writev+0x139/0x300 [ 958.349375] ? vfs_writev+0x620/0x620 [ 958.349389] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 958.349401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 958.349417] do_syscall_64+0x33/0x40 [ 958.349428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 958.349436] RIP: 0033:0x7f2c8f209b19 [ 958.349447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 958.349453] RSP: 002b:00007f2c8c77f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 958.349465] RAX: ffffffffffffffda RBX: 00007f2c8f31cf60 RCX: 00007f2c8f209b19 [ 958.349471] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 958.349477] RBP: 00007f2c8c77f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 958.349483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.349489] R13: 00007ffe799e453f R14: 00007f2c8c77f300 R15: 0000000000022000 [ 958.423199] loop6: detected capacity change from 0 to 135266304 09:12:58 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 48) [ 958.436413] audit: type=1400 audit(1747213978.371:22): avc: denied { module_load } for pid=9409 comm="syz-executor.6" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1072 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 09:12:58 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000026) [ 958.437173] Module has invalid ELF structures [ 958.465619] loop6: detected capacity change from 0 to 135266304 [ 958.495924] Module has invalid ELF structures [ 958.504267] FAULT_INJECTION: forcing a failure. [ 958.504267] name failslab, interval 1, probability 0, space 0, times 0 [ 958.504290] CPU: 1 PID: 9412 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 958.504301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 958.504308] Call Trace: [ 958.504334] dump_stack+0x107/0x167 [ 958.504357] should_fail.cold+0x5/0xa [ 958.504380] ? create_object.isra.0+0x3a/0xa20 [ 958.504403] should_failslab+0x5/0x20 [ 958.504429] kmem_cache_alloc+0x5b/0x310 [ 958.504456] create_object.isra.0+0x3a/0xa20 [ 958.504472] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 958.504498] kmem_cache_alloc+0x159/0x310 [ 958.504526] prepare_creds+0x25/0x5e0 [ 958.504547] selinux_setprocattr+0x354/0xa20 [ 958.504568] ? selinux_shm_shmctl+0x180/0x180 [ 958.504602] security_setprocattr+0xb7/0x120 [ 958.504629] proc_pid_attr_write+0x340/0x7d0 [ 958.504647] ? rw_verify_area+0x11d/0x350 [ 958.504672] do_iter_write+0x4f0/0x700 [ 958.504709] vfs_writev+0x1ae/0x620 [ 958.504732] ? vfs_iter_write+0xa0/0xa0 [ 958.504751] ? __fdget_pos+0xf1/0x190 [ 958.504772] ? lock_downgrade+0x6d0/0x6d0 [ 958.504802] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 958.504830] ? __fget_files+0x2f8/0x520 [ 958.504871] do_writev+0x139/0x300 [ 958.504892] ? vfs_writev+0x620/0x620 [ 958.504918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 958.504942] do_syscall_64+0x33/0x40 [ 958.504962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 958.504975] RIP: 0033:0x7f2c8f209b19 [ 958.504994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 958.505004] RSP: 002b:00007f2c8c77f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 958.505025] RAX: ffffffffffffffda RBX: 00007f2c8f31cf60 RCX: 00007f2c8f209b19 [ 958.505037] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 958.505048] RBP: 00007f2c8c77f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 958.505059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.505070] R13: 00007ffe799e453f R14: 00007f2c8c77f300 R15: 0000000000022000 [ 958.739782] FAULT_INJECTION: forcing a failure. [ 958.739782] name failslab, interval 1, probability 0, space 0, times 0 [ 958.739805] CPU: 1 PID: 9417 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 958.739817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 958.739824] Call Trace: [ 958.739850] dump_stack+0x107/0x167 [ 958.739873] should_fail.cold+0x5/0xa [ 958.739897] ? prepare_creds+0x25/0x5e0 [ 958.739921] should_failslab+0x5/0x20 [ 958.739941] kmem_cache_alloc+0x5b/0x310 [ 958.739969] prepare_creds+0x25/0x5e0 [ 958.739992] selinux_setprocattr+0x354/0xa20 [ 958.740014] ? selinux_shm_shmctl+0x180/0x180 [ 958.740049] security_setprocattr+0xb7/0x120 [ 958.740079] proc_pid_attr_write+0x340/0x7d0 [ 958.740098] ? rw_verify_area+0x11d/0x350 [ 958.740124] do_iter_write+0x4f0/0x700 [ 958.740163] vfs_writev+0x1ae/0x620 [ 958.740187] ? vfs_iter_write+0xa0/0xa0 [ 958.740207] ? __fdget_pos+0xf1/0x190 [ 958.740229] ? lock_downgrade+0x6d0/0x6d0 [ 958.740259] ? ksys_write+0x12d/0x260 [ 958.740287] ? __fget_files+0x2f8/0x520 [ 958.740330] do_writev+0x139/0x300 [ 958.740352] ? vfs_writev+0x620/0x620 [ 958.740379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 958.740401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 958.740433] do_syscall_64+0x33/0x40 [ 958.740459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 958.740473] RIP: 0033:0x7f7b39e69b19 [ 958.740493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 958.740504] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 958.740528] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 958.740540] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 958.740552] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 958.740564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.740577] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 958.884962] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 962.991508] Bluetooth: hci7: command 0x0409 tx timeout [ 965.039505] Bluetooth: hci7: command 0x041b tx timeout [ 967.088533] Bluetooth: hci7: command 0x040f tx timeout [ 967.884735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.886953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.895692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 967.915857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.917729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.920505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 968.092044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.099972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 969.135577] Bluetooth: hci7: command 0x0419 tx timeout 09:13:21 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 50) 09:13:21 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:13:21 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000035) 09:13:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="6c42b34d541c8ba15a7548b966278e0b9527b9e3dfa1e5701dcfcb3d344d328cab54f4a08dfe30fe401de16db867c4119fc889aa07725abbb8e980de49edf6626062dcc6dc0f8277933bc5568a95935077007356f00db9c259e490ee32f527b30b34a3ea02ac8ac27d9706952a6f5a68a468f0c17edca465c9d679dcbc228ce9992d718915a562fec8ef1ee073efe4629b9b1be7fa5d4762b963569a77eb3454b520339ff88e04688f0fffcef11feac2417c8ab2380666cda07c2c1f0fdee154cf94"]) io_uring_enter(r6, 0x647c, 0xad9f, 0x2, &(0x7f0000000240)={[0x5]}, 0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000080)=0x3ff, 0x4) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r4, &(0x7f00000000c0)={0x80000000}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x23000, 0x44) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) 09:13:21 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000027) 09:13:21 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 49) 09:13:21 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x3da}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = inotify_init1(0x80000) write(r1, &(0x7f0000000200)="6b2a56e0e0d1615fc59020e6a4b54eeb173efda2bbaa278417a91fa393308729d543eb3877b18fcb2e8fea0328ac743a69c54682ff5dc9ce034b5106e3ec896e728b0aab58b61dec73fd677137f00109ea0b7ad61ba7f8d0c6a40068de8ab6e06c69d8e5fde090f7bf7227fb304135d9ae75b6c36b7a0774f9f8653f7c996cf63c49c403cb9c76e14521d7d0788e53ab3ec90d206034e98eb6f04bcccc7633ab251ec12f72e6552a4de955aa17308a925919f033fd05a4f6804e8cef8492d33cb9d0", 0xc2) close_range(r0, 0xffffffffffffffff, 0x2) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x2, 0x7, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) clone3(&(0x7f0000000600)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x14) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@hopopts={0x67, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) finit_module(r2, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@local}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0xed8, 0xdb68, 0x5, 0x6c3, 0xfffffffe]}, &(0x7f0000000000)=0x54) 09:13:21 executing program 4: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x6, 0x4, 0x401, 0x6, 0x17, "ed8a9eac30c406300b2e6a3817997df5f28fa3"}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000040), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x6b, 0x1, 0x7, 0x8c, 0x3, "73381edf7a57b558d952536290a9fb0ea42aa7c546d5bbc8c126c70cec7ad3c0a8538d362963c73ec3d244ea3394073e620dd2382bc601db30a230f062c66a", 0x17}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)="72a793d6b574d906cf0ecb59fde07fd4d8316d3d11cbea6008f12ad1a24bfef66d7e5be2bade1e9a4b427805a38b0f34bd0042d90d85", 0x36}, {&(0x7f0000000140)="9093cc0df97561b1d4f75faea4a9a09802f287a842818ee25ef61aca47b834d3bb3f422f7215e91119788dc09b7156e1f4389e5dfbc1289e732a6b9ad052227152eab243a566ad331553d563f92027701658919c120417a027b3fa6fa8", 0x5d}, {&(0x7f00000001c0)="fa1c595e41b2a21c73bc8ce63e970e788cb198b70eb54a11c5e4cd247f9190575dd09f305e2769e06ea0b93c315c3c01827adab9f4bb02f8123d22da8f392315987d0a526cadd82cd457c8db1d8172d06f17b1bab433624973993873825fbf136ffb9f26e572cd63d955583af3d3ff465197611a5b78969ec4668cabc6352ed01e0edf3b6e246b6e8ab1f85e84b2cc15e443509ab33f5f09063aa81ab78f368ddca0663a84a810d65aaed2ff3640ad930992d5a3ff2c664fe34c4618024c4877fd25e4b7e3e8437a116407901487fc509abcafd3", 0xd4}, {&(0x7f00000002c0)="e83e32a599d87cef1e7676e472124eccc37a3e15fa4659993318993b17f05bbc452e089c682681b4eb765656920b221385341d718dcb52b481192730aabc461ab4cca4bfad64b27ffcb13cfc273c165fb2a3b36f6cd1af55978869ff096975c0e6d6602f5c15fafefa889c90f9a8290961b909ed08b2bbb7354afe81243c1cab64d33de10e5119e806f7093f2bd955b4a083643564c287fbce067073280a42603ed6117437b44a89571fa3ebc4ab0573a442ee0e52f19bf1f79244d6ec27e9f72b16dd3f2e87e87a0ad9b7883acd48469e6b140ce0457d9111bd7e", 0xdb}], 0x4}, 0x8011) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x4, r0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) r3 = openat(r2, &(0x7f0000000600)='./file0\x00', 0x5811c3, 0x10) r4 = syz_io_uring_setup(0x6e6a, &(0x7f0000000640)={0x0, 0xc775, 0x1, 0x2, 0x35}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000740)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2200}}, 0x50) recvmsg(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)}], 0x3}, 0x12102) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001900)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000001a00)=0xe8) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001a40)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x1, 0x4e23, 0x0, 0xa, 0x0, 0xa0, 0x87, r6, r7}, {0x7, 0x7, 0x8, 0x7, 0x6b, 0x80000000, 0xcdc, 0x2}, {0x74, 0x2, 0xff, 0x6}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}, {{@in6=@loopback, 0x4d6, 0x32}, 0xa, @in6=@empty, 0x3504, 0x4, 0x3, 0x4d, 0x8001, 0x373b, 0x9}}, 0xe8) r8 = socket$inet6(0xa, 0x6, 0xffff) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000001b80)={@rand_addr=' \x01\x00', r0}, 0x14) r9 = dup(r4) sendmsg$inet6(r9, &(0x7f00000021c0)={&(0x7f0000001bc0)={0xa, 0x4e20, 0x101, @local, 0x80000001}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001c00)="816e0086ed9a43ccfc654b565a70d032ca2d8c6a01c27df5d2b85456abb19d407186048a44f352812e825c8dcb534f83ed1de9f3dfee0ebd9966941726b1c3e907de6b43bfdecb82c04d353e88440f932f052f250ebe6125c15f293a2c43679890934cada0621a13b2197c347c4d84f36da16e421f21f0e594a4f3376ba009a83feee005f0c4d3b9246a0867dc68e8f49d9fe4b897b3976484492c85936a080eb940b3b0976ff89e5667a720fe9ef595", 0xb0}, {&(0x7f0000001cc0)="52d5221af988154be310ec974a119281bf", 0x11}, {&(0x7f0000001d00)="cfbe7c1a204e6e146c8b08167fa9b990ab521ce1c3bf2f9be872ef9df77303ee3b064946300c86b3a50d1bc75720bf981ad14cb8", 0x34}, {&(0x7f0000001d40)="2c8dc0e63fc5d160b06574f511a72fb89ce315a301926f90c08ef3dd1346dba1fb456495", 0x24}, {&(0x7f0000001d80)="32fc278abef4f86999b141116f3da3a3d610b9fc06d6de6a3aa50e4089a68f56d291ff9a1d0d4da581f0dbc6c9934dc517f2e258432c317ecc94cfc09f35c0fea94cf98c935267103b1c7182aa55f9f4558a4924a52111cdd473bd352af30b434b7ec8c36ab9dee19dc9e914e99b24cb0009d107aaab4c5000d691cd1fedfcc188489c296456b458b7c74cc16ef7b115d74502cc4b2501844a895b570fed1b9ae67c1328", 0xa4}, {&(0x7f0000001e40)="83a3d86cf1748585c8c7b6ea5e8eea957891b90ff480c9eadfef1d79b4b809ec3a58314cdbd4a6e98997d404597352914749594b158ea1764f4a681d170fc8b3d4b063c5b2a0a638fc1b3bc8b7f7b7690b11cf086251b2bb0d4f60fdb759ec4829dbf25f721f9a07fb2501a2e62b8b751b0e996f63b4c4918dd1dc182b83c1129276069001d384cf6c57d216ab7a5ba50f4e31714ac74f81e708e3ef48a49986a24ffe5ffd4c0a36827b9f1eb1e0", 0xae}, {&(0x7f0000001f00)="ae7b8ef7873499ec47d6b9cc8133ec641c5860db1e1ed2fa", 0x18}, {&(0x7f0000001f40)="2f5882df90a586d0c87f2c5b039683ca1f3de934905f94", 0x17}, {&(0x7f0000001f80)="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", 0xfc}], 0x9, &(0x7f0000002140)=[@rthdr={{0x58, 0x29, 0x39, {0xc, 0x8, 0x1, 0x8, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @dev={0xfe, 0x80, '\x00', 0x26}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x20}}], 0x70}, 0x200840d0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002200)={{{@in=@loopback, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0x3, 0x2, 0x20, 0x20, 0x6c6598967c7a4947, 0x0, r1}, {0x8, 0x1, 0xf69, 0x4, 0x80, 0x5, 0x8001, 0x63a}, {0x5, 0x9, 0x99, 0x9}, 0x7fff, 0x6e6bb1, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x2b}, 0x2, @in=@loopback, 0x34ff, 0x4, 0x0, 0x80, 0xfff, 0x6, 0x8}}, 0xe8) r10 = accept4$inet(r9, &(0x7f0000002300)={0x2, 0x0, @dev}, &(0x7f0000002340)=0x10, 0x80000) sendmmsg(r10, &(0x7f0000003f40)=[{{&(0x7f0000002380)=@l2={0x1f, 0x1f, @none, 0x8001, 0x2}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002400)="cfa59c8d55a4766e36751c53c8ff97", 0xf}, {&(0x7f0000002440)="335021d9b096fb2d827f062925358957a36203c89032be645103c42d7270b07df564f11de8de4a143a01279f34da90a8c0de996c939d2ebe335223da0b59ba0f8feee0bf20a4f115a439c473aa7566b006374cdd0fdceac70259c65b65294556c9fe4d1a88c50e6a237c040825bfe84c661bd915804d179a9c43d136730cb5b10016c417d8c57d4da716de94fa7b1062b4ebb218f5116e04c5803789beadb9401b4060a9da07176ea8ef5d922bb21c6b1dfaae4c63785d8d5e6cbd636f0474f3dbe49d4dc6a05d860e3ff1589617e6ef6e52c995670d2440b46856390307bf8d25b20cd7df839aad20c3ef56d42cd833d73668d4af7e", 0xf6}, {&(0x7f0000002540)}, {&(0x7f0000002580)="cf8e5e8a5559a2867778a33d8509f1410f35dfa544aa12e84dd287ccc3da3b5ab9a0a78308af7b7b289129b5abc75732b5f87262c3bc38e3705f", 0x3a}, {&(0x7f00000025c0)="22e73b1c3bf3263e15fc2894ed226e", 0xf}, {&(0x7f0000002600)="a8db82eabc272aa779f4fb1a3491014e41e033ab792783b023c9f9b9a3efaef0e1a5ed58ace6608f7d8c639f711b6f0f1bb890e36ea46bc4eab5ba43103b4123bff0ee4a7355e16cdee10df11da8d6cf2097b8a9a843978537cf5d2ee89a37eb1cfdfd71df6db86e153e74cf1ed5b76103e15b6cbf7f6e15ac54e607957534d6deecc56c8fe83e15d7a00862233fb78c0684ed989be2828064c2d37d755b80e0f7352197a2429b45fea2f36c78621c18d51755d3ab448f35ed01502e584cc084be09e916ab5db39345afd2ae7331ddcd49859f060a65ae79358bdf124b97ab3b0edda19ef80f5e4064ba08bf7aaf88c0", 0xf0}, {&(0x7f0000002700)="68a7a66817126cc11b14af2db8d84bece190b394ba7397ca623ec22048884a26791e0c49035810f0299db4972b7477698a4fdb2b4b4056875d0ba7b4dc6252556b4d10d77d775cd678d972420e44f64839a44c3dd85888e47876625e1b2f19aafed96135a08d83d22396576d4a7a96fe68b0e08f749414b92531", 0x7a}, {&(0x7f0000002780)="514643543bddbbd2f6da4cdff29bd9bf86c2caa8d3db598495f96b81a4d9476a4aeba2766ca6ac55ed9c1d5509391d4c868295504d87959a767530d843f6920a9fa5ee61b3e2a3452005b9621567bfae448834c0f1a5f3dc99655ede8dc40a23f4c27edcf28ffb015ae50c59bdb2223563606c8f745c2f43e142af20c6b4eee43f159d2ec3ab1b361fe755b5df3e9fde95a199", 0x93}], 0x8, &(0x7f00000028c0)=[{0x1010, 0x10d, 0x0, "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"}], 0x1010}}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003900)="b293c8bed240ab04cc13edfa033166b15edeb72e15", 0x15}, {&(0x7f0000003940)="6ae7d0fcac664dcafc34b53c8f4d5c49c0fb750446cfb6e0cdf3b59ee4c189f08769abf21b956a8fd3b334b012513d1dc20d8abe671ad129dff5a4d13332f74a26f591873d01da1b71688af0c05572d29180aa1e4af26bcf34293b179512cd3878bf8aa1327f7e6f70bbe03948ec7257d318c773d1d935ce280a3de70a635c79de6fc7ada85416e89fac905ac5a70f5b421900847c8e1d5dc4b020ec285f45f62bb30a247ae3006a09ae0db5bef884b972eeb36b4aecfcdf81a8c4cd80fe807c3b92f88450fb74838b3ff99d859f865edb50926b0bff09c66fb4f679b07e2d68029d12f766785a480fef1e", 0xeb}, {&(0x7f0000003a40)="0db64672b7d3adcd5f8e1d14c69132daffb777406acdaeb36d724c", 0x1b}], 0x3, &(0x7f0000003ac0)=[{0x108, 0x105, 0x0, "9e2a646baec3e8fc1a1292dd5ab1bb56beca8b43c67f3905f336088366cb185a81421838517f8b1232c770d7fae186e674938edd0461d2fa5db010f710df26b415084f76e442af10b1241e1818f5e7dcc245a2b4bc5034371c6b47c9c833295dce60a6e0647d2a80c6fd82f9b107ff3af63b9aee79a4c1d877769b18033e5d67886356d19e9f9a65f88c1b72ffc76d9c2aba714e7c13d4ca18bf2b674bdd9ae925d8038b5108fc192a96accba781595890614b81df30988bbe45795a46acd2b154ae0dd1cf46808d505a127601ac0647982d43a5f65dd503139cbdd10aff25570158bc069613d7c085ee23f65796fa568590bf"}, {0x108, 0x10f, 0xff, "93d41291c85a1aed9e31c1f17ffe4b059089a0a3f3c01b7e70f1cd47d65368b086547f45ad58da341f7ec67bc23432e1cbed4a01eb78fd84572520c174086093e5c42bc2a3e1e04c3ce12eadbc5e5ea923e9cb44dfc4418b700c262964e8ced5b5d078e387764640bca0c85d635e33c2fd100310b932a19aed8d51bbea148230df2f9b0dce2170eee8ce08fed81ade59cecf1253172711722ce5a3aa66646a96a1c666d207604a4c4d89a3605de6ca4c0aa505114c78c45fcf32f1097ea5dd4f8163cd4955e43ba977fb85f321ae5d95715ee409d279dea1c2a750de8e051e0acbf7b9196b043c5301b71dc137b40a6a2f060e0d7b"}], 0x210}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003d00)="5a6de353757bff495e40f6ff835699d922de0db48c81d2ceb01667e079c8eec42cfc7e08127545801a5471ed83800d04c4ad4eadb1c07673ff", 0x39}, {&(0x7f0000003d40)="907a923599288f94c0ffdfb4db33c678b4fb988fee702776d3e06bd2f204b8339152b58ac6cc7a3d51484d4e37f3a3ac3da6829f048316a32594805bbbaa06af4b33f2a94bc42e778d4340293c6138bdb4cdb4fd29b6cc9b68a572bd781130f36a4c98de00", 0x65}, {&(0x7f0000003dc0)="936fd61f893759d721235004bbc25b4c4659e7681a8e57948168b8d16c289010271b6a4ce675c9a24426ccb5ebba85a41746bdfdbcc2faa61421ee969ef65f0bc4", 0x41}], 0x3, &(0x7f0000003e80)=[{0x88, 0x102, 0x401, "bb34856907957fd9066cc0e3850d154ff48f07099a5e84fb35f7e05c0401ef3dac06dd4aca3e708f8a419c1333688adf66e130e0a07f5de76ec922003b2ea88550aba2892511b147f1961dcbd5cead7305b218337996c0a0261669b52cf1bf8aea46909fad593ae180959926a12e7a1d09a7"}], 0x88}}], 0x3, 0x4000000) [ 981.556741] FAULT_INJECTION: forcing a failure. [ 981.556741] name failslab, interval 1, probability 0, space 0, times 0 [ 981.559431] CPU: 1 PID: 9892 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 981.560885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 981.562663] Call Trace: [ 981.563231] dump_stack+0x107/0x167 [ 981.564009] should_fail.cold+0x5/0xa [ 981.564832] ? create_object.isra.0+0x3a/0xa20 [ 981.565823] should_failslab+0x5/0x20 [ 981.566639] kmem_cache_alloc+0x5b/0x310 [ 981.567499] create_object.isra.0+0x3a/0xa20 [ 981.568422] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 981.569499] kmem_cache_alloc+0x159/0x310 [ 981.570390] prepare_creds+0x25/0x5e0 [ 981.571192] selinux_setprocattr+0x354/0xa20 [ 981.572115] ? selinux_shm_shmctl+0x180/0x180 [ 981.573066] security_setprocattr+0xb7/0x120 [ 981.574002] proc_pid_attr_write+0x340/0x7d0 [ 981.574927] ? rw_verify_area+0x11d/0x350 [ 981.575810] do_iter_write+0x4f0/0x700 [ 981.576641] vfs_writev+0x1ae/0x620 [ 981.577412] ? vfs_iter_write+0xa0/0xa0 [ 981.578258] ? __fdget_pos+0xf1/0x190 09:13:21 executing program 2: prctl$PR_SVE_GET_VL(0x33, 0xdbbf) prctl$PR_SVE_GET_VL(0x33, 0x2312) prctl$PR_SVE_GET_VL(0x33, 0x3ffc) prctl$PR_SVE_GET_VL(0x33, 0x129ad) prctl$PR_SVE_GET_VL(0x33, 0x3bcd) prctl$PR_SVE_GET_VL(0x33, 0x59b) prctl$PR_SVE_GET_VL(0x33, 0xb88a) prctl$PR_SVE_GET_VL(0x33, 0x1a144) prctl$PR_SVE_GET_VL(0x33, 0x151c2) prctl$PR_SVE_GET_VL(0x33, 0x17a73) prctl$PR_SVE_GET_VL(0x33, 0x241d) prctl$PR_SVE_GET_VL(0x33, 0x7cdb) prctl$PR_SVE_GET_VL(0x33, 0x1bcc5) prctl$PR_SVE_GET_VL(0x33, 0x385b) prctl$PR_SVE_GET_VL(0x33, 0x4ea3) prctl$PR_SVE_GET_VL(0x33, 0x101) prctl$PR_SVE_GET_VL(0x33, 0x17332) prctl$PR_SVE_GET_VL(0x33, 0x26e0) prctl$PR_SVE_GET_VL(0x33, 0xccb1) prctl$PR_SVE_GET_VL(0x33, 0x13754) [ 981.579057] ? lock_downgrade+0x6d0/0x6d0 [ 981.580066] ? ksys_write+0x12d/0x260 [ 981.580877] ? __fget_files+0x2f8/0x520 [ 981.581728] do_writev+0x139/0x300 [ 981.582488] ? vfs_writev+0x620/0x620 [ 981.583289] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 981.584380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 981.585465] do_syscall_64+0x33/0x40 [ 981.586273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 981.587339] RIP: 0033:0x7f7b39e69b19 [ 981.588116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 981.591964] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 981.593573] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 981.595077] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 981.596558] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 981.598071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 981.599558] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 981.603146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.612081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:13:21 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000028) [ 981.626215] audit: type=1400 audit(1747214001.559:23): avc: denied { create } for pid=9895 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 09:13:21 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) 09:13:21 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000036) 09:13:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0xc0045878, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0473b560491f74216e157704fdc4b65a914a512a1eec4c3234b9ca5875f7c17413408526a6822189586a11c110366f9ac5f1241108587c39e04fc72e7cdecf8db70a59b4be76fe54ca171174579c5e9e21cbae5ed0728bc6795ee9c5e40c9fd28728d773ea4607e6270ac0ae3a0bbf2b071fcec02f6564b2ff75360d1a42dda7d6eea9b685e240bdb6a65e4f70079bf55731908de093d0e29d70130ea901b41a02ef4c852f504265d6d4b7d340f99d065d435e0051c305426d65aa917f6e62f8d250a0f6f1174d8abfcb2fd59e04594c7495cebd610bc9315c7bb97a024fded02b"]}) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000080)=0x6, 0x4) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/35, 0x23}], 0x4, 0x5, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0) getsockname(r1, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000280)=0x80) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0xfffffffe}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0) fcntl$setlease(r2, 0x400, 0x1) lremovexattr(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)=@random={'security.', '\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x10001) r6 = fork() ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000040)={0x4000000}, &(0x7f0000000180)) execveat(r3, &(0x7f0000000400)='./file2\x00', &(0x7f00000005c0)=[&(0x7f0000000440)='veth0_vlan\x00', &(0x7f0000000580)='\x00'], &(0x7f00000006c0)=[&(0x7f0000000600)='\xc9[-\x00', &(0x7f0000000640)='+\x00', &(0x7f0000000680)='security.'], 0x1000) 09:13:21 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000080)={@random="f142f70e211d", @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ee7c63", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @pad1, @jumbo={0xc2, 0x4, 0x3}]}]}}}}}, 0x0) syz_emit_ethernet(0x1c3, &(0x7f0000000100)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x9100, 0x4, 0x1, 0x3}, {0x8100, 0x6}}, {@ipv6={0x86dd, @dccp_packet={0x1, 0x6, "0116d1", 0x185, 0x21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, {[@dstopts={0x33, 0x1b, '\x00', [@generic={0xf2, 0x83, "47e1caccde33e98ee22aec6eb8d5b9da943028ccdeb8e53f293df8282747ec14819a587167e0cc27900f20406bd762599a9518551222e3ca67e9e9daa9df3fbe0fd426a0af7a1a0785c78f34e2c61f51c4c639b3195effa9151a008f404db2504764bcf52a4d0448a8b4de028ad917a30cc026ae78b18debd64fc32310453506e98fef"}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x20}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x20, 0x2a, "f5145b0345b4e592a22a333777c3059d88a0ec1272d27a15b560009397fb14b710222f6874db2d13b8ad"}]}], {{0x4e24, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1, "a2fbb6", 0x3, "b6c582"}, "75f64020cc43cc7cda6342e9964d615bdd3dd5cb3145d0a03e6d9ba55bf6055adcfcd29d3527c12afb26f96928b0b3b96025b6d9088f2df9bb83738e46fbeab5e6c8fc6235e0627b49d17bff7dc4e67b8e1eb5670a971dd4a35f4ef6857c0d90e99a558e3bf61b668693ee8b3d26797de0252ca29af7d8dddee4b308e7d6b16b5275045471098b39ec17d9cda7"}}}}}}, &(0x7f0000000000)={0x1, 0x1, [0xd3c, 0xe61, 0xba1, 0xb57]}) 09:13:21 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000029) 09:13:21 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd957}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) sendfile(r1, r0, &(0x7f00000001c0)=0xa0, 0x3ff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) write$P9_RLINK(r3, &(0x7f0000000340)={0x7, 0x47, 0x2}, 0x7) sendmmsg$inet(r4, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r6], 0x38}}], 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 09:13:21 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000037) 09:13:21 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000038) 09:13:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x761, 0x2, @perf_bp={0x0, 0x5}}, 0x0, 0x6, 0xffffffffffffffff, 0x3) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x0, 0x401) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r1, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000002f00)=ANY=[@ANYBLOB="48000000de55dff63d35da8095ddf58720b0d2b1a37e4e771b917e0c116caa4b9cf2dd92441cc86db81a58a6d44b404198dfc7486bd4e634ff456fd01496868815e8", @ANYBLOB="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", @ANYBLOB="040000000040000000001100000008000300", @ANYRES32=r3, @ANYBLOB="e016d23d6746d96e1c84e47166e20b009900000002002b00000008006b001400000000000000d146ba604d84c81f6d4f455c980a6bccd7f0000425d1c789822e22d332412be48029cca5c47a33673dc36a6ea7173f4e6eb40cfea4510c01100ad409a76b3b69c68fa2801b6cf4c8170cd8644484eaafe00caf086f30827093b17c914f02bcff5f643a5492ab62fb457edd9ff893df3cda1711c782df59c15e777ce2af46cb"], 0x48}, 0x1, 0x0, 0x0, 0x88811}, 0x0) dup(r2) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) unshare(0x48060200) 09:13:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0xc0045878, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0473b560491f74216e157704fdc4b65a914a512a1eec4c3234b9ca5875f7c17413408526a6822189586a11c110366f9ac5f1241108587c39e04fc72e7cdecf8db70a59b4be76fe54ca171174579c5e9e21cbae5ed0728bc6795ee9c5e40c9fd28728d773ea4607e6270ac0ae3a0bbf2b071fcec02f6564b2ff75360d1a42dda7d6eea9b685e240bdb6a65e4f70079bf55731908de093d0e29d70130ea901b41a02ef4c852f504265d6d4b7d340f99d065d435e0051c305426d65aa917f6e62f8d250a0f6f1174d8abfcb2fd59e04594c7495cebd610bc9315c7bb97a024fded02b"]}) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000080)=0x6, 0x4) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/35, 0x23}], 0x4, 0x5, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0) getsockname(r1, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000280)=0x80) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0xfffffffe}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0) fcntl$setlease(r2, 0x400, 0x1) lremovexattr(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)=@random={'security.', '\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x10001) r6 = fork() ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000040)={0x4000000}, &(0x7f0000000180)) execveat(r3, &(0x7f0000000400)='./file2\x00', &(0x7f00000005c0)=[&(0x7f0000000440)='veth0_vlan\x00', &(0x7f0000000580)='\x00'], &(0x7f00000006c0)=[&(0x7f0000000600)='\xc9[-\x00', &(0x7f0000000640)='+\x00', &(0x7f0000000680)='security.'], 0x1000) 09:13:35 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000039) 09:13:35 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002a) 09:13:35 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="7f", 0x1}], 0x100000000000037f) 09:13:35 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6c810, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) faccessat2(r0, &(0x7f0000000040)='mnt/encrypted_dir/../file0\x00', 0x80, 0x3e4fcec92923ce05) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000500), 0x9}, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x6, @private0, 0x82}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) openat(r1, &(0x7f0000000380)='mnt/encrypted_dir\x00', 0x8500, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x95) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80040881}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf25da804eeac3c65ac1e5b6cad10bb48ba643e3f970a3008218000100", @ANYRES32, @ANYBLOB="14756e6c430a00"/28], 0x44}, 0x1, 0x0, 0x0, 0x24000011}, 0x4840) 09:13:35 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 50) 09:13:35 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 995.410249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.433022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.439254] FAULT_INJECTION: forcing a failure. [ 995.439254] name failslab, interval 1, probability 0, space 0, times 0 [ 995.441027] CPU: 0 PID: 9966 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 995.441986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 995.443160] Call Trace: [ 995.443516] dump_stack+0x107/0x167 [ 995.444031] should_fail.cold+0x5/0xa [ 995.444569] ? security_prepare_creds+0x112/0x190 [ 995.445250] should_failslab+0x5/0x20 [ 995.445782] __kmalloc+0x72/0x390 [ 995.446282] security_prepare_creds+0x112/0x190 [ 995.446937] prepare_creds+0x452/0x5e0 [ 995.447482] selinux_setprocattr+0x354/0xa20 [ 995.448094] ? selinux_shm_shmctl+0x180/0x180 [ 995.448739] security_setprocattr+0xb7/0x120 [ 995.449359] proc_pid_attr_write+0x340/0x7d0 [ 995.449982] ? rw_verify_area+0x11d/0x350 [ 995.450577] do_iter_write+0x4f0/0x700 [ 995.451135] vfs_writev+0x1ae/0x620 [ 995.451644] ? vfs_iter_write+0xa0/0xa0 [ 995.452201] ? __fdget_pos+0xf1/0x190 [ 995.452739] ? lock_downgrade+0x6d0/0x6d0 [ 995.453322] ? ksys_write+0x12d/0x260 [ 995.453866] ? __fget_files+0x2f8/0x520 [ 995.454442] do_writev+0x139/0x300 [ 995.454938] ? vfs_writev+0x620/0x620 [ 995.455471] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 995.456207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 995.456925] do_syscall_64+0x33/0x40 [ 995.457439] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 995.458103] RIP: 0033:0x7f7b39e69b19 [ 995.458618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 995.461186] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 995.462248] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 995.463233] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 995.464140] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 995.465124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 995.466042] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:13:35 executing program 6: r0 = syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000001740), 0x8004, &(0x7f0000001800)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) 09:13:35 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002b) 09:13:35 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003a) 09:13:35 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 51) 09:13:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21f3000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x12020, &(0x7f0000000180)=ANY=[@ANYBLOB='inode_readahead_blks=0x0000000000800000,uid=', @ANYRESDEC=r0, @ANYBLOB="2cc6fdff3e", @ANYRESDEC=r0, @ANYBLOB=',\x00'/16, @ANYRESDEC, @ANYBLOB='(@']) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x40448c0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000001380)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0xb04ef147f171f71b, @fd_index=0x6, 0x40, &(0x7f0000001340)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/28, 0x1c}], 0x3, 0x10}, 0x9) [ 995.668388] FAULT_INJECTION: forcing a failure. [ 995.668388] name failslab, interval 1, probability 0, space 0, times 0 [ 995.670039] CPU: 0 PID: 9987 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 995.670879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 995.671842] Call Trace: [ 995.672162] dump_stack+0x107/0x167 [ 995.672592] should_fail.cold+0x5/0xa [ 995.673043] ? create_object.isra.0+0x3a/0xa20 [ 995.673575] should_failslab+0x5/0x20 [ 995.674024] kmem_cache_alloc+0x5b/0x310 [ 995.674500] create_object.isra.0+0x3a/0xa20 [ 995.675012] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 995.675611] __kmalloc+0x16e/0x390 [ 995.676029] security_prepare_creds+0x112/0x190 [ 995.676573] prepare_creds+0x452/0x5e0 [ 995.677052] selinux_setprocattr+0x354/0xa20 [ 995.677563] ? selinux_shm_shmctl+0x180/0x180 [ 995.678129] security_setprocattr+0xb7/0x120 [ 995.678651] proc_pid_attr_write+0x340/0x7d0 [ 995.679158] ? rw_verify_area+0x11d/0x350 [ 995.679642] do_iter_write+0x4f0/0x700 [ 995.680101] vfs_writev+0x1ae/0x620 [ 995.680523] ? vfs_iter_write+0xa0/0xa0 [ 995.680985] ? __fdget_pos+0xf1/0x190 [ 995.681452] ? lock_downgrade+0x6d0/0x6d0 [ 995.681943] ? ksys_write+0x12d/0x260 [ 995.682388] ? __fget_files+0x2f8/0x520 [ 995.682860] do_writev+0x139/0x300 [ 995.683272] ? vfs_writev+0x620/0x620 [ 995.683758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 995.684363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 995.684997] do_syscall_64+0x33/0x40 [ 995.685431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 995.686027] RIP: 0033:0x7f7b39e69b19 [ 995.686483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 995.688600] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 995.689537] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 995.690365] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 995.691237] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 995.692064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 995.692929] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 995.779234] EXT4-fs (sda): Unrecognized mount option "uid=18446744073709551615" or missing value [ 995.800793] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 09:13:48 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003b) 09:13:48 executing program 4: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001180)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1433, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x111}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000001300)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4109, 0x100d}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001980), 0x4c8081, 0x0) syz_io_uring_setup(0x7621, &(0x7f0000000080)={0x0, 0x40eb, 0x0, 0xffffffff, 0x0, 0x0, r2}, &(0x7f0000002000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000001200)=0x0, &(0x7f0000001240)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r6, 0x0) perf_event_open(&(0x7f0000001280)={0x5, 0x80, 0x9, 0x7, 0x4, 0x2, 0x0, 0x1, 0x4304, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x1000, 0xb5}, 0x200, 0x5, 0x6, 0x1, 0x400, 0x51d5d73, 0x19, 0x0, 0x4e, 0x0, 0x2}, r5, 0x6, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xbdf, &(0x7f0000001340)={0x0, 0x23fe, 0x0, 0x3, 0x7c, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000011c0), &(0x7f00000013c0)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000001400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x140}}, 0x3a31) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0xfffffffffffffe14, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 09:13:48 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002c) 09:13:48 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x2}], 0x100000000000037f) [ 1008.120284] FAULT_INJECTION: forcing a failure. [ 1008.120284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.122078] CPU: 1 PID: 10008 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1008.122087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1008.122092] Call Trace: [ 1008.122112] dump_stack+0x107/0x167 [ 1008.122129] should_fail.cold+0x5/0xa [ 1008.122150] _copy_from_user+0x2e/0x1b0 [ 1008.122167] memdup_user+0x65/0xd0 [ 1008.122185] proc_pid_attr_write+0x247/0x7d0 [ 1008.122199] ? rw_verify_area+0x11d/0x350 [ 1008.122223] do_iter_write+0x4f0/0x700 [ 1008.122250] vfs_writev+0x1ae/0x620 [ 1008.130012] ? vfs_iter_write+0xa0/0xa0 [ 1008.130613] ? __fdget_pos+0xf1/0x190 [ 1008.131170] ? lock_downgrade+0x6d0/0x6d0 [ 1008.131788] ? ksys_write+0x12d/0x260 [ 1008.132370] ? __fget_files+0x2f8/0x520 [ 1008.132975] do_writev+0x139/0x300 [ 1008.133507] ? vfs_writev+0x620/0x620 [ 1008.134084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1008.134863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1008.135627] do_syscall_64+0x33/0x40 [ 1008.136174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1008.136928] RIP: 0033:0x7f7b39e69b19 [ 1008.137484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1008.140181] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1008.141327] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1008.142385] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1008.143429] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1008.144466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1008.145512] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1008.149019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.151841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:13:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x120) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) syz_io_uring_setup(0x2d92, &(0x7f0000000080)={0x0, 0x2e12, 0x10, 0x0, 0x9, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = accept$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r6 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x3b1a, 0x0, 0x3, 0x158}, &(0x7f0000bdd000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x10000) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r5, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 09:13:48 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 52) 09:13:48 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000100)="3fc0fb4db47559e3489003e4409122517eef01cca205c12e8f0e66a28456800000000000000016cb86c4a878c7e6fb3d3526719df77d51b1c4553a1295105a1494", 0xffffffef, 0x10000) fadvise64(r0, 0x0, 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x0) open_tree(r1, &(0x7f0000000000)='./file1\x00', 0x801) 09:13:48 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1008.170238] loop6: detected capacity change from 0 to 33559040 09:13:48 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002d) 09:13:48 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003c) 09:13:48 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 53) [ 1008.410204] FAULT_INJECTION: forcing a failure. [ 1008.410204] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.413115] CPU: 0 PID: 10031 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1008.414700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1008.416584] Call Trace: [ 1008.417185] dump_stack+0x107/0x167 [ 1008.418018] should_fail.cold+0x5/0xa [ 1008.418895] ? security_prepare_creds+0x112/0x190 [ 1008.419991] should_failslab+0x5/0x20 [ 1008.420853] __kmalloc+0x72/0x390 [ 1008.421648] security_prepare_creds+0x112/0x190 [ 1008.422717] prepare_creds+0x452/0x5e0 [ 1008.423598] selinux_setprocattr+0x354/0xa20 [ 1008.424594] ? selinux_shm_shmctl+0x180/0x180 [ 1008.425626] security_setprocattr+0xb7/0x120 [ 1008.426643] proc_pid_attr_write+0x340/0x7d0 [ 1008.427637] ? rw_verify_area+0x11d/0x350 [ 1008.428577] do_iter_write+0x4f0/0x700 [ 1008.429467] ? vfs_writev+0x303/0x620 [ 1008.430343] vfs_writev+0x1ae/0x620 [ 1008.431170] ? vfs_iter_write+0xa0/0xa0 [ 1008.432209] ? __fdget_pos+0xf1/0x190 [ 1008.433086] ? lock_downgrade+0x6d0/0x6d0 [ 1008.434044] ? ksys_write+0x12d/0x260 [ 1008.434916] ? __fget_files+0x2f8/0x520 [ 1008.435838] do_writev+0x139/0x300 [ 1008.436645] ? vfs_writev+0x620/0x620 [ 1008.437514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1008.438712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1008.439884] do_syscall_64+0x33/0x40 [ 1008.440729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1008.441894] RIP: 0033:0x7f7b39e69b19 [ 1008.442746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1008.446917] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1008.448641] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1008.450259] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1008.451867] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1008.453474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1008.455095] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:13:48 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003d) 09:13:48 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x3}], 0x100000000000037f) 09:13:48 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002e) 09:13:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000100)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$usbmon(&(0x7f0000000140), 0x6, 0x185643) poll(&(0x7f0000000180)=[{r5}], 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x9, @none, 0x81, 0x1}, 0xe) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001580), 0x0, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000081) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000009c0)="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", 0xfa0}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="3ed187f4356d195692fd0191e22ae7cc38c077b3e7e0172a0535af600c5ceb293c09fa377bda8e9b0698f013a1e253d5558a46f5b8e6c01001e73e956585c9be1cf4640dd105fe41d3ac85ada332975bc1e27c690e000000000000000000"], 0x368}, 0x8000) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="c52c6705000000", @ANYRESHEX=r4, @ANYBLOB=',\x00']) 09:13:48 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1008.545684] 9pnet: Insufficient options for proto=fd [ 1008.582998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:13:48 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 54) 09:13:48 executing program 4: r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) fallocate(r2, 0x10, 0x6, 0x232b) dup2(r1, r0) [ 1008.603672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.613523] FAULT_INJECTION: forcing a failure. [ 1008.613523] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.615206] CPU: 1 PID: 10048 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1008.616054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1008.617102] Call Trace: [ 1008.617438] dump_stack+0x107/0x167 [ 1008.617894] should_fail.cold+0x5/0xa [ 1008.618388] ? create_object.isra.0+0x3a/0xa20 [ 1008.618952] should_failslab+0x5/0x20 [ 1008.619423] kmem_cache_alloc+0x5b/0x310 [ 1008.619937] create_object.isra.0+0x3a/0xa20 [ 1008.620473] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1008.621107] __kmalloc+0x16e/0x390 [ 1008.621561] security_prepare_creds+0x112/0x190 [ 1008.622152] prepare_creds+0x452/0x5e0 [ 1008.622631] selinux_setprocattr+0x354/0xa20 [ 1008.623180] ? selinux_shm_shmctl+0x180/0x180 [ 1008.623743] security_setprocattr+0xb7/0x120 [ 1008.624289] proc_pid_attr_write+0x340/0x7d0 [ 1008.624826] ? rw_verify_area+0x11d/0x350 [ 1008.625341] do_iter_write+0x4f0/0x700 09:13:48 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003e) [ 1008.625826] vfs_writev+0x1ae/0x620 [ 1008.626414] ? vfs_iter_write+0xa0/0xa0 [ 1008.626916] ? __fdget_pos+0xf1/0x190 [ 1008.627383] ? lock_downgrade+0x6d0/0x6d0 [ 1008.627913] ? ksys_write+0x12d/0x260 [ 1008.628385] ? __fget_files+0x2f8/0x520 [ 1008.628896] do_writev+0x139/0x300 [ 1008.629333] ? vfs_writev+0x620/0x620 [ 1008.629805] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1008.630469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1008.631116] do_syscall_64+0x33/0x40 [ 1008.631583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1008.632213] RIP: 0033:0x7f7b39e69b19 [ 1008.632684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1008.634969] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1008.635901] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1008.636786] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1008.637668] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1008.638556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1008.639434] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1008.782362] loop6: detected capacity change from 0 to 33559040 [ 1023.732068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:14:03 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002f) 09:14:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x4300, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xfffffff9}}, './file0\x00'}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) statx(r2, &(0x7f0000000100)='./file0\x00', 0x6000, 0x400, &(0x7f0000000140)) 09:14:03 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:14:03 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 55) 09:14:03 executing program 4: r0 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYBLOB="01000c7b37cf02018cc40000", @ANYRES32, @ANYBLOB="006c6530000000d0d8219c7b8962a06046606f000000000000000000591dc688ad5daad3738b71efd240a7775342efd6e8e5010000000d8b16d4c3e2e5faf5446537e8e1f78e8416ba95ba6906011613471a3b8a9c4cbbdcab4aa1695bbe9bf1043339b045eee460c3efbeddafdce79ff931dbed8815d9b47940eef44198e0cd3bfb3dbb1a6c21"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x80080, 0x0) readlinkat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/137, 0x89) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)=@md5={0x1, "5a5fef669ae842552e9f95618bb60438"}, 0x11, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000001800)='./file0\x00', 0x1) fallocate(r3, 0x0, 0x0, 0x1000002) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x82, 0x1) preadv(r0, &(0x7f0000001780)=[{&(0x7f00000005c0)=""/196, 0xc4}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000480)=""/3, 0x3}, {&(0x7f00000016c0)=""/160, 0xa0}], 0x7, 0x6, 0x8e6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x20000, 0xa0) dup2(r2, r2) 09:14:03 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000041) 09:14:03 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffd}) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) pkey_free(r1) r3 = gettid() pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, 0x0, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) fallocate(r4, 0x0, 0x0, 0x8800000) 09:14:03 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x4}], 0x100000000000037f) 09:14:03 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000030) [ 1023.750148] FAULT_INJECTION: forcing a failure. [ 1023.750148] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.750205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.751913] CPU: 0 PID: 10084 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1023.754611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.755719] Call Trace: [ 1023.756080] dump_stack+0x107/0x167 [ 1023.756569] should_fail.cold+0x5/0xa [ 1023.757074] ? security_prepare_creds+0x112/0x190 [ 1023.757720] should_failslab+0x5/0x20 [ 1023.758228] __kmalloc+0x72/0x390 [ 1023.758696] security_prepare_creds+0x112/0x190 [ 1023.759332] prepare_creds+0x452/0x5e0 [ 1023.759856] selinux_setprocattr+0x354/0xa20 [ 1023.760439] ? selinux_shm_shmctl+0x180/0x180 [ 1023.761040] security_setprocattr+0xb7/0x120 [ 1023.761633] proc_pid_attr_write+0x340/0x7d0 [ 1023.762224] ? rw_verify_area+0x11d/0x350 [ 1023.762783] do_iter_write+0x4f0/0x700 [ 1023.763311] vfs_writev+0x1ae/0x620 [ 1023.763805] ? vfs_iter_write+0xa0/0xa0 [ 1023.764337] ? __fdget_pos+0xf1/0x190 [ 1023.764850] ? lock_downgrade+0x6d0/0x6d0 [ 1023.765408] ? ksys_write+0x12d/0x260 [ 1023.765918] ? __fget_files+0x2f8/0x520 [ 1023.766465] do_writev+0x139/0x300 [ 1023.766943] ? vfs_writev+0x620/0x620 [ 1023.767450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1023.768148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1023.768830] do_syscall_64+0x33/0x40 [ 1023.769320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1023.769998] RIP: 0033:0x7f7b39e69b19 [ 1023.770491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.772894] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1023.773906] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1023.774860] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1023.775799] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1023.776736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1023.777673] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:14:03 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000042) 09:14:03 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(r0, &(0x7f0000000080)='./file0\x00', 0x80000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30c5, 0x1, 0x3, 0x2, 0x2, 0x7}, &(0x7f00000002c0)=0x20) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) lseek(r1, 0x4, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r3, r1, &(0x7f00000001c0)=0x100000000, 0x9) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x2000000000000}, &(0x7f0000000180)={0x8}, 0x0, &(0x7f0000000240), 0x0) 09:14:18 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:14:18 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 56) 09:14:18 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000043) 09:14:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r2, r1) 09:14:18 executing program 6: socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000000)='./mnt\x00', 0x0, 0x8, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') sendfile(r3, r2, &(0x7f00000012c0), 0x7) pread64(r3, &(0x7f00000001c0)=""/4107, 0x100b, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup2(r2, r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r4}}, './file1\x00'}) getdents(0xffffffffffffff9c, &(0x7f0000001200)=""/139, 0x8b) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="77aa3e078f44659aa5db5b28591712bbc1c6ea9535b0935c78a17e8d5dd0a1f4038399baddc9b2e5b028e46a8533ff9199c12fc6e4c8d1dc6d9fb3a4da1231ee237f713d2d909050780592ee735d96ac0942716686a40e9232ebf9f80e15135b565e4705d114f02d00f58ebf9a608a8a0d6efb5f8de57cb5a5a8080881f04afc2defb5bf04ff99466423df9e3a8a2b3ef8032a70e7d59941f97f199129124c32aaa45ae007ba408c25d431b6ed71e015f4900d726f2a82c2f7bba5a17bd0f5", 0xbf}, {&(0x7f0000000080)="efe97e4083e605c8664351fce6fbe5377cc7f741fbbc1aa69dd7e759b93c226d3eb2b5c52e87df3baab8f0c3bb85aa371f0509860fa5675d8549b31250c770d34cb2d639c5ac", 0x46}, {&(0x7f0000000300)="56392ca90d74f3d5bed9a75d0ddc6742b8885137bc6f65536a48e9e4b79e60cbabd5c16e70bfaf75ed9c2da73b5da716a84400d8a72f3225a0c9e0e43fd859c97fb2cf9995990b640f463f30cc758d5232f04a", 0x53}], 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000000000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x4}, 0x90) perf_event_open(&(0x7f0000001440)={0x0, 0x80, 0xfc, 0x1f, 0x3, 0x3f, 0x0, 0x8001, 0x40300, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x6, @perf_config_ext={0x0, 0x1}, 0x8830, 0x6, 0x6, 0x0, 0xdd02, 0x4, 0x0, 0x0, 0xbcfc, 0x0, 0x80000000}, 0x0, 0x3, 0xffffffffffffffff, 0x8) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x48) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x37, &(0x7f0000001200)=ANY=[], 0x0) 09:14:18 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000031) 09:14:18 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x37f}], 0x100000000000037f) 09:14:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000180)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {0x14}}}}}, 0x0) 09:14:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)=ANY=[@ANYBLOB="feff00822db87c3d1ea8d9599eafdb49b36a6d0886e7b1fc965be1a65967e183b5a18278e6d9821c9f", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530002c73af821976942a5ffe872c5237e05634de93ac3f881949db65c8fa8891ef2e1462c2cfba9e02ef30e535553ce5a2b5b90d874d78c41bdbaf7991851af07a6d039cb81e035f8eb1a5ae42abb0ebb85695322cee2193b6931fc88c5cf121fd7ed30e1dd3756b770e9d5bf78d14c35a58df"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[r1, 0xffffffffffffffff], 0x2) lseek(0xffffffffffffffff, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r3 = openat$hpet(0xffffffffffffff9c, 0x0, 0x12282, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="34010000170001000000000020000000fe8800000000000000000000ce4190da00b8254f618835e2598e2500000100000000000003000000000000000000000000000000000000000000000000000000000000000000fc00"/118, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="070000000000000000000000000000027f00000100000000000000000000000200000000000018000a00000000000000776ce5dd8489071246420660a4e58e4bfb5afdc9", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESHEX], 0x134}}, 0x24008811) close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001e000801000000000000000007000000089a000002000100"], 0x1c}, 0x1, 0x0, 0x0, 0xb31505c58d61db6b}, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000100)={0x6200, 0x1f, 0x1}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) copy_file_range(r3, &(0x7f0000000200)=0x80000000, r3, &(0x7f0000000240)=0x401, 0x3, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 1038.585353] FAULT_INJECTION: forcing a failure. [ 1038.585353] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.588152] CPU: 1 PID: 10108 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1038.589652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.591440] Call Trace: [ 1038.592014] dump_stack+0x107/0x167 [ 1038.592804] should_fail.cold+0x5/0xa [ 1038.593620] ? create_object.isra.0+0x3a/0xa20 [ 1038.594611] should_failslab+0x5/0x20 [ 1038.595424] kmem_cache_alloc+0x5b/0x310 [ 1038.596304] create_object.isra.0+0x3a/0xa20 [ 1038.597252] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1038.598364] __kmalloc+0x16e/0x390 [ 1038.599150] security_prepare_creds+0x112/0x190 [ 1038.600147] prepare_creds+0x452/0x5e0 [ 1038.601006] selinux_setprocattr+0x354/0xa20 [ 1038.601938] ? selinux_shm_shmctl+0x180/0x180 [ 1038.602912] security_setprocattr+0xb7/0x120 [ 1038.603865] proc_pid_attr_write+0x340/0x7d0 [ 1038.604819] ? rw_verify_area+0x11d/0x350 [ 1038.605707] do_iter_write+0x4f0/0x700 [ 1038.606565] vfs_writev+0x1ae/0x620 [ 1038.607349] ? vfs_iter_write+0xa0/0xa0 [ 1038.608199] ? __fdget_pos+0xf1/0x190 [ 1038.609011] ? lock_downgrade+0x6d0/0x6d0 [ 1038.609905] ? ksys_write+0x12d/0x260 [ 1038.610731] ? __fget_files+0x2f8/0x520 [ 1038.611610] do_writev+0x139/0x300 [ 1038.612374] ? vfs_writev+0x620/0x620 [ 1038.613197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1038.614325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1038.615448] do_syscall_64+0x33/0x40 [ 1038.616248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.617344] RIP: 0033:0x7f7b39e69b19 [ 1038.618135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.622119] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1038.623755] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1038.625295] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1038.626835] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.628375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1038.629893] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1038.640111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.648312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:14:18 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000044) 09:14:18 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000032) 09:14:18 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000001880)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)="037ec052eb7052ecc311eb97be349b472124662ef4dede168d2cc6b84523e469f7de3551a997ff1a436a6a460d6c7b3b654058217932b9b4e725b61005069a94b0023b61ffa96663ecdf9beb68cbd35d7220f33536b1ffa44c6249741c19fb3b87fc119879864c8fd9e2289f682666006227ca0c846b", 0x76, 0x12140, 0x1, {0x0, r5}}, 0x0) r6 = open(&(0x7f00000000c0)='./file1\x00', 0x100, 0x10) close(r6) rename(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x0, [], 0x4, "9755154351ac9a"}) 09:14:18 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x5cbb43, 0x0) ioctl$CDROMVOLCTRL(r0, 0x5381, 0x0) 09:14:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x10001, 0x7, &(0x7f0000001540)=[{&(0x7f0000000180)="12a439996508695be353e978d8fa77802983f116419aaa4c08d68e0c5a30c386a4d37bd25c21bce03e33d691ac073b6db7313e8ce4f1941c8141700e00f7d615e582896b215f5021de0b7df7dbec1315d94fbe8803aa7ddbb86b3eff45e9c7853c3d9fed7fdde76b6a693a4b168c49613eb1ac6a947916e7e4", 0x79, 0x1fb86a53}, {&(0x7f0000000200)="8c70e38efa4acc361dc1ce01437ffd5d301056f954d930765f1ff3457eb9c94d4fc306e8384d9b26589b903dec5bd754e32bd39e01d84a3ea7c3e648f03c67713b12f44ef88f23299aedd090b83affdceaa95918f37d2673dbf839f9508caf084d4caac56946b9361c7499fb525e2005c9ca77ac5e233d88715e6efa3863dd2f8d8bd681af4614412db31252667044417c869869a5109fc1afc024e119ecbe", 0x9f, 0xffffffffffffffff}, {&(0x7f00000002c0)="beedfc49acc390e001421cdb95a3360e5dff02b1cb133ddbf9257775cc59a21cea15b1f679f93aa9fd08e663270d8beb4cbdf833f03322b3e6d8a82c9fdd986c2dbecf4d925694ac0ae21d9e68f874aeef96c5242d3f17695de3aa89ec46f839ed1753afb52c07dce6ad0345411337137b0b824952103c41d962e12d4bb225ac38f20114cdf4bc248bb5505aa57c8954d3b5360096e00b2d499e68849525ee0711a6ce726c760d0c65f91dfd0c3f51e8a71f80c282c94a73c8fa05f7450304b549d0f7208b6619f610ed438e4c", 0xcd, 0x9}, {&(0x7f00000003c0)="b4d602d8b18be4baf11a61c0f6a675befcabdd1120da3d768ed84579412f4e47c8e58639d19e6da895e8781ebc95242c9cf0b748b5360ddf", 0x38, 0x10000}, {&(0x7f0000000400)="e7fa91d1a0bcd1a17eef063e28a85600c4cc109a47da1aad01ed69fcd7c52b081e32d40f057142477af703c44734795c742539f58082f534766ca5c75e8155f266d167092c9ffedc9cce065af7d133dc5f7da44d4e77c60b2db70639e5ee699438b673fd45fe25244c912eef671e9822a1cec54583e0bce6b7f025f1", 0x7c, 0x7}, {&(0x7f0000000480)="a4689dbbc40fb6d46a5ffe983f488c75c2c3b54f68b39fb78ea15c555825f6ad99d6ddacf8570b870669ee810501c6a7a4d950ff4c1e347a1468c43d9e452f6645d4f42cc6991649acdd13d32410ad57bbdd5e82bcca65a067ba8dbdae39124f4d32cf8c6f1efc6e132fffdf0003e463237af7869b130eecfab4cf1e7d299fbf9601e0d34917c375176c44a71cdb07005a9b17692fc5bc78779d96a28f64a2fc9e261d5ccaf3162e96b0e9189279627450959ddbe85719b8b2856b16924833ce3311f6335407442a92c3a72e188346d3a9250734a113aa2b065da89d46193a76c9c4c44420ae4aa21cebdb6762cfe1b37ce4a92532af38ddebe79b0fcc4555b49dedb080997f241de4c16f4cdde5b79e8cc20606b439bda66b2f842bd757b1ea586d4da19660ec8dcfe15012826002dd5b9c1c1fc02f6b869289b241914243a00a85069cb171cb6c6d167d91315a69ba1c962e99a94fede9ffe2ddaab32f3ef6f62461f4a7aad27746362cf934bc4678496b30dbcbc007a38e93f182a84a77ad5d29713c8a9fc857bcf2d55a84961fb0add98f2c4e6c6b05f9aca5f87e1fb3b88c3e5609849186b21eed5b934e6d75c2d7db9dac340f6c575ee5f7b2fd18b23412be3e33c36175d64ed7b108074a91e80441f1c73d93013cd53f8d24151314177366f6a9b39119e954aeb3a961132ad4bda3df71460d17477ae216e48595a4f1b8ed27f09f2ab2fc241f60f784f17e4b351fe2e5f70524eb7c661662b2af4dc0ca2bc1e2a2823f189d3d62618b54fbfe38d03358cf4e672572bd4ae54a38d4002359c1406b515d5aeeb121d5e25f078824eb41ed53a297bd8e279dcd9cc4040e22b952f2a860245849fd7b1df240a500b9ab74caa747626018a28c851f2b6ae04f27172833d7480d0d7d14f7836ff11b86ae29bd5bbe1addc0802f739fb4fd6584a10656c664b617e20d7fca082b766f96eac013d4e931ed6cacaa0acd60bcc3f4a6680cca317e7f865ec4f7b5e27bd6ae0a45d947d24d708b1df52e31a70927eae4143ade010918a819e7aaff1c136fb38bcf266f6f099187eb51420d0310c8fbdb00a9645d3caef764faa85ee80af48756c90f48b9e365819036f340b7bfb25c2c5337ec3b2fb7af24942ee6f883f6e6d25f62f54cae467546daa97ac5cbc4c2fc1553061af084114e25adb52cec50e4cc7ff4efa42e494289c0ed1a3814a475d56cdb6c78c07b7efe737bb3536391d129bf062b66069087ce295274a42afd6e074d0a2b94d4314168b50ee62108c57c6b46d7589e5edb96bfbea639c610fca08d4ada2f262b88f43d1260ce096f1afbb33bafa5b44eb5fac0b833fa47226c93f8df68bda761772499a6dfc714d9062e248233ccd1d40d1378e16d412c90d8ff2047cf78102a0a6260787ac55057b6017a1162a7490603c54e1165c9b3d59fae0a9553b7f522287ee37e9fb083c6e7a4988734b9d1b49b93ee16f8c0111c1db3c58a8c70be8f313c33983d3dd1a0c4f34ef390cbee7704f63c48a941fa10f75cdd7c12f40f3602f429ef3cbca5998868a16e5b611e616b662833ab43591ea43d0cbd1e1ea2a05369a38145df99834ac457ba63e090633ce19461252b00142dbc920b61886b7fa3ceea2fb4a770a263cea25f1c5992ba47ef8c4e0047ba212b1e3eacb129b6f84c8cb895a106404f35e7e27b9e7dc6e4baaf920bae25d31891d34ea5e410ca0c98b375ddab739f48dc1807c287af2007791ab01fc50a31f4282d464db50b15dfe28a286f64dd3348178628dea28e93eeea8b91d4182ec3b6dc5807d0d8c75d61e91044191a9140226b8a6f1d6a3de8e38fd429ed4b006c46ba8d0ca4516538503bf958e5ccdb3ce7cb27f89ed15ebe2e1a4e3262cae447f98aa90888d192d507201ddee748c6556ac4832c03ec82fda0bded466cfd3fcc6e9464684bd3b89dcc58cf60d092944d4ea5fb071b05d8010722e49f96c1fc9f4be076178fa79f1048126076c3471eaef7fb001cf401ae36b1f5e9a894aa7972346560e3f666364917cb95143a032d330a06f89d339b5557ff3bd64da6b0da1be5c40b53bee7163d4262b8220ebf028864e9bb9354d14a165b9466ddc7524f9e9db6e36512ed1b845149e2d0bf05e612f67194731ea6536af076a248cea82bee30e9a5d1030dc9b91be2279df2a3219dddb28f93b7768c16135ba9c8781361b3adb5646ad7db119e6008287b09b460da7375df104071233a4563b3dbc627f96b14e7eb6fc817e288c8907bc6ac271a3cfefa05ba6a301b99d8cc6e2f44b1fb9bf518ce1880bae2a4251fa06ce51c8006b4132deb9d04a46d396046e55991a3b16a016a85938cc4673344567cddd4939d633f2e6aa85a9517153e4fa81f05422fa654d87d2ee911e538a61ed9e4515013fb9c06ce3f578597b47df3c8c07d5c4bd84812b5bc523ef6ab68de5792854a5d65aa1cc5b79f78797924f71a4839bf16b6217bc7f5dc3ccaba297f96916fc2f1026c5842826b80d6cb40d630d006c0083e15b04025475c4cb77d2e37ead5e97a2317cc206f80d4ad73ca75334b17773a2fb0003577c84199aec6d08773ecb3a990c5bd27f186fb19187bb9484013e65402a0bb2dc54c86021dcf8b223fa45b41829b10ca1256aad073532250dedaead1195702d593328e7d82e911884ad5f11e077f87ec83bea3c633fa498eb8e689c7c04220d13d033cf5a932b92cb234cd8b7c92fa0857f24af2828176b846c11c8c280c47b73c3a2f9c37321d36f1e55aacf32981dc69b0e6b2a226ec8ad6241ebea85f0552a1f8f552f083dec45a54caaaf0d34f2ebb945445198f0874198f25953edcc1ab6d56afc08cd99aba6167e8b712b73d70c8a413eebfa4d213410be1f65762504ea9b8b597a160551034fd39cb0e36b3e3dc7b9f5c878dcad5e8c4f0cf3f2e6b8a0785bd17102ced84f24ea0db23ea445406c2de9c2d15a398d9c38a5160732bcf150d0a4d62fa4b784e2726ddc59714dad319b67678bf185acb6b928b2b286c14d7db10c5b39bf014f30078c783a8eaba4c1f48a1d82cb1899bac899fd36be95fc7945c04ce5c75524218c0fc3ca0526142603d81595c0d7f53ac9fe2736801c2203a7b1283fe4822df61fe1b872dc7b2e758d30769a66261e7ec8150c5c24201974c550cd24392d2a7562ad2d1d54aa25645662eb236693756fe0535ac5a59e3bb7ffc87896f0ce549ac2c88d56c466a05036dc5ffdb82babfa4968e0beb346c59da894c95dd7db764911fdc935e308fa52e506a159529158d9048111321ec70361a724ac465e45d5b322155795bf4222980fe373b074636bdb26557fd9fb13931438c98c6adac35089bb48dbdb8b6ad3b95e3d68d382b1c7e0e3064f276d7392130656df3a7f6022fb5e6b6a2f748db94ac89849028ce3c2c6b3aa87883de62828db9f668a9b325754f5619649193dbe5c2ae747f87a5b666296cc39df8ce18adc9635a51e57f4d23afed227d83321319ca0aee66a54e27fdca3317728a035ae475d556f07a2eac37d90a88cf4daec5bf3b1288071bd14ab8301eeb14f1a787a5933b0f616c631c6b248982c8a663b0d605727f09ff2753a7663954941c2482a535a0a5f81c1273a01a518ab88cc79e1d408c2c72826853db834fc83c98b0d2879a8041eef35a8469583b39e5634fa8058a5f8bd9cddafdec80c860323b076279d9408b11d5c1a89da669770e3a0f7ade44324b3c98c1ed41e9920bef0d065f66f02d8536e3485f19b8da3e9ba659b3b5c08cedfbbe7cdfc61f8425e50e81506052c399b17eacc08acd475e92bdd8e524612ae60c0c428de800a0b68c9061a8e9f00f106fcbfff3de8c06325ab1d2a232643fdc1a693f4bb9b63a184aea970aef2a90bd8957ba42277592b6c05d444f7a2c17ae82a203ca58c078def4b9ac765a1c3fe0e57d6e1462792c5a8c6752e9e8e315946c6fecb7c80b06fceaca6983eb5118f57d512207b5a681c0815cce0bda793c094c5a7ef960216a164dfa8e5fea724c5e6f05540faa0655219d863a0718eec93378572bb0836e8de7933e470a280112e9fae5b224aa19089dcd79a60c65e79e40669390814c3335756243a769546790c729ba4f257e60c62669209dac8eb75a421a60f8d6f062caee6087168fcd270a5153e01bd811e875fe81da31aad05f8afea0f7b46a72ef2444fd44f70929b1f9f094b8424a289d8d5e6e433d9c3eccc69d499be77e020ef1f8a831ebf3d297d23384116c6f009f6cdd0f93c62cb678af21e65893e7ad621d0b3a9fbfc6dd33237f5836c87919aed9dd70879592380891be678a33d43dcf3cca535a8000b34c3d6679ebbd0f66b62e84801dde824ef5407f9bcc781fd1e8bdf34a85b6b281b0cf2d837a07b5d36aaa3a63fbbf4d9afcfb547a414f0d3fc8f26a13450ee09a53fd2a9fdb7397d40df0568ef7ef1d109a811be92139598ae36d9db9f1fb4b42058c965d7907309c9dbeed012ae1c4a9e1940249910e2ba9cd2903bf1af325470ff8483674e5622e2c9bb051af301c1a2db2e41e2ede0858d948a839883caa8411eb9bd4619f5211dc67337f0dbfd54d5bfc368855a58334bba97c6c75a2a38d6b51fd8091fb0137dc4c8c9f02e5a0b45f85cef201f0328f85c552eb91e3267f7a1160a093191eb5f5c1b0c81284e428071a308c9ac3b179ba65666dd1307e834819018a677e11614301967b25fcb265f22958d0b93776c6a0cf786f1727ceaddfb3cad6560fa095639e7e518fd431df985e52d0874560754b499ef410711a6ad9dce0d1e856b2866c237ed1662ef7c3b0e869998b923ca2db0adb20f77bda6f2990fe6c0b28eeff0ba4effa87fdd6c47e0ed8f1db73675207b30be79089cc37f63f04089ea1b832feefc689f9210b13104370a0622568d1bc142fee99ba581e2c17accad052882161761621df95a2912252512f64e3ec864751ca762676133ddd2326f1d87b23e4fbe2139d0a21315ae7ae6c5e7967ec6302caad14b691b3c7beb0d8ae0ed9011b0583462c1c3cb4860979b25854fe8b0ed939bef5bf1bad9521f7aee8cee5ec4f0619d3a9aa6d6e4b4ae5629c71e6801f523caac86719cf4a3726ad693c283715337dde0c3544de465c009a226a3ebd03b26ed91e1056b1640318b68898005e0f4f28b92689a2aa22fb98446b05bd9382c33777d95166e24401176155569bf9f2d05f8af8ff7ac9cfafa82bcbe52bfad6bdffef74b03a7f8694ac9253f89146d2fc411706a7de24c8334ab94557ace0812468020c98dabc5f103ae34b14f9f975c212a227deb7cbf29f4700ce032adc6c8ffe2f071d2bd7a71eb9afcb37957f89443553f458eb20f4d1e06cb7ff0324f10dfea12d902f68405230e5e143db9618ffb21c5c44d2ace07aa3cf078c1731da64adbdce69c7c0c671a54d13f8a71068760cb9cbb4946909925880038d5219a7f98385494c4dfbda9d4866f498731d5d6cdfdcacad07ce2ecf0519ae596fb8bcdb856970f05cc35858bca02e3b89f3b2c46337eba2f47eb97e33a5514b4a791974b6968b560826f33bfc22ace9171fd78359b29cd603ccd56d59e71b8ccc629ac149cea21fcd27a9837a7f82da86c05e753c507f49e21a18e5e67c19985807911c9b352878c148fda5141ca29b0a334da5a33a683b909d6c477ad46ede509bd47f9d3399a2b826f5829db40cf7f22ae8117ff8b705f3f056b6f6aa8b3e9ee7863d4f1de37e24231634d5e80b58b73522e0d4889b4f9b427983c2d04706abac522c2fa1b617", 0x1000, 0x6}, {&(0x7f0000001480)="59153893507ace9d630b58e318c3d4b2f7e42d57b94083df42c8d2462cb849587eb13615890c208f6a7da8e28809a6e05c85d7202719f4923e61cf8cdfa8b427885a8abd4021b286aca5e2ccd10a15f52cc797cdeb8358f607508aa0b02d1b733637998032475f40f9c55370d89d9994926a3771142e221ab6a64d03fb1bc22444c3e29518a05503e6fd1484a91d9de9c0978a73cc4e5a61d5fb461d309c6e15", 0xa0, 0x876d}], 0x1908401, &(0x7f0000001600)={[{@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x30, 0x34, 0x6d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x32, 0x17, 0x32, 0x35]}}, {@huge_within_size}], [{@subj_role={'subj_role', 0x3d, '%$'}}, {@subj_type}, {@hash}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsroot}, {@fowner_gt}, {@subj_role}]}) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x104) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) openat(r2, &(0x7f00000016c0)='./file0\x00', 0x480, 0x4) creat(&(0x7f0000001700)='./file0\x00', 0x140) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="629fc2"], 0x1020) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) quotactl(0x1, &(0x7f0000001740)='./file0\x00', 0xee00, &(0x7f0000001780)) [ 1038.813108] loop6: detected capacity change from 0 to 32768 [ 1038.832736] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:14:18 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000045) [ 1038.848981] loop2: detected capacity change from 0 to 135266304 09:14:18 executing program 4: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000044) [ 1039.016627] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:14:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x6a, 0x1, 0x0, 0x0, {}, [@typed={0x4}]}, 0x18}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1bf8c10fc63f67e5"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xa4, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x81}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x136}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000080)=0x2) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101}) fcntl$lock(r4, 0x7, &(0x7f00000005c0)={0x1, 0x0, 0x1fc}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, r3) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:14:32 executing program 6: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/132) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$tmpfs(&(0x7f0000001480), 0x0, 0x0, 0x1, &(0x7f0000001680)=[{&(0x7f0000001540)="b3", 0x1}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7375626a5f726f6c653d23232428265c7b0023255d2b2e2d28c82d461e2559b8f8c22d9a1239ba3e75a82c7569643c", @ANYRESDEC=r1, @ANYBLOB=',\x00']) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12}, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x0) r4 = geteuid() fchown(r3, r4, r2) 09:14:32 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000033) 09:14:32 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 57) 09:14:32 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x7f03}], 0x100000000000037f) 09:14:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1b) syncfs(0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x12) write$9p(0xffffffffffffffff, &(0x7f00000000c0)="0fb865562069ab2f32beb83e263962827b00d7d8b791e504b65c5ed26e6688d67a9796c1aedca0de65d21b4796fd1b3df0ccedf9739e29f6b965de85433255da7945b7a842ba5fa3dbe88cd26fc9b1b807bc2d59e5a9f2c2bdaccdb839190141ba0151232669cb02b3b076251c024d73f501a54d959dac7cdb3fc324ab47f2a3e1ef12691eac5cab96860e948ea4", 0x8e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0xed) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r2) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000380)='./file0\x00', 0x7ff}, 0x7ffffffe) r4 = socket$inet6(0xa, 0x1, 0x7f20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r4, 0x0, &(0x7f0000000180)="3f9c5a8c190130d36b0c6b77228e88f0246dc52094e912877e9b2ff15789f6511d98ab0c786cad136de242101acddf4efb4ebb4eda331629ee3a51a2cddc14d08995ff4683e572fbe1aef8298be9b52dbfb121e2d167acab04a5facbf56e68fe4da930a8151a624c347449c8c1dfd6c541f3053b9868b5cc90196bc2505c1b3a5beeaceae2d23262dc631e82401014e3a39e540e3f3e4a2be8bec62069c0d6d533d8259a4d83a0e5d7d05ffe77d02775e4157a31f54a0a04c5a26902fa0754a4072a74934fff88", 0xc7, 0xd0}, 0x2) 09:14:32 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000046) 09:14:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1052.526266] FAULT_INJECTION: forcing a failure. [ 1052.526266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.529406] CPU: 1 PID: 10179 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1052.531144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1052.532949] Call Trace: [ 1052.533512] dump_stack+0x107/0x167 [ 1052.534286] should_fail.cold+0x5/0xa [ 1052.535105] _copy_from_user+0x2e/0x1b0 [ 1052.535943] memdup_user+0x65/0xd0 [ 1052.536686] proc_pid_attr_write+0x247/0x7d0 [ 1052.537604] ? rw_verify_area+0x11d/0x350 [ 1052.538496] do_iter_write+0x4f0/0x700 [ 1052.539340] vfs_writev+0x1ae/0x620 [ 1052.540120] ? vfs_iter_write+0xa0/0xa0 [ 1052.540977] ? __fdget_pos+0xf1/0x190 [ 1052.541799] ? lock_downgrade+0x6d0/0x6d0 [ 1052.542685] ? ksys_write+0x12d/0x260 [ 1052.543507] ? __fget_files+0x2f8/0x520 [ 1052.544362] do_writev+0x139/0x300 [ 1052.545123] ? vfs_writev+0x620/0x620 [ 1052.545930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1052.547044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1052.548140] do_syscall_64+0x33/0x40 [ 1052.548936] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1052.550031] RIP: 0033:0x7f7b39e69b19 [ 1052.550838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1052.554732] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1052.556362] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1052.557871] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1052.559402] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1052.560920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1052.562440] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1052.618264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:14:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)=ANY=[@ANYBLOB="9fd12ab8189c44040eed5b8464387a28010400001f00000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16, @ANYBLOB='./file0/file0\x00']) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0xeab8050e99fd9bc9, 0x2004, @fd_index=0x2, 0x64e8, &(0x7f00000002c0)="2a3ed46defd02223dcc61e1ddbe47f75baa8c1562b24ceb869d17d893e09570b139a3a6e166d12892e1235e98b3a91d32ca8ab69e19440263493c95ed47e3bfc000012eea53297336ac8f5d3f002f168278c955fbeca68e78d215579b29e5761b284c1af480c9c42dc2aedabb5511bab086e5aaad239120f708d48953b3aa7b52703bae93155d9c7cf6b9d31cad9a062d50075c1f2e1cb478e4c", 0x9a, 0x3, 0x1}, 0x7f) lseek(0xffffffffffffffff, 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) openat$hpet(0xffffffffffffff9c, 0x0, 0x212282, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="070000000000000000000000000000027f00000100000000000000000000000200000000000018000a00000000004fde357223a452e90000776ce5dd8489071246420660a4e58e4bfb5afdc9", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESHEX], 0x134}}, 0x24008811) close(0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000100)={0x6200, 0x1f, 0x1}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400, 0x128) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x0) openat(r3, &(0x7f00000001c0)='./file0\x00', 0x183600, 0x28) [ 1052.661993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:14:32 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000034) 09:14:32 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x20000081}], 0x100000000000037f) 09:14:32 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000047) 09:14:32 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000740)={0x0, 0x4ac1}, &(0x7f000075c000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x40448c0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, r0, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x6000, @fd=r0, 0xffffffff, 0x5, 0x10000, 0x8, 0x0, {0x3}}, 0x400) syz_io_uring_setup(0x2812, &(0x7f0000000080)={0x0, 0x7aa8, 0x0, 0x2, 0x128, 0x0, r1}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) r9 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x3b1a, 0x0, 0x3, 0x158}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x10000) syz_io_uring_submit(r5, r8, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x1, 0x401, &(0x7f0000000680)=[{&(0x7f00000003c0)="f982d00ccc450595d6d61bae818ad7305ada3e83a051247508101fc835fe04fdb67421208a8c64914c95dc9da151ee6b59e133586a26c98d2c873835a4fbc567663feb5c8c0e339154524d2e8ae22169d9d2551bd1a346f65cbd3acd99d5c60dc5b8a49769e9f31f05519f6b9ec46742eb714b5d", 0x74}, {&(0x7f0000000480)="31814c5b98554e81e5e287ec2e0fae2209d6fb45855f7ba4ee19d68d76bb7c4e513c83ae8f7352560aa4da8e505a7f86b653f85e9611275608a1467fcc3e36457b660544502313045a2fdf0c80fda7fd98c403b667b55182d30c269068dbcae1831273394b7a6d3e367cd9ade2cac96f80b044fdfdf1e8c57d782fe10f73926967fe0fcb131d3aae682cf98492d5b6501808831bf06966c17861871a4d8a", 0x9e}, {&(0x7f0000000540)="971a86d8dbcb0287f43b71436665e5c7401f88555e74929d09b8c39d6b1712c1f80438006a1c5deac76ced3cd75170976548e4a562c4b0458a1e819440982046738dfd87526e9d0a898738891b271e767275e4b7ef891bf03bd419f01360181edb0981ab24a9c06fd1b6f7244526a88d27", 0x71}, {&(0x7f00000005c0)="685141f034a4b71868c1ab57162f935e7e6bde8b3d98f46bff9b069cdd68761330b1e230ab05789d0296c40e9a3ad665623ceaf6314ec0fe4cae2e3f9178dd58a6816b3408e7b96af1525a329f7ac49c326a41058cac2d783c7d9240bbf20777d94b480c075f25c0ba5b37c030aa6e18f2", 0x71}, {&(0x7f0000000640)="99394ee1c416e73b7ae2935baa06cc35d7535d66ed85", 0x16}], 0x5, 0x4, 0x1, {0x0, r12}}, 0x7) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)={0x40000, 0x0, 0xfffffffe, 0x0, 0xffffffff}) write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r0, 0x3, 0x0, 0x30000000000) pwrite64(r0, &(0x7f0000000440)="83", 0x1, 0x0) 09:14:32 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x7ffff000}], 0x100000000000037f) 09:14:32 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000048) [ 1052.848386] syz-executor.6 (10192) used greatest stack depth: 23128 bytes left 09:14:32 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000035) 09:14:32 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000180)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x24000, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x40000) finit_module(r3, &(0x7f00000001c0)='/dev/rtc#\x00', 0x1) r4 = syz_open_dev$rtc(&(0x7f00000000c0), 0x1, 0x10002) fallocate(r4, 0x32, 0x8, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfeffffffffffffff}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 09:14:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@mark={0xc}, @policy_type={0xa}]}, 0xd8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x20, 0x43b, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x20, 0x7, 0x7fff, 0x2}}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=@delpolicy={0x180, 0x14, 0x400, 0x70bd2b, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in=@multicast2, 0x4e22, 0x9, 0x4e22, 0x0, 0x2, 0xa0, 0x60, 0x21, r1, r2}, 0x0, 0x1}, [@address_filter={0x28, 0x1a, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0xf8, 0x20}}, @sec_ctx={0x108, 0x8, {0x104, 0x8, 0x1, 0x20, 0xfc, "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"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20008084}, 0x4000000) [ 1052.954548] loop6: detected capacity change from 0 to 33559552 09:14:32 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000049) 09:14:32 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 58) 09:14:32 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000002) [ 1053.045415] FAULT_INJECTION: forcing a failure. 09:14:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1053.045415] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.048600] CPU: 1 PID: 10227 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1053.050070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.051814] Call Trace: [ 1053.052380] dump_stack+0x107/0x167 [ 1053.053158] should_fail.cold+0x5/0xa [ 1053.053975] ? prepare_creds+0x25/0x5e0 [ 1053.054823] should_failslab+0x5/0x20 [ 1053.055636] kmem_cache_alloc+0x5b/0x310 [ 1053.056514] prepare_creds+0x25/0x5e0 [ 1053.057321] selinux_setprocattr+0x354/0xa20 [ 1053.058253] ? selinux_shm_shmctl+0x180/0x180 [ 1053.059232] security_setprocattr+0xb7/0x120 [ 1053.060188] proc_pid_attr_write+0x340/0x7d0 [ 1053.061145] ? rw_verify_area+0x11d/0x350 [ 1053.062037] do_iter_write+0x4f0/0x700 [ 1053.062894] vfs_writev+0x1ae/0x620 [ 1053.063672] ? vfs_iter_write+0xa0/0xa0 [ 1053.064523] ? __fdget_pos+0xf1/0x190 [ 1053.065336] ? lock_downgrade+0x6d0/0x6d0 [ 1053.066227] ? ksys_write+0x12d/0x260 [ 1053.067049] ? __fget_files+0x2f8/0x520 [ 1053.067913] do_writev+0x139/0x300 [ 1053.068683] ? vfs_writev+0x620/0x620 [ 1053.069505] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1053.070633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.071739] do_syscall_64+0x33/0x40 [ 1053.072546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1053.073640] RIP: 0033:0x7f7b39e69b19 [ 1053.074447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.078332] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1053.079971] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1053.081487] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 09:14:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000600)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000001880)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)="037ec052eb7052ecc311eb97be349b472124662ef4dede168d2cc6b84523e469f7de3551a997ff1a436a6a460d6c7b3b654058217932b9b4e725b61005069a94b0023b61ffa96663ecdf9beb68cbd35d7220f33536b1ffa44c6249741c19fb3b87fc119879864c8fd9e2289f682666006227ca0c846b", 0x76, 0x12140, 0x1, {0x0, r7}}, 0x0) rename(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x4, "9755154351ac9a"}) [ 1053.083011] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.084919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1053.086448] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1053.093637] loop2: detected capacity change from 0 to 32768 [ 1053.097818] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:14:33 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000003) 09:14:33 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004a) [ 1053.202321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1053.242675] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1053.247054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:14:47 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) creat(0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x101140, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0xc040) pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = creat(0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="fe", 0x1, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) timerfd_create(0xb, 0x1000) fadvise64(r3, 0x0, 0x0, 0x0) 09:14:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:14:47 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000036) 09:14:47 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x17, "77004a6efdff00002d1ceb7300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40000, 0x58}, 0x18) dup3(r2, r1, 0x80000) pread64(r1, &(0x7f00000001c0)=""/122, 0x7a, 0x0) 09:14:47 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000004) 09:14:47 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004b) 09:14:47 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 59) 09:14:47 executing program 4: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000640)={{r0}, "3537784fc6fdd5e06fe4c708792bab5d0bc9d74370caa063f660f42847a4656e64fb8f766150af25edad05ffa3335a9f0a85e63c6fd8dd293916514ed859a2c02299120f9dca079945f71b2027086a996fe50731cbd1b789f5f52c113412eb60f3edb4da73ad9f928fa6bc05a0012a514f0873d32b025c02b20a98a13609c2440ab775a82c81a70765886cb35a2195e9a8ed283978a9dd50e63458010ffc539d48a8bd7d10e4dbb00d44749308a753bff0565972d4ec01263fe23dc9d20b6f27abd2a9a1b3dbd8b208666dba00704dc084b0ca61889cad5ea06c959ab7126f3526522de688221d3a1a74d445265210476a0d4c647f24058949b9d5d9802c923ad164ed989acc6dd8fac054d00ed4d2f76670b9a465e203b96eca05dce1ccaf3d2d4dfe8766ee4f718dfa92443613e2907b953dae3b22f49f08bc2f3916efba5eb61d717047c5a20c7d353c2459517a809a21edb845f90843b90abd24abf5aea9dbaad9ec1161a6671fc7af0ebabd900e4b5e1d75d0b2ea318b9c4bc905e9ca253c457404fd51193721ce9908eaee779a3d26716f7ba2b9dc341418d5f3359ba76d1fdf2eaf0d73a4552a3602bd07e52d1d0720de2c8075847b3e78e9534f69c922a3be1334bf953fccbff9c495b1fef334d2a9aa29ff50fef156dfc5aee8b38ff976cba37a5878333fe2304f5c84b9b7215c72792c408c17e545423c0f581afc795634104b928001944e070f50b72e16541bd4a03a4f25853ccb18022f515b4a606535f74967004e35a45755f3734416d7eb8644fa9af1bc613e59b84ea91e48382e2fe9aefd5c5885fca72c72ac045801b999b316e69439f11f9cf4033779afb71271b3b61bda7728801236505753ba72b3ee4ab6b2c49cc814f0f7b31f2bf40adbd47ec680d7d7df909beefc5f88d5ab2282e4dcda7b534e721c71628dae9a344f360e39823cffd34f3440dd5ecf0a8c7451aaff66966999823c6b14a867d81ad2e2938ccc13042b384418ea7ea0b8d29577ea1591c2474a65602fcd58f609aba97bd62cd006b5865d0a39e744d25b7d22b0434d57a85f6798e43f4baf210260dfd9825e07f1995c5ad94be363170a52d2c908fc4db8c0e4d217d91bbfdedae8febd877c13022deca98519727c11dffb2bc6be93f6c6a1bbcb3f0f6763a86b6905d20e6618d40c3036847f0a5ff189558492af0eb386a5115bd5275804e7d6bdee52348083bf8ff945f0aac9d62fe01f71b6d696b9d448422e5cf402ff948107713b5539052452975a58260a95b0a68a47890fa0ba20df940ec9b2deb7be3ff21c93c9a97ee6f8888a9775c3dc0d48bc21077b0841c6f5099073e0358c07aab56560620ca6ceb5304990f628a4b7b3363847b24576fd9ea176014a02b5a3ddfe4799743b2fc9e316e36e4a1d45f2332f1c18f678e5ac3bca9e32fe6f82eb3f7b5c505f50c1fcfe899e9aa14731dc3e0980be0502d38c6dd8d5432d9a4d2d39ae11e6fdc8918d857fdd96ac8a1ab313ad92a9e687cc11f384cb6e3402260c0b56c6ce40160c2a0684eb1b9b93211bcac7db7efe4ff330ba51737294d8255b6adf8a95dd418eb41bf3196a26df871b3cf2928f8d83a608fb5b12481ffc24218f455568ff3d97080aed9984506747166c6d8eb536ef2ac18590f012a7cf29dde8d4b931370dfd12a6dc3c3a3b5fe210c0f88cd0aab03eb8d718257f9aad3c8cc55b2dd5be97e2b9ef761cc7c33889467a5da3b01715d14396ca204044165499c28e0bb60d331d4edc2e3d65feaa8b8a4e00812b764eb78217553255d0d7cce02782662b5179b5e4808bffdf105c3e8c78b4cc0750c6e72a9680c509af4aae0af710eb144ad216d8b7a51ded2eab3a05ffcf26fbfc8f8ad9d7eadf0d640480235ebc2868d5b78e8297508e055678d4828a2d060a1b98bf6b929e682b674bb4237baaa15edd05418d8c142abe56f7ef30ae3da893912afa4e98ed0af286e5bd62043aaf1a0ba086d3f5a5e02bbb9c0d041cba0b13fcf60438c3d62ca8ecb310b27f713f9d1c4ec436f2bb15701d06c1b3336d67693feb93a22401b264934046b9ceaf4ac0512e70ceb11d08cf4871dd1dac3611036c776b2bfc1dd310c9c3cc0a4eec99f8e91c3923daf022464ad9c7fb2309181b57c853fce3ebf7f043b669ca7c6b934bd5f535b00ba2eca818ade5159c498ae133933faaee10fedf149c64e941de142f14f7959c5adf11bc32530262412f589e5ac1cfb4792da768f0e34f180446699a372b586ef0ba58292baaf7b4537ad41fe1bb63ca4c36838c74d86414fde77d665add94bef530390a729827f32dfc68a661b091ae6561585858a32528debf23a65b23b77fcd7683b77da098d00f96e396a1d7b17957c014152de1a8185ae3894c2a08200abdaff1c83c0dcfda7a5bf03ded0f7e7e88652ea94842622b92bd0344aace9faf963d6bd8431b5b82ab613ed843f7376b29c46527cc6d936c62029e1141037f761895a2247710d93977dda2cfe713debfb3cb03ca1674b7afd0dc3b502854dbf9d91f26334f26c729c2093c3efc14ad0cc830218756553aaa70c91e4879164d2e210ad7c2179de3de47e48e2b45e53a2b677b1f55d386edc4f14ce665d1770face3b792a5127b6d9d188672dfe9efae6fc4220f2901f88a1e36b9a6269896a0e4554c1593e8b365dcc8caefce2d41072b3fbb3ae85521a21f031810b27877884953834f860393a924f805bb1f35e6fd8e6aad83e8bbfdc3f78d38ffb84d305a49cae5c66a8d0264334661eda5e4e974b2a925da5813f1304a841bb9cd432e9c0a93b32384a1377310693b50946fa51d389ca130f2be017d5fbd5b7b4978c9ca2c110aef20c4da71b0276e159b08453c434c453e8ed887c358abb67abe1dab4ad07ac93b20d0d727ea1d37467b3bbbf7fffa8c83b97496df95d80dc98d6c6ce25f2ad00069f93372e6e082cd8bc0e541494cf51aa185e4a831cbe0dd77487e08141c89c26a2f9a8110ce09673d2e2574f297dba7d65c7b45ea09acd148d51e9fba12b0cb27d7e60d2767c19bdabad7418ef5532b2a2f4d9da6bbddfa03c5c2de620a50786c3c5884e34e5bb76b74482b0276faeb3f6a52abad6b619ff34b8d55ed48c3d7ae92b2b217726257e174b1faa77f4e713a42f216621ac3c8488279a76ae3e2304df03be45d46edc21a7ed4dc026cec0b7c28c66052d08ce2acb82624ebae2058ad9256d28df6a0f21d212a4322ec251f1d026df3cc93b0ba3fa4284ff9f23e0d7a9ba7623eb49cf467ce9b2ad336a97284633303baa8207bf049da6b8e3d6664c6d4cf198bf616e50c85a3d80b238ff8ccd68ca0d4e97f940e8e405b5adfee1991b25e1e200f6dafc48b273dbcdf2053d8dee64a51ed09598f92091e4d12bd0ef7fd23a508f345eace5c832b67eb3338217c11917ef1860a14f008066398cd1643c8132ce48b49093fe8ffee45dd2aa64bf3291c753035c189e284f40fba09a0febbd7f0c334de4089e2fafd191058edd8a61cd1e9d01889ef7814964ff395e15aeea8cfde2c0991f58a89a4e6251dca856f935ae77657a03b91061d3086bb720e0fd1eb59578cac1793b6b58f98320814ab564d5fc5f559404d7c730e08b290ac2066a0392d81569f2918dbf81fcd97206bccf2e75a6d6937956ba6bd86592d13bcd6446cf5f8b5ea95661307306e5823c7522fd6e672605ed650cfe91513b0bca6483cc742fe1b9c53cb83a89f1d7cf21976b7c9d7892ccd70d6f8b8851b4124b005d168883385954b8a0919da9576828ddcb97d16bcd3563a3fe25538ec9d3255eff87201be11caf932525359b26e9b287145f7c469c151bef1140bcf9f94d6e67539eb7f9872efae56768bea61e0fc7a00c2fa6f062616a881b50fc9db7fc4bfb44439aa6bf244c7b9a28ba31fc011a88b4e8abc260d57b769ecaf379d8a06ddf477a9432dc21483bd08942b72fbdd61ba7f56baf77ff8a5e8a4fe526fe09ac65d6dc0c21cd7cdf14823f35c79edd39f37c8bafcf5c9d818d183bedb501b885c4f2938d41c88e70c726e12a991d555da1c2815f9d8a56e11ba51c127881beb7a99df2576d98f82881a72bc0f3431b2299a14cf78fd3ebfc5a3c576e6ac9818997bb46b65cbf1fb689aa92e61f89fa458b4bf7a880424ce70b61846803f5c4b52a668b094fcc958fa124b05e530b874bef5c4e1f295cda00b558c3141724421fa46915465742d4d79fcaef42b237872bd30c627f5d92705f8cda48949f859dd201f08b63f5ad48399d3e9a04302fdfcd6513235bfb580e34cce1d3a58b9638824d46fdad4c566f656a5afc9d9dee87e30fa69a7de04b7a59878ccc39dcb70b6b5517eb335fb8061f3a301b4563f4887b797463dd84b0c4fe1879817883ed4dc7b6f15f5c48eeb5462bdb8a8dca6d58b1bb737a090745719ee2aa2f4ce1ca0e527c5767fa1a6ef3824c749eaf3309cc741c8f9a41bd019ddfefb287a6f9fe15119c9d34251ce9c68d8a09ce4447dcd04e48b620fd9cf0386660f5830888f0c5b7b9d21b5723eefba3583be48b4d862249d817d4f22f55aa0a9cafc611996ec5fbcfabc07e00d31216b8efe2c4fbe645d97b10f68dd92419e2372b434106c4828788e994f5a7a6e738f02e77e1fc07be6bad99d1f7313b10ec37b29218ce03452ebcec433f4d17f7a169f2176ecc7558bf969cc3443951724e76bb07f696db4cff369e6e93f51f365fc0f04b6247ec8ebb7774ceeb95c1128e2a8b2cb90d604083cfbd0f1a9cb8fd40983133b36484f7d67caf9d11cd1e6a2bd4e6cef4567adb37f92617ace5388dbd7f7becd67caf902a0a61c3077209f9520c8c59c59d4ca6324ae88bbc1f29d0a2522ef85f45d738188e284d0381aa6b5395b5e77345f062a540ec4372b61b60ff8d52201c25ee5e678a4b21b8d18ad00758645e6d1d0c3dcbe7ca6f428b278e3bb1b860b964a4915f9d1ca35041fcdf7c43005e4d9e8d6fed94c1c7534cf8daa38cda0162caf11a0dc380821537f48de2aa84867bd7c0bce8d228a321b3c6cab200e810f514555f247b0b0b6c9c1728acfa2d063e931e84fd18abd31a871e390209660dca2e1e07100b990dbc26756ec32a1984daf7d5be90ac02e8c488de0aafccb49f5cd8dd3da5a6f3190a62aaedca226be6bf59ad17451d7a4ce9782c73d486c1746cd2ee5ddaee93a407e85f92154a4ba5c99d880ae541e59512bf7829338217d1cdca25c82fb6bec6006cd417f92be3977c3c939eef09ed7485f236f0872f1033a1e0aea21e18bae55ab837ba5399bc9f11e63430cabee2453c17d50d1c8bf7039166e9705a4b721c2c4419076dfe396f6ab789c62dfcd131c03a088a59761154962a7ecbb893b5bf5443756f4b990fe29a6380a8d3efded7b6042397d61e9f0fd4020a0a84f0b72ad2775dd15751d6f9aa53da512ed04b791c4fbe3dd19cecf20224e8e7f01e1f39bc4ea0f0702d5ca7048eb0a59009909eb5530dbe5ee191fb80e2b6415c3a8dfa19ffa9ca32625edd5d602e0bfa91ea3266226a4c47bc49daa324a25cadd1d0be863aea6afa8f8ec81b381fed84794d27a9172ebf530585bdfda62c33826a00d13ae3d20653bebec0df3e0ab997ecc5d962b96a24b02a6f970c01346a0b8ea70f41a45c62c57dfe149a1cbbe6ab443057ca8345f529cf86831bb1865e3b3c71f9b746112709a8e5bca0ee1d1bcb42c72e2b4624cb598ce698a531ef92544639d4b36aa56c101f5d94aa968d140c94e728757fa474fc9db92c088"}) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x81}, @dev={0xac, 0x14, 0x14, 0x3f}}, 0xc) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000240)={0x3, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @loopback}}}, 0x108) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x0) ioctl$FIONCLEX(r3, 0x5450) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000140)={'nat\x00', 0x0, [0x5, 0x5, 0x0, 0x5, 0x94]}, &(0x7f00000001c0)=0x54) syz_io_uring_complete(0x0) [ 1067.631791] loop2: detected capacity change from 0 to 41948160 [ 1067.685376] FAULT_INJECTION: forcing a failure. [ 1067.685376] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.688096] CPU: 1 PID: 10268 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1067.689575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.691347] Call Trace: [ 1067.691916] dump_stack+0x107/0x167 [ 1067.692693] should_fail.cold+0x5/0xa [ 1067.693510] ? create_object.isra.0+0x3a/0xa20 [ 1067.694488] should_failslab+0x5/0x20 [ 1067.695304] kmem_cache_alloc+0x5b/0x310 [ 1067.696179] create_object.isra.0+0x3a/0xa20 [ 1067.697115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.698206] kmem_cache_alloc+0x159/0x310 [ 1067.699091] prepare_creds+0x25/0x5e0 [ 1067.699913] selinux_setprocattr+0x354/0xa20 [ 1067.700853] ? selinux_shm_shmctl+0x180/0x180 [ 1067.701823] security_setprocattr+0xb7/0x120 [ 1067.702776] proc_pid_attr_write+0x340/0x7d0 [ 1067.703724] ? rw_verify_area+0x11d/0x350 [ 1067.704622] do_iter_write+0x4f0/0x700 [ 1067.705476] vfs_writev+0x1ae/0x620 [ 1067.706255] ? vfs_iter_write+0xa0/0xa0 [ 1067.707109] ? __fdget_pos+0xf1/0x190 [ 1067.707920] ? lock_downgrade+0x6d0/0x6d0 [ 1067.708833] ? ksys_write+0x12d/0x260 [ 1067.709657] ? __fget_files+0x2f8/0x520 [ 1067.710529] do_writev+0x139/0x300 [ 1067.711300] ? vfs_writev+0x620/0x620 [ 1067.712117] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.713244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.714342] do_syscall_64+0x33/0x40 [ 1067.715145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.716252] RIP: 0033:0x7f7b39e69b19 [ 1067.717053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.720975] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1067.722601] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1067.724088] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1067.725616] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.727243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.728780] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1067.798752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:14:47 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000037) 09:14:47 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000005) 09:14:47 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004c) 09:14:47 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa0086dd6096153f0008ffff200100000000000000000000000000000002000100000000000000018f0090780000000000000000"], 0x0) 09:14:47 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000010000100000068a700000096000009000500000000000000050000804800000091a4f55db35e005c9c8eabbae99f484902bcfa74a7acf67d74b2a0a1ee5297dd608af4"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000010000001800000022710e7c588756c4ef39d0c849a6054a38ca9825315808abef8a909b7efeeff7b8587431a2826cc11c55b2227fd635d804504e2b346211894379a55dfe9272652a63b0341719c5ad15d8c62a14cb36a4b6fad64d690d980ea170014122f463534b39a2fcaee74e7ec41fb43bf1bad062629ac6550db32a8e57472426334b8de5a3c2c94bf85d1913765abc0362b91159d0ada5fb1487a9ef8495b429c90c5fae8528d9910c6c139eb85878d1413f76474a450f60f4e3cafdf7519ba8f33ac75e5e05862384966d022daea338eb15afe68eb5d12ccc000000000000", @ANYRES32=r0, @ANYBLOB="04a50000000000002e2f66696c653100"]) fcntl$lock(r1, 0x5, &(0x7f0000000300)={0x2, 0x5, 0x9, 0x8}) creat(&(0x7f0000000200)='./file0\x00', 0x8) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x10242, 0x4) read(r3, &(0x7f0000000500)=""/122, 0x7a) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x90, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x34004840) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1067.910352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.930098] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 09:14:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1, 0x7f, 0x8, 0x67, 0x0, 0x90, 0x40, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x100000001, 0x200}, 0x418, 0x8, 0x70, 0x5, 0x1ef2, 0x0, 0x69, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0x7, r0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x2ff, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x408300, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x1c4, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x39}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}], @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}], @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c2bbfd9c916d"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe3d6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24000084}, 0x24000815) 09:14:47 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000038) 09:14:47 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000006) [ 1068.012418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.014171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.016397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:14:47 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004d) [ 1068.033910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1068.115044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.116813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.119507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1068.313964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:14:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:14:48 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000007) 09:14:48 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000039) 09:14:48 executing program 6: syslog(0x4, &(0x7f0000000000)=""/87, 0x57) syslog(0x4, &(0x7f0000000080)=""/4096, 0x1000) syslog(0xa, &(0x7f0000001080)=""/65, 0x41) syslog(0x0, 0x0, 0x0) [ 1068.333632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.642009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.648186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:15:02 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 60) 09:15:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x3208, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5407, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:15:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:15:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:15:02 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004e) 09:15:02 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff}, 0x1000, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x400) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x9, r5, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x30004001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 09:15:02 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000008) 09:15:02 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003a) [ 1082.700232] FAULT_INJECTION: forcing a failure. [ 1082.700232] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.702900] CPU: 0 PID: 10345 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1082.704471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.706367] Call Trace: [ 1082.706980] dump_stack+0x107/0x167 [ 1082.707818] should_fail.cold+0x5/0xa [ 1082.708691] ? security_prepare_creds+0x112/0x190 [ 1082.709784] should_failslab+0x5/0x20 [ 1082.710650] __kmalloc+0x72/0x390 [ 1082.711450] security_prepare_creds+0x112/0x190 [ 1082.712508] prepare_creds+0x452/0x5e0 [ 1082.713393] selinux_setprocattr+0x354/0xa20 [ 1082.714389] ? selinux_shm_shmctl+0x180/0x180 [ 1082.715433] security_setprocattr+0xb7/0x120 [ 1082.716442] proc_pid_attr_write+0x340/0x7d0 [ 1082.717441] ? rw_verify_area+0x11d/0x350 [ 1082.718384] do_iter_write+0x4f0/0x700 [ 1082.719299] vfs_writev+0x1ae/0x620 [ 1082.720128] ? vfs_iter_write+0xa0/0xa0 [ 1082.721028] ? __fdget_pos+0xf1/0x190 [ 1082.721891] ? lock_downgrade+0x6d0/0x6d0 [ 1082.722847] ? ksys_write+0x12d/0x260 [ 1082.723720] ? __fget_files+0x2f8/0x520 [ 1082.724645] do_writev+0x139/0x300 [ 1082.725451] ? vfs_writev+0x620/0x620 [ 1082.726325] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.727525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.728701] do_syscall_64+0x33/0x40 [ 1082.729549] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.730715] RIP: 0033:0x7f7b39e69b19 [ 1082.731556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.735720] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1082.737448] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1082.739086] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1082.740706] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1082.742323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.743222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.743947] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:15:02 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004f) 09:15:02 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000009) [ 1082.788082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:15:02 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003b) 09:15:02 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000000a) 09:15:02 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000050) [ 1084.783478] Bluetooth: hci7: command 0x0406 tx timeout 09:15:15 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 61) 09:15:15 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003c) 09:15:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:15:15 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000000b) 09:15:15 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000051) 09:15:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r1, 0x0, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r2, 0xe1, 0x1) io_setup(0x2, &(0x7f0000000b00)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x0) signalfd4(r4, &(0x7f0000000140)={[0xfffffffffffffffd]}, 0x8, 0x0) io_cancel(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x7, 0x3ff, r0, &(0x7f0000000180)="2ab5cd263fa8fff5f5a5c1f29291693c1e9239806049db1b59c67805efded1477b6c134e03dd2d41149746095bb63af0fbbea8f0", 0xffffff42, 0xfb, 0x0, 0x2, r4}, &(0x7f0000000c00)) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000000)="e0ce69c6828383ad0ad533514f4167c5f600c2350bd5c08c5f1e9ff24ca3cfecdd78cc53cf6c2e9d72e90347bfd981e242698645a4f826117dc1f381274d9d969b910536ddd94447313419474afd67a9051e91144efe52", 0x57, 0xc1, 0x0, 0x3, r5}]) 09:15:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:15:15 executing program 6: unshare(0x28020600) semget$private(0x0, 0x4, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x800}, {}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0xe3e5, 0x0, 0x1, 0x8]) unshare(0x54000000) semop(0x0, &(0x7f00000001c0)=[{0x1}, {0x0, 0x0, 0x1000}], 0x2) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/55) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x800}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f0000000280)=""/248) unshare(0x48020200) [ 1095.896095] FAULT_INJECTION: forcing a failure. [ 1095.896095] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.897648] CPU: 0 PID: 10389 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1095.898580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.899688] Call Trace: [ 1095.900043] dump_stack+0x107/0x167 [ 1095.900525] should_fail.cold+0x5/0xa [ 1095.901034] ? create_object.isra.0+0x3a/0xa20 [ 1095.901638] should_failslab+0x5/0x20 [ 1095.902147] kmem_cache_alloc+0x5b/0x310 [ 1095.902692] create_object.isra.0+0x3a/0xa20 [ 1095.903281] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1095.903953] __kmalloc+0x16e/0x390 [ 1095.904436] security_prepare_creds+0x112/0x190 [ 1095.905052] prepare_creds+0x452/0x5e0 [ 1095.905561] selinux_setprocattr+0x354/0xa20 [ 1095.906148] ? selinux_shm_shmctl+0x180/0x180 [ 1095.906757] security_setprocattr+0xb7/0x120 [ 1095.907358] proc_pid_attr_write+0x340/0x7d0 [ 1095.907936] ? rw_verify_area+0x11d/0x350 [ 1095.908489] do_iter_write+0x4f0/0x700 [ 1095.909013] vfs_writev+0x1ae/0x620 [ 1095.909493] ? vfs_iter_write+0xa0/0xa0 [ 1095.910022] ? __fdget_pos+0xf1/0x190 [ 1095.910523] ? lock_downgrade+0x6d0/0x6d0 [ 1095.911088] ? ksys_write+0x12d/0x260 [ 1095.911599] ? __fget_files+0x2f8/0x520 [ 1095.912135] do_writev+0x139/0x300 [ 1095.912611] ? vfs_writev+0x620/0x620 [ 1095.913119] do_syscall_64+0x33/0x40 [ 1095.913616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1095.914308] RIP: 0033:0x7f7b39e69b19 [ 1095.914813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.917261] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1095.918274] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1095.919229] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1095.920174] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.921111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1095.921834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.922061] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1095.942972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.948160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.953176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:15:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x3f}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x9, 0x4) 09:15:30 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003d) 09:15:30 executing program 6: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x24040101) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x40000) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x11, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd=r2, 0xfffffffffffffffa, &(0x7f0000000100)=[{&(0x7f0000000180)=""/74, 0x4a}], 0x1, 0x12, 0x0, {0x0, r3}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000340)="ab26d3ed171a05e98380186629b3d2", 0xf}, {&(0x7f0000000380)="bf220e2bb2fc755bde3af86feeb2c38311bc2ec446fc7fe871a85e09725b52c154cec1b9bea22ff9d1a5172371bca4876c73f20fc7b9", 0x36}], 0x2) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@remote, @in=@dev, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@local, 0x2, 0x1, 0x0, 0x6}}, 0xe8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0xffe3) 09:15:30 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000052) 09:15:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:15:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x3f}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x9, 0x4) 09:15:30 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 62) 09:15:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:15:30 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000000c) [ 1110.211040] FAULT_INJECTION: forcing a failure. [ 1110.211040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.212669] CPU: 0 PID: 10429 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1110.213583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.214693] Call Trace: [ 1110.215059] dump_stack+0x107/0x167 [ 1110.215541] should_fail.cold+0x5/0xa [ 1110.216053] _copy_from_user+0x2e/0x1b0 [ 1110.216583] memdup_user+0x65/0xd0 [ 1110.217052] proc_pid_attr_write+0x247/0x7d0 [ 1110.217653] ? rw_verify_area+0x11d/0x350 [ 1110.218201] do_iter_write+0x4f0/0x700 [ 1110.218729] vfs_writev+0x1ae/0x620 [ 1110.219220] ? vfs_iter_write+0xa0/0xa0 [ 1110.219750] ? __fdget_pos+0xf1/0x190 [ 1110.220254] ? lock_downgrade+0x6d0/0x6d0 [ 1110.220814] ? ksys_write+0x12d/0x260 [ 1110.221330] ? __fget_files+0x2f8/0x520 [ 1110.221866] do_writev+0x139/0x300 [ 1110.222337] ? vfs_writev+0x620/0x620 [ 1110.222839] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1110.223554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1110.224239] do_syscall_64+0x33/0x40 [ 1110.224754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1110.225441] RIP: 0033:0x7f7b39e69b19 [ 1110.225951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.228402] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1110.229451] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1110.230407] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1110.231370] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.232316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1110.233263] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1110.235856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.245394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:15:30 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000053) [ 1110.304138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:15:30 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003e) 09:15:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind(0xffffffffffffffff, &(0x7f0000000440)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x80) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1b) syncfs(0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x12) open(&(0x7f0000000280)='./file0\x00', 0x5c9881, 0x124) write$9p(0xffffffffffffffff, &(0x7f00000000c0)="0fb865562069ab2f32beb83e263962827b00d7d8b791e504b65c5ed26e6688d67a9796c1aedca0de65d21b4796fd1b3df0ccedf9739e29f6b965de85433255da7945b7a842ba5fa3dbe88cd26fc9b1b807bc2d59e5a9f2c2bdaccdb839190141ba0151232669cb02b3b076251c024d73f501a54d959dac7cdb3fc324ab47f2a3e1ef12691eac5cab96860e948ea4", 0x8e) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1ed) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x41, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x1056, 0x0, 0x1002, 0x0, 0x7, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x9, 0x0, 0x5, 0x0, 0x10000, 0x42049, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000380), 0xc}, 0x12080, 0x9, 0x0, 0x9, 0xffff, 0x2, 0x6, 0x0, 0x5, 0x0, 0x101}, 0xffffffffffffffff, 0x9, r3, 0x10) syncfs(r3) [ 1110.332947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:15:30 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000000d) 09:15:30 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 63) [ 1110.378894] FAULT_INJECTION: forcing a failure. [ 1110.378894] name failslab, interval 1, probability 0, space 0, times 0 09:15:30 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000054) [ 1110.380311] CPU: 0 PID: 10442 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1110.381271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.382299] Call Trace: [ 1110.382632] dump_stack+0x107/0x167 [ 1110.383091] should_fail.cold+0x5/0xa [ 1110.383564] ? prepare_creds+0x25/0x5e0 [ 1110.384054] should_failslab+0x5/0x20 [ 1110.384521] kmem_cache_alloc+0x5b/0x310 [ 1110.385038] prepare_creds+0x25/0x5e0 [ 1110.385510] selinux_setprocattr+0x354/0xa20 [ 1110.386051] ? selinux_shm_shmctl+0x180/0x180 [ 1110.386609] security_setprocattr+0xb7/0x120 [ 1110.387160] proc_pid_attr_write+0x340/0x7d0 [ 1110.387706] ? rw_verify_area+0x11d/0x350 [ 1110.388214] do_iter_write+0x4f0/0x700 [ 1110.388706] vfs_writev+0x1ae/0x620 [ 1110.389153] ? vfs_iter_write+0xa0/0xa0 [ 1110.389644] ? __fdget_pos+0xf1/0x190 [ 1110.390111] ? lock_downgrade+0x6d0/0x6d0 [ 1110.390621] ? ksys_write+0x12d/0x260 [ 1110.391101] ? __fget_files+0x2f8/0x520 [ 1110.391596] do_writev+0x139/0x300 [ 1110.392031] ? vfs_writev+0x620/0x620 [ 1110.392498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1110.393137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1110.393766] do_syscall_64+0x33/0x40 [ 1110.394220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1110.394847] RIP: 0033:0x7f7b39e69b19 [ 1110.395311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.397551] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1110.398485] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1110.399364] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1110.400232] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.401099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1110.401969] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:15:30 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000041) 09:15:43 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 64) 09:15:43 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000000e) 09:15:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530002c87af821976945ffe872c042e6395824e3ee4907d440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) close(r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8800000000000000000000ce4190da000000010000000000000000e000000100000000000000000000000000000000000000000000000000000000fc00"/108, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7ba67cb7d38793daf5bb8e"], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file2', [], 0xa, "223abaa5ac8d216824d4d19dd38ab20e3f0df7e9fc6e8b38115c9593898615aa362a9f779e75e4982d737caa6841eb1a2fb9ae4f13a1ece25ba8647f01843dfd52e4669763b3ed20875e636ab877cc0d1f5cce01a84423c1e9aaf2edff23fc6afde68872b640a0d23ee19eb6c9083be8c2f28a62a2a0"}, 0x81) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fbdbdf257600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580016000000000000000c00580025000000000000000c00580028000000000000000c0058087000000000000000000000000c0058005c000000000000000c0058007a000000000000009bcdbdc896e8467075e5b2f72e6620455fdb4bdcfb9e89b038eefdae750c9228e5de09d2e6b546df12c55a3a01ecff9d5c3f9112cefc"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40000) lseek(r1, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0) 09:15:43 executing program 2: prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000000)={0x62f, 0x5}, &(0x7f0000000040)) 09:15:43 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$BLKTRACESETUP(r0, 0x40081271, 0x0) 09:15:43 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000042) 09:15:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:15:43 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000055) [ 1123.959769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:15:43 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="2e2f66696c6510c9f99aa9ba487f0270a5e3b6003953df0f3b12c431acea00"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffff9}}, './file0\x00'}) ftruncate(r0, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x48400, 0x86) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) [ 1123.972405] FAULT_INJECTION: forcing a failure. [ 1123.972405] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.975073] CPU: 1 PID: 10475 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1123.976545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.978296] Call Trace: [ 1123.978862] dump_stack+0x107/0x167 [ 1123.979654] should_fail.cold+0x5/0xa [ 1123.980467] ? create_object.isra.0+0x3a/0xa20 [ 1123.981439] should_failslab+0x5/0x20 [ 1123.982246] kmem_cache_alloc+0x5b/0x310 [ 1123.983122] create_object.isra.0+0x3a/0xa20 [ 1123.984052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1123.985132] kmem_cache_alloc+0x159/0x310 [ 1123.986020] prepare_creds+0x25/0x5e0 [ 1123.986832] selinux_setprocattr+0x354/0xa20 [ 1123.987777] ? selinux_shm_shmctl+0x180/0x180 [ 1123.988742] security_setprocattr+0xb7/0x120 [ 1123.989682] proc_pid_attr_write+0x340/0x7d0 [ 1123.990640] do_iter_write+0x4f0/0x700 [ 1123.991498] vfs_writev+0x1ae/0x620 [ 1123.992273] ? vfs_iter_write+0xa0/0xa0 [ 1123.993115] ? __fdget_pos+0xf1/0x190 [ 1123.993925] ? lock_downgrade+0x6d0/0x6d0 [ 1123.994813] ? ksys_write+0x12d/0x260 [ 1123.995639] ? __fget_files+0x2f8/0x520 [ 1123.996504] do_writev+0x139/0x300 [ 1123.997259] ? vfs_writev+0x620/0x620 [ 1123.998072] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1123.999199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1124.000301] do_syscall_64+0x33/0x40 [ 1124.001089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1124.002172] RIP: 0033:0x7f7b39e69b19 [ 1124.002958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.006864] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1124.008479] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1124.009989] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1124.011534] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.013040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1124.014551] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:15:43 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000043) [ 1124.029211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:15:43 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000056) 09:15:44 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000000f) 09:15:44 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x800, 0x100, 0xb91}) syz_io_uring_setup(0x745b, &(0x7f0000000180)={0x0, 0x52e4, 0x2, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0xc4c03d09, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000006c0)={{r3}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = syz_io_uring_setup(0x236c, &(0x7f0000000540)={0x0, 0x590d, 0x20, 0x1, 0x3ab}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000680)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000640)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@generic={0x1e, "669fa65bd23475476489086fa576f84f0bf482a8d1a40a8dc5650331abb0452aa886c9c3cc97a089b7e5a82a1bf398f11e40fa0a39a52a9579ff42b2aceb90fdc9018e7f006e84f29a642caf82f19fa53590c1f618c586f99f4ee46a74c15242b64dbfff92afa01dc8fe7afd85f87a543266ba7081948066ee4996f0c8b0"}, 0x0, 0x0, 0x1}, 0x1f) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x8, 0x0, 0xfffffffb}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000740)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0xc50) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 09:15:44 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6d7cf708bc06516e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x2, 0x3, 0x5, 0x5, 0x0, 0x9, 0xc003, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f00000004c0), 0x9}, 0x8000, 0x0, 0x6, 0x8, 0x2, 0x83a, 0x9, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x865}, 0x28) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}}}, &(0x7f0000000140)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@updsa={0xf0, 0x1a, 0x400, 0x70bd2b, 0x25dfdbfc, {{@in6=@empty, @in6=@empty, 0x4e23, 0x101, 0x4e20, 0x1000, 0xa, 0x80, 0x80, 0x0, 0x0, r4}, {@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d5}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xfffffffffffffffa, 0x0, 0x4, 0xd7, 0x7, 0xfff, 0x5}, {0xdc, 0x7ff, 0x3, 0x100000000}, {0x0, 0x4, 0x5}, 0x70bd2a, 0x34ff, 0x2, 0x0, 0x5, 0x54}}, 0xf0}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) r5 = dup(r1) io_uring_enter(r5, 0x7efa, 0x4f38, 0x1, &(0x7f0000000180)={[0x1]}, 0x8) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000000)) 09:15:44 executing program 4: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf5b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) unshare(0x48020200) unshare(0x200) 09:15:44 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000010) 09:15:44 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 65) 09:15:44 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000044) 09:15:44 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000011) 09:15:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:15:44 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000057) [ 1124.465773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.485928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.526103] FAULT_INJECTION: forcing a failure. [ 1124.526103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.528901] CPU: 1 PID: 10529 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1124.530373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.532127] Call Trace: [ 1124.532693] dump_stack+0x107/0x167 [ 1124.533466] should_fail.cold+0x5/0xa [ 1124.534282] _copy_from_user+0x2e/0x1b0 [ 1124.535138] memdup_user+0x65/0xd0 [ 1124.535892] proc_pid_attr_write+0x247/0x7d0 [ 1124.536818] ? rw_verify_area+0x11d/0x350 [ 1124.537698] do_iter_write+0x4f0/0x700 [ 1124.538538] vfs_writev+0x1ae/0x620 [ 1124.539316] ? vfs_iter_write+0xa0/0xa0 [ 1124.540156] ? __fdget_pos+0xf1/0x190 [ 1124.540960] ? lock_downgrade+0x6d0/0x6d0 [ 1124.541842] ? ksys_write+0x12d/0x260 [ 1124.542654] ? __fget_files+0x2f8/0x520 [ 1124.543525] do_writev+0x139/0x300 [ 1124.544278] ? vfs_writev+0x620/0x620 [ 1124.545087] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1124.546192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1124.547293] do_syscall_64+0x33/0x40 [ 1124.548079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1124.549159] RIP: 0033:0x7f7b39e69b19 [ 1124.549940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.553838] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1124.555454] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1124.556955] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1124.558454] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.559968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1124.561468] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:15:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:15:57 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 66) 09:15:57 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000012) 09:15:57 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="8a0000"], 0x8) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000300)=@v2, 0x14, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x90, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000047c0)={'sit0\x00', &(0x7f0000004740)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x9, 0x6, 0x2, @remote, @loopback, 0x1, 0x7, 0x0, 0xffff8001}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000004880)={'syztnl0\x00', &(0x7f0000004800)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x4, 0x0, 0x0, @empty, @mcast1, 0x1, 0x0, 0xfffffffa, 0x7}}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc4}}) r1 = open$dir(&(0x7f0000000180)='./file1\x00', 0x0, 0x1b0) symlinkat(&(0x7f0000000140)='./file1\x00', r1, &(0x7f00000002c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r2, 0x3a40000000000000}, 0x53f) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 09:15:57 executing program 2: r0 = open(&(0x7f00000004c0)='./file0\x00', 0x50000, 0x112) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6ed6, 0x20000000200}, 0xa032}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x3, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}, 0xc3a}, 0x1c) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) fallocate(r1, 0x3, 0x52, 0x6) fstat(0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400032}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x950) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000300)=ANY=[@ANYRESHEX=r4]) syz_open_dev$vcsa(&(0x7f0000000840), 0x0, 0x28180) creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) 09:15:57 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000058) 09:15:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f00005de000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_FSYNC, 0x9) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xb4b, &(0x7f0000000340)={0x0, 0x52f0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa84f8c8595e20d8c}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') getxattr(&(0x7f0000000280)='mnt/encrypted_dir\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f0a322e64665005582d64"], &(0x7f0000000300)=""/117, 0x75) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 09:15:57 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000045) [ 1137.596302] FAULT_INJECTION: forcing a failure. [ 1137.596302] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.598814] CPU: 1 PID: 10541 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1137.600293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1137.602067] Call Trace: [ 1137.602631] dump_stack+0x107/0x167 [ 1137.603421] should_fail.cold+0x5/0xa [ 1137.604234] ? create_object.isra.0+0x3a/0xa20 [ 1137.605210] should_failslab+0x5/0x20 [ 1137.606019] kmem_cache_alloc+0x5b/0x310 [ 1137.606891] create_object.isra.0+0x3a/0xa20 [ 1137.607837] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1137.608920] __kmalloc+0x16e/0x390 [ 1137.609690] security_prepare_creds+0x112/0x190 [ 1137.610696] prepare_creds+0x452/0x5e0 [ 1137.611539] selinux_setprocattr+0x354/0xa20 [ 1137.612482] ? selinux_shm_shmctl+0x180/0x180 [ 1137.613457] security_setprocattr+0xb7/0x120 [ 1137.614405] proc_pid_attr_write+0x340/0x7d0 [ 1137.615354] ? rw_verify_area+0x11d/0x350 [ 1137.616244] do_iter_write+0x4f0/0x700 [ 1137.617093] vfs_writev+0x1ae/0x620 [ 1137.617877] ? vfs_iter_write+0xa0/0xa0 [ 1137.618725] ? __fdget_pos+0xf1/0x190 [ 1137.619550] ? lock_downgrade+0x6d0/0x6d0 [ 1137.620441] ? ksys_write+0x12d/0x260 [ 1137.621258] ? __fget_files+0x2f8/0x520 [ 1137.622113] do_writev+0x139/0x300 [ 1137.622878] ? vfs_writev+0x620/0x620 [ 1137.623703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1137.624818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1137.625924] do_syscall_64+0x33/0x40 [ 1137.626718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1137.627820] RIP: 0033:0x7f7b39e69b19 [ 1137.628619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1137.632549] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1137.634169] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1137.635701] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1137.637221] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1137.638739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1137.640265] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1137.658066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:15:57 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000059) [ 1137.691072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:15:57 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) creat(0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0xc040) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = creat(0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="fe", 0x1, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) timerfd_create(0xb, 0x1000) fadvise64(r2, 0x0, 0x0, 0x0) [ 1137.747854] loop6: detected capacity change from 0 to 41948160 09:16:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:16:10 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000046) 09:16:10 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 67) 09:16:10 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005a) 09:16:10 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000013) 09:16:10 executing program 2: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000012) [ 1150.910820] FAULT_INJECTION: forcing a failure. [ 1150.910820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.912401] CPU: 1 PID: 10581 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1150.913334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1150.914437] Call Trace: [ 1150.914783] dump_stack+0x107/0x167 [ 1150.915260] should_fail.cold+0x5/0xa [ 1150.915817] _copy_from_user+0x2e/0x1b0 [ 1150.916494] memdup_user+0x65/0xd0 09:16:10 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000100)) pipe(0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000005b40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe0, 0x3, 0x1, 0x81, 0x0, 0xda48, 0x800, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x13}, 0x80, 0x100000001, 0x1, 0x5, 0x10001, 0x7ff, 0x9, 0x0, 0x1000, 0x0, 0x8}, 0x0, 0x7, r0, 0x2) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x9, 0xc000) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x0, 0x11, 0xbd, 0x0, 0x5, 0x20a0, 0xed678976068115d4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1b3, 0x4, @perf_config_ext={0x9, 0x7fffffff}, 0x1200, 0x4, 0x4, 0x3, 0x1, 0x2, 0x3, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x1) unshare(0x48020200) 09:16:10 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7002) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000004c0)={{}, "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"}) r1 = socket$inet(0x2, 0x2, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x20040, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @private=0xa010100}, {0x1}, 0xac1414fb, {0x2, 0x0, @broadcast}}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x2) socket$netlink(0x10, 0x3, 0x4) lseek(0xffffffffffffffff, 0x7, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000180)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) [ 1150.917106] proc_pid_attr_write+0x247/0x7d0 [ 1150.917781] ? rw_verify_area+0x11d/0x350 [ 1150.918308] do_iter_write+0x4f0/0x700 [ 1150.918813] vfs_writev+0x1ae/0x620 [ 1150.919274] ? vfs_iter_write+0xa0/0xa0 [ 1150.919783] ? __fdget_pos+0xf1/0x190 [ 1150.920262] ? lock_downgrade+0x6d0/0x6d0 [ 1150.920788] ? ksys_write+0x12d/0x260 [ 1150.921275] ? __fget_files+0x2f8/0x520 [ 1150.921792] do_writev+0x139/0x300 [ 1150.922240] ? vfs_writev+0x620/0x620 [ 1150.922724] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1150.923384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1150.924081] do_syscall_64+0x33/0x40 [ 1150.924553] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1150.925189] RIP: 0033:0x7f7b39e69b19 [ 1150.925660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1150.927957] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1150.928903] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1150.929801] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1150.930705] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.931623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.932522] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1150.958516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1150.965186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:16:10 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000014) [ 1150.982383] loop6: detected capacity change from 0 to 16776704 09:16:10 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 68) 09:16:10 executing program 2: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000012) 09:16:10 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005b) [ 1151.047088] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 1151.047088] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1151.047088] [ 1151.069667] FAULT_INJECTION: forcing a failure. [ 1151.069667] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.071275] CPU: 1 PID: 10602 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1151.072112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1151.073119] Call Trace: [ 1151.073447] dump_stack+0x107/0x167 [ 1151.073895] should_fail.cold+0x5/0xa [ 1151.074358] ? prepare_creds+0x25/0x5e0 [ 1151.074843] should_failslab+0x5/0x20 [ 1151.075320] kmem_cache_alloc+0x5b/0x310 [ 1151.075818] prepare_creds+0x25/0x5e0 [ 1151.076287] selinux_setprocattr+0x354/0xa20 [ 1151.076822] ? selinux_shm_shmctl+0x180/0x180 [ 1151.077368] ? _copy_from_user+0x165/0x1b0 [ 1151.077885] ? copy_user_generic_string+0x3/0x40 [ 1151.078456] security_setprocattr+0xb7/0x120 [ 1151.078984] proc_pid_attr_write+0x340/0x7d0 [ 1151.079518] ? rw_verify_area+0x11d/0x350 [ 1151.080034] do_iter_write+0x4f0/0x700 [ 1151.080511] vfs_writev+0x1ae/0x620 [ 1151.080954] ? vfs_iter_write+0xa0/0xa0 [ 1151.081437] ? __fdget_pos+0xf1/0x190 [ 1151.081902] ? lock_downgrade+0x6d0/0x6d0 [ 1151.082405] ? ksys_write+0x12d/0x260 [ 1151.082869] ? __fget_files+0x2f8/0x520 [ 1151.083368] do_writev+0x139/0x300 [ 1151.083800] ? vfs_writev+0x620/0x620 [ 1151.084259] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1151.084886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1151.085511] do_syscall_64+0x33/0x40 [ 1151.085961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1151.086574] RIP: 0033:0x7f7b39e69b19 [ 1151.087020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1151.089250] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1151.090162] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1151.091027] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1151.091904] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1151.092758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1151.093608] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:16:11 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000047) 09:16:11 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 69) [ 1151.139737] EXT4-fs (loop6): mounted filesystem without journal. Opts: noacl,,errors=continue 09:16:11 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005c) 09:16:11 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000015) [ 1151.252035] FAULT_INJECTION: forcing a failure. [ 1151.252035] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.254760] CPU: 0 PID: 10618 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1151.256318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1151.258183] Call Trace: [ 1151.258781] dump_stack+0x107/0x167 [ 1151.259621] should_fail.cold+0x5/0xa [ 1151.260486] ? create_object.isra.0+0x3a/0xa20 [ 1151.261518] should_failslab+0x5/0x20 [ 1151.262373] kmem_cache_alloc+0x5b/0x310 [ 1151.263305] create_object.isra.0+0x3a/0xa20 [ 1151.264291] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1151.265434] kmem_cache_alloc+0x159/0x310 [ 1151.266377] prepare_creds+0x25/0x5e0 [ 1151.267238] selinux_setprocattr+0x354/0xa20 [ 1151.268247] ? selinux_shm_shmctl+0x180/0x180 [ 1151.269269] security_setprocattr+0xb7/0x120 [ 1151.270277] proc_pid_attr_write+0x340/0x7d0 [ 1151.271269] ? rw_verify_area+0x11d/0x350 [ 1151.272228] do_iter_write+0x4f0/0x700 [ 1151.273125] vfs_writev+0x1ae/0x620 [ 1151.273959] ? vfs_iter_write+0xa0/0xa0 [ 1151.274867] ? __fdget_pos+0xf1/0x190 [ 1151.275741] ? lock_downgrade+0x6d0/0x6d0 [ 1151.276686] ? ksys_write+0x12d/0x260 [ 1151.277554] ? __fget_files+0x2f8/0x520 [ 1151.278474] do_writev+0x139/0x300 [ 1151.279284] ? vfs_writev+0x620/0x620 [ 1151.280163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1151.281357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1151.282532] do_syscall_64+0x33/0x40 [ 1151.283382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1151.284537] RIP: 0033:0x7f7b39e69b19 [ 1151.285384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1151.289543] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1151.291262] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1151.292883] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1151.294493] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1151.296111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1151.297721] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:16:11 executing program 2: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000012) [ 1151.338889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:16:11 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x4000000, 0x0, 0x6, 0x0, 0xfffffffd, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRES32]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x120466, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000840)=""/227, 0xe3}], 0x1) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000440)=0xc) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0x7fffffff, 0x3f, 0x6, 0x1, 0x1}) ftruncate(0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000bc0)={0x53, 0xfffffffffffffffb, 0x7e, 0x1, @scatter={0x3, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)=""/32, 0x20}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)=""/113, 0x71}]}, &(0x7f0000000a80)="7870fb6876c2d27122855c6a37a85e2493c5de687f733d8d69586ad3d63dd8b837d7d45bfd8637bf6da1492f5b28501783025fcdc48d2e7394b032ec9252ac7a5d996433bf1b86facb11f54d71f3c377cee662734c0202638077af8b8e0280f83ba0623c441e1c517948ec4909390548a999d7d261e5a80541259f798e37", &(0x7f0000000b00)=""/154, 0x6, 0x10002, 0x2, &(0x7f00000006c0)}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) accept$unix(r0, &(0x7f0000000640)=@abs, 0x0) openat(r4, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)) 09:16:11 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000048) 09:16:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:16:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000140)="200000008000000006000008000000000f000000000000000100000001000000014000000040000020000000e0f4655fe0f4655f0100ffff53efec6a60c17782d6a61bfdc5914519da00b1ad1f897e3cd25e6e979a7c632c1d777a690575e781109cb93df73c", 0x66, 0x400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07e49e5687d0844e244d55c64a62c5fd3480e0f2fa814cafa330227985731895853a33af6003abca8b8b65e2cf"]) 09:16:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xca}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) r3 = signalfd(r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="01dabef05775006300001420caa000ff58b39094be0d618ba53e6294c3be46ef1164eca7e5d3d19463c1da1def4f2b1321736737fa0cf1c168a29d4e212d790ef58b4d4a319c6287f108f839349eb7a2439f2125577bc497772b9190a9ff2296a8700b766876c2614a54b89b891c996c68269a2253e081e589abf18361dd2d681d1241ceacf3357d418963049ebd1b74d7cb9740783300ec36247bd0c8", @ANYBLOB="049d23b494c987bad0d54af85600000000"]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000004cc80)={{0x0, 0x2, 0xfffffffffffffff9, 0x6d, 0xa6, 0x0, 0x4e4, 0xe49f, 0x4, 0x7fffffff, 0x5, 0x2, 0xe6b, 0x0, 0x20}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004dc80)) lseek(r0, 0x9, 0x3) lseek(r1, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r7, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 1151.384982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:16:11 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000049) [ 1151.391484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.393101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.394838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:16:11 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000016) [ 1151.420963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:16:11 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005d) [ 1151.433217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:16:11 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@expire={0x1dc, 0x18, 0x20, 0x70bd27, 0x25dfdbfe, {{{@in=@multicast2, @in6=@loopback, 0x4e23, 0x4, 0x4e24, 0xfffc, 0x8, 0xa0, 0x80, 0x89, 0x0, 0xee01}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x3c}, @in6=@private2, {0xa, 0x10000, 0x101, 0x2, 0x3ff, 0x20, 0x6, 0x9}, {0xce, 0x400, 0x1000, 0x3}, {0x5, 0x2, 0xbe}, 0x70bd2c, 0x34ff, 0xa, 0x4, 0x7, 0x10}, 0x7}, [@algo_comp={0xbf, 0x3, {{'deflate\x00'}, 0x3b8, "b76b6c00619c8467d092f7a91f0b36bdd10c10a52a74fdd39b54aa0057d2550c3f5f891d5d3814e21ec4113f5572dcf657c57a821de048030ee27f2f6764f017ec382522b9c46fc0ecb6576695b734c5b7442ddc1bde9dcf990bfa02f737ad209f9e1538438e5e7c065d1a6229066970278006c6a56155"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@private0}}, @proto={0x5, 0x19, 0x2b}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8840}, 0x90) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000480)) pwrite64(r0, &(0x7f00000000c0)="fe", 0x1, 0x0) r2 = syz_mount_image$nfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0xb5, 0x1, &(0x7f0000000400)=[{&(0x7f00000003c0)="6223ee6ae59566586c280213ca9f233ed0fb4dfb00012fae2d1979a3f37422182c00a9f30a08cc7db6cec65fd10448c28d79f5ceaf66df4a", 0x38, 0x9}], 0x1006d, &(0x7f0000000440)={[{'\x00'}, {'.!{@('}], [{@hash}, {@measure}, {@fsname={'fsname', 0x3d, '\x00'}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random]}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006d00000008000300", @ANYRES32=r8], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x120, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4a1b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2a, 0xbe, "6aeb9d1e100f77701c3dfbadff38b8b893fcd3dd029e3bcaebd6706b54c64abbada1fba99f98"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xcb7, 0x401]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x81, 0xbe, "84ed08c5cd3a3c52db1084860a33067a591fb67ac005d8ab28ef4fefa7c3c8add90920cba84de9afdb74eefe7dcfa8fcdc92910fb7a00629b31cf747a165c1b97d1c3a80e042f0a22e39d82baa9863c39839d5338a5e5ded74fe4126af2d42f248d75be78169bb23e5edd38a51ac8da08af9759d76a38926429a0c4a50"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, [{0x9}, {0x12}, {0x3, 0x1}, {0x48}, {0x9, 0x1}, {0x36, 0x1}, {0x6, 0x1}, {0x24}, {0xc}, {0x18}, {0x30, 0x1}, {0x60, 0x1}, {0x24, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x24}, {0x16}, {0x48, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x1, 0x1}, {0x0, 0x1}, {0xc, 0x1}, {0x48}, {0x24414d6fd2fef41a}, {0x1a}, {0xb, 0x1}, {0x16, 0x1}, {0x12, 0x1}, {0x3}, {0x18}, {0x3, 0x1}, {0x1, 0x1}, {0x24}]}]}, 0x120}}, 0x20004880) fcntl$dupfd(r2, 0x406, r3) fadvise64(r0, 0x0, 0x1, 0x4) ioctl$CDROMRESUME(r0, 0x5302) [ 1151.482347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.483206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.484177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1151.496313] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1151.510963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:16:11 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004a) 09:16:11 executing program 4: r0 = open_tree(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x200, 0x0, 0x0, 0x1, 0x17, "77004a6efdff00", 0x0, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000700)={0x0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff]}, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000480)={0x2, {0x2, 0xfffc, 0x0, 0xff7f, 0xaeb, 0x1}}) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x100000, 0x4642) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) creat(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./file0\x00') syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x400) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='gid_map\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd4, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a8a62a4affc63cfc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f91efdcc365cdf00b6f6d44d78983832d39014f1102268b2fbc794473a8add57"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="78410c49c33837e49020268ee5b5b156de9d3ba2930a0570389c583a147d0423"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="863ec8ce5daf8103c0306db0499d72ccc3d22d5883d4a1a9"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c3f6af6ecfb1f642"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d38f5b03d0fdb3efa363299a7ba79b9f219889fbf495ec6e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1242822f60ca67d2"}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x4804) 09:16:11 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x61b8, 0x0, 0x3, 0x0, 0x13, 0xfffffffd, 0xb419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x5) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="29b4ed76e6dc6e4bdf201dd1fae94cb7c7942adb1f265d7f62552a18075cbfbc739f1feceda2df588303b21413bc715b36443dacece568c0b2153aafdbe88fa84cdccfd0d78793f23fff247f0a2ce6d95e884391091ee038ab2eecc6d8a22a5d33fa0b5b443b76831364ec9c0286580f83823c76ef82f8afdc635db9fb0fb3e497613b5b01c76d17ccb0a122a6551c9a506337061086e4848ad335"], 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x20000854) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000180)=""/43, 0x2b}], 0x1) [ 1151.623140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1151.667112] audit: type=1326 audit(1747214171.602:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10662 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f8af6b19 code=0x7ffc0000 [ 1151.669931] audit: type=1326 audit(1747214171.606:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10662 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f57f8af6b19 code=0x7ffc0000 [ 1151.672512] audit: type=1326 audit(1747214171.606:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10662 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f8af6b19 code=0x7ffc0000 [ 1151.681571] audit: type=1326 audit(1747214171.606:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10662 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f57f8af6b19 code=0x7ffc0000 [ 1151.686559] audit: type=1326 audit(1747214171.608:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10662 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f8af6b19 code=0x7ffc0000 [ 1151.706151] audit: type=1326 audit(1747214171.608:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10662 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57f8aa9a04 code=0x7ffc0000 [ 1151.711114] audit: type=1326 audit(1747214171.608:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10662 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f8af6b19 code=0x7ffc0000 [ 1151.719328] audit: type=1326 audit(1747214171.608:31): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10662 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57f8af6b19 code=0x7ffc0000 [ 1151.724648] audit: type=1326 audit(1747214171.608:32): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10662 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f8af6b19 code=0x7ffc0000 [ 1151.739536] audit: type=1326 audit(1747214171.608:33): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10662 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57f8aa9a04 code=0x7ffc0000 09:16:24 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 70) 09:16:24 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:16:24 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc0100001a0001000000000000000000e0000002000000000000000000000000000000000000eefcf996fd1f01a189c9ab0000000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x1bc}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffc60) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000300)=0xfffffffe, 0x4) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0)) io_setup(0x5, &(0x7f0000000700)=0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x40) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r4, &(0x7f0000000340)="973718d000416d0e113ace690a98f1619484e4960056aa777fed63e5d28907e5dc658359736aa2b3be6a054ff61d0d0a1704feb3dcb95ee5a9cff583a4c2fe2b47dfbb4b82095e76228691e017e710f5527b9185295cf3d3a3e16d4d705f339c596fb9ddcd0bbc9eb440a4102813cb2df3f63c3d37f8ed50d3a4270ad215d9176a280cd1e1d5", 0x86, 0x7, 0x0, 0x3, r5}, &(0x7f0000000280)) setpriority(0x0, 0x0, 0x800000000081) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000400)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) fchmod(r0, 0x6) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487fec864b245e0fd9000000f8000000"], 0x30}}, 0x0) 09:16:24 executing program 2: fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.incfs.id\x00', &(0x7f0000000040)=""/172, 0xac) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7e}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000140)={'batadv_slave_0\x00', {0x2, 0x0, @multicast1}}) 09:16:24 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005e) [ 1165.018411] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1165.043407] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 09:16:24 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000017) 09:16:24 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004b) 09:16:24 executing program 6: mknod$loop(&(0x7f0000000340)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1c1) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x127b, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "d7204d67c8234fbccefca9f39aedf28a2f35bdbe64d8275ba55a6508ff259666fb8debe3360ec479c77d2d85cb0cf0ba58787eca3e2ffa2b1f39a4f9c215e195", "4e932aaa94d3d5ab6dbfaae0d4163fc6c27c7dc8fc62381b3a4f4a65339780a7"}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x7fffffff, 0x6, 0x18, 0x4, "6d2d765b1c9ba5cfe3d84a8799fe9c6265d642420d733a74cf17801cabcb5db7547bbf439916d2aa72c5eae9f92823898e4a9787c71f9d5f0957750f1c765642", "dd34f32437d855c685e131d2d012bdcd6fb88dc859aca565f332c82d8d863d37", [0x3, 0x2dc]}) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x300a0, 0x0) [ 1165.053129] FAULT_INJECTION: forcing a failure. [ 1165.053129] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.053186] EXT4-fs (sda): re-mounted. Opts: (null) [ 1165.054806] CPU: 1 PID: 10685 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1165.056914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1165.057969] Call Trace: [ 1165.058310] dump_stack+0x107/0x167 [ 1165.058778] should_fail.cold+0x5/0xa [ 1165.059268] ? security_prepare_creds+0x112/0x190 [ 1165.059895] should_failslab+0x5/0x20 [ 1165.060386] __kmalloc+0x72/0x390 [ 1165.060837] security_prepare_creds+0x112/0x190 [ 1165.061438] prepare_creds+0x452/0x5e0 [ 1165.061932] selinux_setprocattr+0x354/0xa20 [ 1165.062487] ? selinux_shm_shmctl+0x180/0x180 [ 1165.063079] security_setprocattr+0xb7/0x120 [ 1165.063645] proc_pid_attr_write+0x340/0x7d0 [ 1165.064207] ? rw_verify_area+0x11d/0x350 [ 1165.064739] do_iter_write+0x4f0/0x700 [ 1165.065250] vfs_writev+0x1ae/0x620 [ 1165.065711] ? vfs_iter_write+0xa0/0xa0 [ 1165.066210] ? __fdget_pos+0xf1/0x190 [ 1165.066692] ? lock_downgrade+0x6d0/0x6d0 [ 1165.067216] ? ksys_write+0x12d/0x260 [ 1165.067703] ? __fget_files+0x2f8/0x520 [ 1165.068217] do_writev+0x139/0x300 [ 1165.068677] ? vfs_writev+0x620/0x620 [ 1165.069168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1165.069823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1165.070469] do_syscall_64+0x33/0x40 [ 1165.070937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1165.071575] RIP: 0033:0x7f7b39e69b19 [ 1165.072052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1165.074334] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1165.075272] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1165.076187] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1165.077075] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.077962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1165.078845] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1165.094640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.101385] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1165.103961] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 09:16:25 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000018) 09:16:25 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005f) 09:16:25 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004c) 09:16:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x4, 0x3, &(0x7f0000000300)=[{0x0, 0x0, 0x7fff}, {&(0x7f00000000c0)="c38cf7bc4643814e0c3c102f3b75e3c485e1953666867ff0b760954b5332fb483e5202228f1d3639fb7e217fc1641ed544264d6d64acb87d45fd283a67394a4e2e2701aa50bb03876578363361aeef9122b3f11fc180a7a88078783617379e9d50a70aaa5a7cb9416764cc79f78aaa19e3233560c4a9b6170a115d98d65791cb814e7913658915c75934144bdfad8f323895925d58061f0cfee517911f", 0x9d, 0xf4b2}, {&(0x7f0000000180)="5bffa097ec44ff12ea1e69793d84533c7cb8a98876a1d69640b9350e43bd6dbde6d292e3ec889a2f997ed8ca47e1ce40613b86425c9456f874799fb3e850dbcfeb73af445005e7561b8047b6d9437d7a6c73b62e7124fb2699949fe472ecbf145e1c365cd2287639641d1a0c04144114d1bc776d64b3bf20c3e73b4249f23d53201bfb8491e7b24e3c110cf6fa7d1d67d5ee06beeb1646190fdbb6bc2b1b44a917d0612a21f3a5a8a4911756e842a9b14ac53892cdeca6ea25b9228b5bc75aed64cee705e38f18640770a2a4d5d901853a031c6cc4cddff8c22897481b3c52649adbfe44f9e62e445b1bbfc9af83", 0xee, 0x7}]) syz_mount_image$nfs(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x3, 0x2, &(0x7f0000000600)=[{&(0x7f0000000540)="c4af3e5a97d2b4e302fa10efa115489f669f6454869dd9f50205", 0x1a}, {&(0x7f0000000580)="ffb87117b3ae9f03207387b5967cb53381e571a5fa1c7b72502bcc191997a8b8ad2d15f0bb3475a37f877db9f2de2ad215c04994dd6f2f8071823f837d4bdcb5e9ad81244d72b0ca6cd966118193b991765de673b74172be484869031ea3d22b3d8df9c7277afcaed26cd6595163c67ee4d6a9", 0x73, 0xb562}], 0x14, &(0x7f0000000640)={[{'}!!*g['}, {'./cgroup/syz1\x00'}, {}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x80, 0x1, 0x3f, 0x9, 0x0, 0x4, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x4}, 0x800, 0x922, 0x2, 0x5, 0xe9, 0x6, 0x20, 0x0, 0x8, 0x0, 0x10000}, 0xffffffffffffffff, 0xf, r1, 0x8) fallocate(r0, 0x0, 0x0, 0x8000) openat(r1, &(0x7f0000000680)='./file1\x00', 0x0, 0x80) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)) r2 = syz_open_dev$hiddev(&(0x7f0000000440), 0x20, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = timerfd_create(0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b36, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000002c0)={0x0, 0xa9d, 0x2}) 09:16:25 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 71) 09:16:25 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="2400111f"], 0x20}}, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, r4, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0) unshare(0x48020200) [ 1165.275286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1165.278285] FAULT_INJECTION: forcing a failure. [ 1165.278285] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.281305] CPU: 0 PID: 10711 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1165.282867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1165.284744] Call Trace: [ 1165.285340] dump_stack+0x107/0x167 [ 1165.286163] should_fail.cold+0x5/0xa [ 1165.287026] ? create_object.isra.0+0x3a/0xa20 [ 1165.288074] should_failslab+0x5/0x20 [ 1165.288937] kmem_cache_alloc+0x5b/0x310 [ 1165.289860] create_object.isra.0+0x3a/0xa20 [ 1165.290845] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1165.292010] __kmalloc+0x16e/0x390 [ 1165.292819] security_prepare_creds+0x112/0x190 [ 1165.293884] prepare_creds+0x452/0x5e0 [ 1165.294769] selinux_setprocattr+0x354/0xa20 [ 1165.295772] ? selinux_shm_shmctl+0x180/0x180 [ 1165.296803] security_setprocattr+0xb7/0x120 [ 1165.297811] proc_pid_attr_write+0x340/0x7d0 [ 1165.298804] ? rw_verify_area+0x11d/0x350 [ 1165.299762] do_iter_write+0x4f0/0x700 [ 1165.300661] vfs_writev+0x1ae/0x620 [ 1165.301488] ? vfs_iter_write+0xa0/0xa0 [ 1165.302386] ? __fdget_pos+0xf1/0x190 [ 1165.303254] ? lock_downgrade+0x6d0/0x6d0 [ 1165.304211] ? ksys_write+0x12d/0x260 [ 1165.305082] ? __fget_files+0x2f8/0x520 [ 1165.306007] do_writev+0x139/0x300 [ 1165.306827] ? vfs_writev+0x620/0x620 [ 1165.307702] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1165.308886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1165.310057] do_syscall_64+0x33/0x40 [ 1165.310902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1165.312079] RIP: 0033:0x7f7b39e69b19 [ 1165.312924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1165.317093] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1165.318821] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1165.320443] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1165.322061] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.323676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1165.325290] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:16:25 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004d) 09:16:25 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000060) [ 1165.448422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1170.031515] Bluetooth: hci7: command 0x0409 tx timeout [ 1172.079495] Bluetooth: hci7: command 0x041b tx timeout [ 1174.127598] Bluetooth: hci7: command 0x040f tx timeout [ 1174.984258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.986439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.995444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1175.028331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.030532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.033601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1175.191201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1175.201861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1176.176349] Bluetooth: hci7: command 0x0419 tx timeout 09:16:48 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004e) 09:16:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:16:48 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000061) 09:16:48 executing program 2: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005f) 09:16:48 executing program 6: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000060) 09:16:48 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 72) 09:16:48 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000019) 09:16:48 executing program 4: clone3(&(0x7f0000000300)={0x200000200, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180), {0xa}, &(0x7f0000000280), 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) timer_create(0x2, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000001c0)={0x40182500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) timer_settime(r1, 0x0, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000040)) [ 1189.024695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.031407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:16:48 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000001a) 09:16:48 executing program 2: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005f) 09:16:49 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="2dff653000"]) bind$unix(r0, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) syz_io_uring_setup(0x5548, &(0x7f00000002c0), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000240)) ftruncate(r2, 0xc9) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x40448c0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r11, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x4, 0x2000, @fd=r11, 0x4000000000, &(0x7f0000000100)=[{&(0x7f0000000040)="5a2c696f5a5a51a335b7f652e88e5b859df1566eb324ff1efb1636f849cc635772d8a44abb7a7af8b103bc3b4c5b0a535f8bac6fafc6c0e3f2", 0x39}, {&(0x7f00000000c0)="b6a9397692ecf4def397edc7fac85927f36e24371fc387ee8a6be4bb49", 0x1d}], 0x2, 0x4, 0x0, {0x1, r12}}, 0x8) [ 1189.078023] FAULT_INJECTION: forcing a failure. [ 1189.078023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1189.080693] CPU: 1 PID: 11205 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1189.082171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1189.083940] Call Trace: [ 1189.084506] dump_stack+0x107/0x167 [ 1189.085277] should_fail.cold+0x5/0xa [ 1189.086095] _copy_from_user+0x2e/0x1b0 [ 1189.086939] memdup_user+0x65/0xd0 [ 1189.087710] proc_pid_attr_write+0x247/0x7d0 [ 1189.088645] ? rw_verify_area+0x11d/0x350 [ 1189.089529] do_iter_write+0x4f0/0x700 [ 1189.090374] vfs_writev+0x1ae/0x620 [ 1189.091150] ? vfs_iter_write+0xa0/0xa0 [ 1189.091999] ? __fdget_pos+0xf1/0x190 [ 1189.092812] ? lock_downgrade+0x6d0/0x6d0 [ 1189.093715] ? ksys_write+0x12d/0x260 [ 1189.094540] ? __fget_files+0x2f8/0x520 [ 1189.095409] do_writev+0x139/0x300 [ 1189.096170] ? vfs_writev+0x620/0x620 [ 1189.096986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1189.098098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.099198] do_syscall_64+0x33/0x40 [ 1189.100012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.101092] RIP: 0033:0x7f7b39e69b19 [ 1189.101876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.105778] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1189.107393] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1189.108915] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1189.110427] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.111948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1189.113453] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:16:49 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000062) 09:16:49 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000001b) [ 1203.933990] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1203.948917] FAULT_INJECTION: forcing a failure. [ 1203.948917] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.951711] CPU: 0 PID: 11237 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1203.953332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1203.955227] Call Trace: [ 1203.955864] dump_stack+0x107/0x167 [ 1203.956736] should_fail.cold+0x5/0xa [ 1203.957617] ? prepare_creds+0x25/0x5e0 [ 1203.958521] should_failslab+0x5/0x20 [ 1203.959384] kmem_cache_alloc+0x5b/0x310 [ 1203.960331] prepare_creds+0x25/0x5e0 [ 1203.961198] selinux_setprocattr+0x354/0xa20 [ 1203.962203] ? selinux_shm_shmctl+0x180/0x180 [ 1203.963223] security_setprocattr+0xb7/0x120 [ 1203.964250] proc_pid_attr_write+0x340/0x7d0 [ 1203.965253] ? rw_verify_area+0x11d/0x350 [ 1203.966215] do_iter_write+0x4f0/0x700 [ 1203.967110] vfs_writev+0x1ae/0x620 [ 1203.967960] ? vfs_iter_write+0xa0/0xa0 [ 1203.968868] ? __fdget_pos+0xf1/0x190 [ 1203.969735] ? lock_downgrade+0x6d0/0x6d0 [ 1203.970687] ? ksys_write+0x12d/0x260 [ 1203.971568] ? __fget_files+0x2f8/0x520 [ 1203.972507] do_writev+0x139/0x300 [ 1203.973318] ? vfs_writev+0x620/0x620 [ 1203.974189] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1203.975384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1203.976561] do_syscall_64+0x33/0x40 [ 1203.977409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1203.978835] RIP: 0033:0x7f7b39e69b19 [ 1203.979715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1203.983954] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1203.985698] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1203.987328] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1203.988961] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.990584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1203.992223] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:17:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:17:03 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004f) 09:17:03 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 73) 09:17:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="28010000280001000000000000000000000000000000000000000000000000000000000000000000fc010000000000000000000000000000fc020000000000000000000000000000fc0200"/104, @ANYRES32=r0, @ANYRESDEC, @ANYBLOB="ac1e0001000000000000000000000000fc00"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESDEC=r0], 0x128}}, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x8a282, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) syz_io_uring_submit(r2, 0x0, &(0x7f0000001240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x3}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r3, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="49a334af569c3ef9ce1ddafe3df9c2a518f51d9620794ce7ecf7ed34a1c4608def", 0x21}, {0x0}], 0x2, 0x14}, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2}) sendmsg$nl_xfrm(r1, 0x0, 0x24008044) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) chdir(&(0x7f0000000040)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r6, 0x0, 0x100000001) 09:17:03 executing program 2: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005f) 09:17:03 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000063) 09:17:03 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000001c) 09:17:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0xf9, 0x0, 0x1, 0x0, 0xffff, 0x80828, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x40000, 0x0, 0x20, 0x9, 0x9, 0xfffffffa, 0x1, 0x0, 0x80, 0x0, 0x3b0d}, 0x0, 0xd, r1, 0xb) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ef4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x6004, @fd, 0x6, 0x0, 0x0, 0x14, 0x1, {0x3}}, 0x0) io_uring_enter(r3, 0x5c33, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x40448c0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x3b1a, 0x0, 0x3, 0x158}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd_index=0x8, 0x8b90, &(0x7f0000000380)=[{&(0x7f00000002c0)="72f1a04c0856fefc1a00eaa71323947360ebe3402b55bd58b62b6cb7e228e6620e8161013a8f22eef8e87732f6b2836e3b1bda27b22c3644113d2a9acb3de83e7d1231b172075cd9c36e0f294fdfe808887e2b043975a63598c960f33c2aa98b6381e9772ca2a4f58575942d973e7fb6b3868041b0d7ee1aa36419ee9e6136308d3ca0", 0x83}], 0x1, 0x0, 0x1, {0x0, r10}}, 0x400) 09:17:03 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000001d) [ 1204.017743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.031185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:17:03 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000050) 09:17:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0xa0, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1077}]}, 0xa0}, 0x1, 0x0, 0x0, 0x200000a1}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) io_uring_enter(r6, 0x647c, 0xad9f, 0x0, &(0x7f0000000240)={[0x5]}, 0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000080)=0x3ff, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x800, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xffff) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, {0x40}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x3, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000280)="3a8062c8aca251782d6231158b44af923db4ced515d8fe4409c1a81a14636d39e25b89fa55ccd840b5b1715c9ea6c0793ce2412b82f265caa05eab109e84b0b57deea3b8497f93057bc8eb512c5f364de02647d2116eae58838f95171bb402174f9ac23fb4af118ab491c55699e92dcf3d282f9380806c58940e68d3a5de0b0ba2620bdd647a504afb382483d2b9d7a408b3970fd48644b095a51fdd42b30d4430b929f8720e2cd50c618ec698cb34b22f459cfe4a726db8913b25d92f46562c2c49f7865102c073886f91c00077c595b00a3b7263317da4d71c843e93febd14647248e68344e1dd82b0", 0xea}], 0x1, 0xc, 0x0, {0x3}}, 0x81) 09:17:04 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 74) 09:17:04 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000064) 09:17:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x20, @remote, 0xafa}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000000080)=[@dstopts={{0x28, 0x29, 0x37, {0x2, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x1, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfff}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x16, 0x6, 0x1, 0x80, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x0, 0xa, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x28, {0x3, 0x8, 0x1, 0xf801, [0x0, 0x10001, 0x81, 0x1]}}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x67, 0x1, '\x00', [@generic={0xaa, 0x6, "3c344a5ae37b"}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x87, 0x10, 0x2, 0x6, 0x0, [@loopback, @private2, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x1f8}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x2, @mcast1, 0x1}, 0x1c, &(0x7f0000001600)=[{&(0x7f00000002c0)="0d67eea42b5062dfdf63555f641918cb14a038ca688f18ef1e4c674512320c23b88977fe4469ddf5b912eea3ddca877dba2be82cf74bfd153f38fb4c8b1ecee47ed8f45b0bbdd8f2f958854e6115d7bc2da2a37c51082ece2543c4a7f42977e014f8c0129619b6f5dd490c405a077389f12f87e9266f6994ab24cb1aac59602a723edc2a215f8959d2059da1a6c4b423038b77032fd2c663132ab4439779c9f29be55a107280987dcac8a20a95ea528e1fd437086e7c73afa85dcf9953dbd105c9f888afeeb1590f", 0xc8}, {&(0x7f0000000440)="d326531dba0e599e4f41306088d9c4971bd0ae8120d7eb234c7cc5e6312a53f526b60497b322248786d7332b3ba119b19e80e35dfeb4c9ecc733a6eea6547f2c714a3932efd1c9e2cd22c15be2d14e", 0x4f}, {&(0x7f00000003c0)="f43b67", 0x3}, {&(0x7f00000004c0)="f93a32bcc25fabb49bf9556515deb3c29bae33408c668c394b776ad345af62b6644b18367eb50a52ffdb0921678f6c7e5c823809f0a4ad0fb9f8fdacc9979cb7be597220d3f86179cf3b0d741390d51e857f162b261fd8e430405e7a14", 0x5d}, {&(0x7f0000000540)="f471bc2c2c16034dc45d7aeec3d9bc158523f92ab25e3bf734a0617c00bd3c97bce017ec245e7417c151389e9a88d0698186d0e3acaec4b2fd8d7cb186dcc890f3fa4a0a0eda0e6e020004d8e40268fc7e6aabaa5db56d9d70604c173dc90918537236bba34d72f14aa5f173048d5ba22a0d0e891813bcda996b", 0x7a}], 0x5, &(0x7f0000001680)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0xf2}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdrdstopts={{0x178, 0x29, 0x37, {0x73, 0x2c, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x3, 0x2, [0x8, 0x6, 0xffffffffffffffff, 0x200, 0x9, 0x1a418000000, 0x2]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3f}, @generic={0x4, 0xd2, "10c8c169d066204e72613f1f60a78c0148312d9c07d462ef5c0be5380d7bc2fbc8dc3440e471713f6ed26b65114fd8e32c5e6c9ccd182042fbec230be38a5949771da9a361b8e9c50fe61168231b0bebc919b39248e3009a3dc6c0f5ba040d040005a3b564b1b76363dfb532a5291a5b612f4a23de921dddf4047d63520f443515701bc8410c48253899cfce01b688c36ee30fe9e76b15aba58c53e0b5c77083be2dd53d680bb6222e1eb761858972c9a5cf073a03966c2112ae291c36d485f2b48ad1b783782eb3b966242223c4e58474fd"}, @ra={0x5, 0x2, 0x7f}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @remote}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x5c, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x40}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x4}]}}}], 0x208}}], 0x2, 0x20008824) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@timestamping={{0x14, 0x1, 0x25, 0xffff}}], 0x18}}], 0x2, 0x0) 09:17:04 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000001e) [ 1204.158127] FAULT_INJECTION: forcing a failure. [ 1204.158127] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.159956] CPU: 1 PID: 11268 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1204.160825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.161789] Call Trace: [ 1204.162093] dump_stack+0x107/0x167 [ 1204.162509] should_fail.cold+0x5/0xa [ 1204.162950] ? create_object.isra.0+0x3a/0xa20 [ 1204.163473] should_failslab+0x5/0x20 [ 1204.163916] kmem_cache_alloc+0x5b/0x310 [ 1204.164383] create_object.isra.0+0x3a/0xa20 [ 1204.164881] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1204.165461] kmem_cache_alloc+0x159/0x310 [ 1204.165938] prepare_creds+0x25/0x5e0 [ 1204.166374] selinux_setprocattr+0x354/0xa20 [ 1204.166879] ? selinux_shm_shmctl+0x180/0x180 [ 1204.167396] security_setprocattr+0xb7/0x120 [ 1204.167912] proc_pid_attr_write+0x340/0x7d0 [ 1204.168409] ? rw_verify_area+0x11d/0x350 [ 1204.168890] do_iter_write+0x4f0/0x700 [ 1204.169343] vfs_writev+0x1ae/0x620 [ 1204.169758] ? vfs_iter_write+0xa0/0xa0 [ 1204.170210] ? __fdget_pos+0xf1/0x190 [ 1204.170650] ? lock_downgrade+0x6d0/0x6d0 [ 1204.171131] ? ksys_write+0x12d/0x260 [ 1204.171578] ? __fget_files+0x2f8/0x520 [ 1204.172059] do_writev+0x139/0x300 [ 1204.172473] ? vfs_writev+0x620/0x620 [ 1204.172914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1204.173517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1204.174120] do_syscall_64+0x33/0x40 [ 1204.174551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.175151] RIP: 0033:0x7f7b39e69b19 [ 1204.175577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1204.177701] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1204.178573] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1204.179387] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1204.180235] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.181051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1204.181866] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:17:04 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000051) [ 1204.271074] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.6'. 09:17:17 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000065) 09:17:17 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 75) 09:17:17 executing program 6: syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "93de92", 0x28, 0x0, 0x0, @remote, @local, {[@srh={0x84, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [@remote, @private0, @ipv4={'\x00', '\xff\xff', @dev}, @private0, @remote, @dev, @loopback, @empty]}]}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@multicast, @local, @val={@void, {0x8100, 0x4, 0x1}}, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x1c, 0x1, 0x0, 0x0, "721aba5649563e55d6e0b81e6957c3ddc41f6e6502d197cf30d4177f47c341ec9ad07cd8861f2bf09693c8cf70f8b53b280635349bf5efc78e834fc9b7ccd13f"}}}}, &(0x7f0000000140)={0x0, 0x4, [0x8d8, 0x50, 0x745, 0x3d8]}) 09:17:17 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a5480900000000000000dac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) r1 = getegid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5805}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)={0x1, 0x0, @b}, 0x48, r0) keyctl$revoke(0x3, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setresgid(r1, r1, r1) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) signalfd(r3, &(0x7f0000000480)={[0x1]}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) sendmsg$inet6(r3, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\xf7{]&\x00', 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "5c9b12f59028888a4889f72d221d654e7e7ee8341067d0fc1d08128898fb0bdc94cdbef19d74da13df3d4dfb048d0516b18047279acae6ebe23c0d8e8c7db568"}, 0x48, 0xfffffffffffffffe) keyctl$describe(0x6, r5, &(0x7f0000000100)=""/31, 0x1f) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) keyctl$chown(0x4, r5, r6, r1) accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1a, 0x0, 0x0) 09:17:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001440)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="f32dcf0d8b97f748bd8975ed8776b7112be20493edd91b2a9a594cec90d11a9d8256f640b5465b20125be5e2df73e1f257195fdca988b0ce6217c663e598daeb456c7e1500e9305823738f8ff5b9806a86954a2409073864b51708a763b95a86afa5b2162e"], 0x20}}, 0x4000040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r4, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x80800) writev(r5, &(0x7f0000001280)=[{&(0x7f0000000140)="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", 0xfffffffffffffdeb}, {&(0x7f0000001180)="6d6a7f9ee452a13d761d39891adeab596fcd", 0x12}], 0x2) fcntl$setpipe(r6, 0x407, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x3ffffe00) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001e00)={0x11fc, 0x2d, 0x20, 0x70bd2b, 0x25dfdbfc, {0x1}, [@nested={0x1d8, 0x3c, 0x0, 0x1, [@typed={0xc, 0x3e, 0x0, 0x0, @str='nl80211\x00'}, @generic="06cc9fc64c0d39dc9b4801e60919b31874c4d9a05db1127b093d7e566f89e09d7c61d4a4cf775a5a91fe2479efc187b8cbe435a411b76652934c1cf5ed3c4cc924a08504380725a7159d33aed430c0086ff9ce850c0d35ca5697da99170de985af9369e589c59446f94c7b080eb434626be9c5d67f7134408ade8e70931fb7aa85ac7b6e84bd25013f1a6d", @generic="8c79b15c13bebf22ac9cf2149ce70d48b255e55aa1989245fbf40709584db2f3b6c1d62059a7b0032cb24643b4d027c35bb9901049c3fd4523c51b5ff1aed1da159cb5c354042eab4e47", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="a6ecadb002545ff61c49d3b6a7fedd4a4325ba94e818fc23fd3e2ab54c9c31d8bb07637372e24a6bd860199262b985a437eff181807afbce7c69730193b047fb3f901aa012cdf5b77da076916584172e79933f3c4313e95d78db89765732a16aebe7763ededf092501e5930f900897f8bba13c3b54e87193d126535bd93c25383aa2cdea9bc2826ffb5533ccdc6c7a31e1572c14b71c32de465b6b878deff77e0cd795714f4dce78b97e0fd53bbc4f5cfe5a6dd954dfaaeea8951e0e4a07cab71bd34a4d2e182b0d7fcd71ac18343b5246e090dc01bbb2f39d93fdcde4c60ac66878a214b022a5a9df2496"]}, @typed={0x4, 0x37}, @generic="366af2c22bc772f94ef8d59c", @generic="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"]}, 0x11fc}, 0x1, 0x0, 0x0, 0xc0}, 0x8800) ftruncate(r7, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r7, &(0x7f00000001c0)=ANY=[], 0xfdef) 09:17:17 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000021) 09:17:17 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000052) 09:17:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1218.000477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.012839] FAULT_INJECTION: forcing a failure. [ 1218.012839] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.014380] CPU: 1 PID: 11312 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1218.015278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.016358] Call Trace: [ 1218.016714] dump_stack+0x107/0x167 [ 1218.017203] should_fail.cold+0x5/0xa [ 1218.017705] ? security_prepare_creds+0x112/0x190 [ 1218.018333] should_failslab+0x5/0x20 [ 1218.018832] __kmalloc+0x72/0x390 [ 1218.019285] security_prepare_creds+0x112/0x190 [ 1218.019902] prepare_creds+0x452/0x5e0 [ 1218.020413] selinux_setprocattr+0x354/0xa20 [ 1218.020993] ? selinux_shm_shmctl+0x180/0x180 [ 1218.021582] security_setprocattr+0xb7/0x120 [ 1218.022157] proc_pid_attr_write+0x340/0x7d0 [ 1218.022726] ? rw_verify_area+0x11d/0x350 [ 1218.023270] do_iter_write+0x4f0/0x700 [ 1218.023793] vfs_writev+0x1ae/0x620 [ 1218.024284] ? vfs_iter_write+0xa0/0xa0 [ 1218.024807] ? __fdget_pos+0xf1/0x190 [ 1218.025309] ? lock_downgrade+0x6d0/0x6d0 [ 1218.025855] ? ksys_write+0x12d/0x260 [ 1218.026358] ? __fget_files+0x2f8/0x520 [ 1218.026888] do_writev+0x139/0x300 [ 1218.027343] ? vfs_writev+0x620/0x620 [ 1218.027842] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.028523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.029207] do_syscall_64+0x33/0x40 [ 1218.029695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.030369] RIP: 0033:0x7f7b39e69b19 [ 1218.030855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.033229] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1218.034206] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1218.035108] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1218.036036] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.036953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.037875] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:17:17 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000022) [ 1218.054806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:17:17 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000066) 09:17:18 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x1) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000029b2af00208bf3b009553b6c9be011f84678f16d986c190000ffff3486ac7af05301a30d98a325b50ffbfb44611effb2df44454e24953586b173e22214eff8204000ad180b1c8a15f97a628de5cd2623916896de0ca348ea8e230627d4af194888a2f9cf2214703df6812a966c855df744b50e4591d9857b4b01a1", @ANYRES32=0x0, @ANYBLOB="0c001100fb0300000000080055370fefc858d934b1fc9861e1e1c63b78d05d71bbda736b2d4b4c2d3c6b77dec4bdda5d6a056a835036df9795ab00000000000000000013e89d5e10c31c4895331e6c9062e6d19714413124927a70063ee48646ba815eee21568ca7d1c61a59ebab5c0109894757a4f547c4bd32c9b302b6e17d5ce55819bce603873c3b472d0fbd1b368d8fd86d6e2d30a0eebc77da844463f6262c43d3ba70e3a3bf832e75ff8e638862485199a31900718233e061b4cac9"], 0x28}}, 0x0) close_range(r3, r2, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_io_uring_setup(0x6e20, &(0x7f0000000380), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = dup2(r6, r6) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@sco={0x1f, @fixed}}, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) ftruncate(0xffffffffffffffff, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) io_uring_setup(0x6c70, &(0x7f0000000440)={0x0, 0x9fe0, 0x0, 0x2, 0xef}) unshare(0x48020200) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000240)={0x1, 0x0, 0x4, 'e'}) dup2(r1, r8) 09:17:18 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000067) 09:17:18 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000053) 09:17:18 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000023) 09:17:18 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001500)={0x4, 0x80, 0x7, 0x5, 0x1f, 0x8, 0x0, 0x4df1, 0x80000, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000340), 0x5}, 0x8621, 0x100000001, 0x5f, 0x5, 0xfff, 0x80000000, 0x7fff, 0x0, 0xcafa, 0x0, 0x3296e593}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000200)={0x100000010}) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) unshare(0x48020200) 09:17:34 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000054) 09:17:34 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001a0011cd", @ANYRES32=0x0, @ANYRESDEC], 0x28}}, 0x20008080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 09:17:34 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000072c0)={0x2, 0x80, 0x7f, 0x4, 0x3, 0x2, 0x0, 0x0, 0x30, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x5}, 0x403, 0x800, 0x1f, 0x0, 0x100000000, 0x8, 0x3, 0x0, 0x81, 0x0, 0x6}, 0x0, 0xb, r0, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = inotify_init1(0x80000) close_range(r1, r3, 0x2) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000040)=0x10be, 0x4) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0xe93, 0xfffffffffffffffe}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000007080)) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x404c008) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x4af8, 0xed53, 0x0, &(0x7f0000000400)={[0x400]}, 0x22) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000015c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00030002000093000000000c000300010000000000000008000500ffffffff08000308", @ANYRES32=r4, @ANYBLOB="ffffffff000000000800020001000000"], 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x29, 0xfd, 0x4, 0xffffffff, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x2, 0x8000}}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r5 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 09:17:34 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000024) 09:17:34 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000068) 09:17:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:17:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000de087468d181071906000000ffdf"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'caif0\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x80161}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 09:17:34 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 76) [ 1234.498715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1234.518837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1234.523932] FAULT_INJECTION: forcing a failure. [ 1234.523932] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.526890] CPU: 0 PID: 11369 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1234.528478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.530357] Call Trace: [ 1234.530958] dump_stack+0x107/0x167 [ 1234.531792] should_fail.cold+0x5/0xa [ 1234.532668] ? create_object.isra.0+0x3a/0xa20 [ 1234.533707] should_failslab+0x5/0x20 [ 1234.534568] kmem_cache_alloc+0x5b/0x310 [ 1234.535496] create_object.isra.0+0x3a/0xa20 [ 1234.536528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.537683] __kmalloc+0x16e/0x390 [ 1234.538497] security_prepare_creds+0x112/0x190 [ 1234.539555] prepare_creds+0x452/0x5e0 [ 1234.540449] selinux_setprocattr+0x354/0xa20 [ 1234.541444] ? selinux_shm_shmctl+0x180/0x180 [ 1234.542481] security_setprocattr+0xb7/0x120 [ 1234.543496] proc_pid_attr_write+0x340/0x7d0 [ 1234.544497] ? rw_verify_area+0x11d/0x350 [ 1234.545440] do_iter_write+0x4f0/0x700 [ 1234.546338] vfs_writev+0x1ae/0x620 [ 1234.547163] ? vfs_iter_write+0xa0/0xa0 [ 1234.548071] ? __fdget_pos+0xf1/0x190 [ 1234.548935] ? lock_downgrade+0x6d0/0x6d0 [ 1234.549886] ? ksys_write+0x12d/0x260 [ 1234.550757] ? __fget_files+0x2f8/0x520 [ 1234.551678] do_writev+0x139/0x300 [ 1234.552500] ? vfs_writev+0x620/0x620 [ 1234.553376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.554561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.555727] do_syscall_64+0x33/0x40 [ 1234.556578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.557749] RIP: 0033:0x7f7b39e69b19 [ 1234.558589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.562754] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1234.564494] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1234.566115] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1234.567726] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1234.569341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1234.570954] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:17:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:17:47 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000069) 09:17:47 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 77) 09:17:47 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000025) 09:17:47 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {0xe}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000280), &(0x7f0000000300)=@sha1={0x1, "9f8ce3fd5eba33278ce4ec989be7aeef64c50e03"}, 0x15, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='map_files\x00') getdents64(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b"], 0x30}}, 0x1) syz_genetlink_get_family_id$ipvs(0x0, r2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x48001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="10002dbd7000fbdbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990008000000220000000c005800e1ffffffffffffff0c00580049000000000000000c0058002d000000000000000c0058004e000000000000000c0058000f800000000000000c00580021000000000000000c0058006f000000000000000c0058002f00000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) lseek(r0, 0x1, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) unshare(0x48020200) 09:17:47 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000055) 09:17:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[]) chdir(&(0x7f0000000080)='./file1\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x1c7) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3ff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x0) 09:17:47 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file1\x00', 0x3, 0x0, 0x0, 0x3110400, &(0x7f0000000200)=ANY=[@ANYBLOB="72706b5f70697051667300953a069658082c7270635f706970656673002c646f6e745f"]) openat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x100) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) [ 1247.401370] FAULT_INJECTION: forcing a failure. [ 1247.401370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.403057] CPU: 0 PID: 11382 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1247.403990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1247.405105] Call Trace: [ 1247.405471] dump_stack+0x107/0x167 [ 1247.405960] should_fail.cold+0x5/0xa [ 1247.406482] _copy_from_user+0x2e/0x1b0 [ 1247.407018] memdup_user+0x65/0xd0 [ 1247.407510] proc_pid_attr_write+0x247/0x7d0 [ 1247.408099] ? rw_verify_area+0x11d/0x350 [ 1247.408663] do_iter_write+0x4f0/0x700 [ 1247.409191] vfs_writev+0x1ae/0x620 [ 1247.409676] ? vfs_iter_write+0xa0/0xa0 [ 1247.410214] ? __fdget_pos+0xf1/0x190 [ 1247.410728] ? lock_downgrade+0x6d0/0x6d0 [ 1247.411290] ? ksys_write+0x12d/0x260 [ 1247.411803] ? __fget_files+0x2f8/0x520 [ 1247.412350] do_writev+0x139/0x300 [ 1247.412821] ? vfs_writev+0x620/0x620 [ 1247.413339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1247.414055] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1247.414743] do_syscall_64+0x33/0x40 [ 1247.415236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1247.415912] RIP: 0033:0x7f7b39e69b19 [ 1247.416430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1247.418886] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1247.419900] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1247.420855] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1247.421811] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1247.422765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1247.423708] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1247.434567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.439175] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 09:17:47 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000056) 09:17:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) syz_io_uring_setup(0x404c, &(0x7f0000000280)={0x0, 0x9b21, 0x8, 0x2, 0x1d9, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r3 = syz_io_uring_setup(0x13b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x83}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x6, 0x1, 0x1, 0x0, 0x2, 0x0, {0x1, r7}}, 0x9) r8 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = getpid() r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r10, 0x0) r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r0, &(0x7f0000000340)={r10, r11, 0x6}) fallocate(r8, 0x0, 0x0, 0x1000002) 09:17:47 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000026) 09:17:47 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006a) 09:17:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x2c, r1, 0xc0b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 09:17:47 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 78) [ 1247.663251] FAULT_INJECTION: forcing a failure. [ 1247.663251] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.664904] CPU: 0 PID: 11417 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1247.665760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1247.666771] Call Trace: [ 1247.667107] dump_stack+0x107/0x167 [ 1247.667558] should_fail.cold+0x5/0xa [ 1247.668039] ? prepare_creds+0x25/0x5e0 [ 1247.668540] should_failslab+0x5/0x20 [ 1247.669016] kmem_cache_alloc+0x5b/0x310 [ 1247.669517] prepare_creds+0x25/0x5e0 [ 1247.669989] selinux_setprocattr+0x354/0xa20 [ 1247.670530] ? selinux_shm_shmctl+0x180/0x180 [ 1247.671090] security_setprocattr+0xb7/0x120 [ 1247.671642] proc_pid_attr_write+0x340/0x7d0 [ 1247.672190] ? rw_verify_area+0x11d/0x350 [ 1247.672714] do_iter_write+0x4f0/0x700 [ 1247.673203] vfs_writev+0x1ae/0x620 [ 1247.673651] ? vfs_iter_write+0xa0/0xa0 [ 1247.674147] ? __fdget_pos+0xf1/0x190 [ 1247.674626] ? lock_downgrade+0x6d0/0x6d0 [ 1247.675152] ? __fget_files+0x2f8/0x520 [ 1247.675668] do_writev+0x139/0x300 [ 1247.676108] ? vfs_writev+0x620/0x620 [ 1247.676583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1247.677225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1247.677859] do_syscall_64+0x33/0x40 [ 1247.678325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1247.678960] RIP: 0033:0x7f7b39e69b19 [ 1247.679418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1247.681677] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1247.682620] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1247.683494] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1247.684376] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1247.685253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1247.686123] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1247.704239] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1260.722228] loop4: detected capacity change from 0 to 32768 [ 1260.726700] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:18:00 executing program 6: unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "ebe9721bf5a36ab874eabc28af9589aa"}, 0x11, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0xc4, 0x6, @buffer={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000240)="3dc19c9f7bc3371c512d41607b19e4ff97e6d960a09c39818f37608daed0ba44e13508800a6ebc647a4976c982699309977aa7fc4c5772fc89e24125aa8e46d61f0b638068136018e8eea6d9070b6dce2a97982a5960cded403ffc4f57a948187bcd40d7b09862512ddfba11b933adfcf940990e1906573201dfdaea31fc56cf08a24d8925ff9c026e914e5300b300ee42b693c4c87d2c7a040d6f2f0a89aaf3d31e66c489dac480f691223991ccf4b29c98dd8b43e77309c9fa0acb7865e3c636d87834", &(0x7f0000000480)=""/253, 0x3, 0x10030, 0xffffffffffffffff, &(0x7f0000000340)}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x0, 0x0, "dbf57d"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='\x05\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x45) unshare(0x48020200) 09:18:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:18:00 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000057) 09:18:00 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006b) 09:18:00 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000027) 09:18:00 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 79) 09:18:00 executing program 2: syz_io_uring_setup(0x8, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) eventfd(0x0) r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x40448c0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x0) r5 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x3b1a, 0x0, 0x3, 0x158}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r1, 0x0, r4, 0x2, 0x0, 0x1, {0x0, r8}}, 0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, &(0x7f0000000140)={0x3fc}, 0x0, 0x0, 0x0) 09:18:00 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf7, 0x6, 0x4, 0x1, 0x0, 0x4, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x2000, 0x0, 0xfffffbff, 0x1, 0x4, 0x7, 0x3, 0x0, 0x3023, 0x0, 0xb39}, r0, 0x10, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1260.752993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1260.790731] FAULT_INJECTION: forcing a failure. [ 1260.790731] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.793399] CPU: 1 PID: 11431 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1260.794918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.796737] Call Trace: [ 1260.797314] dump_stack+0x107/0x167 [ 1260.798113] should_fail.cold+0x5/0xa [ 1260.798951] ? create_object.isra.0+0x3a/0xa20 [ 1260.799954] should_failslab+0x5/0x20 [ 1260.800798] kmem_cache_alloc+0x5b/0x310 [ 1260.801688] create_object.isra.0+0x3a/0xa20 [ 1260.802643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1260.803756] kmem_cache_alloc+0x159/0x310 [ 1260.804678] prepare_creds+0x25/0x5e0 [ 1260.805514] selinux_setprocattr+0x354/0xa20 [ 1260.806475] ? selinux_shm_shmctl+0x180/0x180 [ 1260.807467] security_setprocattr+0xb7/0x120 [ 1260.808443] proc_pid_attr_write+0x340/0x7d0 [ 1260.809400] ? rw_verify_area+0x11d/0x350 [ 1260.810310] do_iter_write+0x4f0/0x700 [ 1260.811175] vfs_writev+0x1ae/0x620 [ 1260.811971] ? vfs_iter_write+0xa0/0xa0 [ 1260.812851] ? __fdget_pos+0xf1/0x190 [ 1260.813679] ? lock_downgrade+0x6d0/0x6d0 [ 1260.814592] ? ksys_write+0x12d/0x260 [ 1260.815432] ? __fget_files+0x2f8/0x520 [ 1260.816335] do_writev+0x139/0x300 [ 1260.817114] ? vfs_writev+0x620/0x620 [ 1260.817952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1260.819098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.820229] do_syscall_64+0x33/0x40 [ 1260.821053] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1260.822171] RIP: 0033:0x7f7b39e69b19 [ 1260.822982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.827008] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1260.828678] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1260.830234] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1260.831792] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.833356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1260.834914] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1260.837190] loop4: detected capacity change from 0 to 32768 09:18:00 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000028) 09:18:00 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006c) 09:18:00 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000058) [ 1260.895837] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:18:00 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 80) [ 1260.941039] FAULT_INJECTION: forcing a failure. [ 1260.941039] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.942545] CPU: 0 PID: 11460 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1260.943429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.944481] Call Trace: [ 1260.944823] dump_stack+0x107/0x167 [ 1260.945282] should_fail.cold+0x5/0xa [ 1260.945773] ? security_prepare_creds+0x112/0x190 [ 1260.946391] should_failslab+0x5/0x20 [ 1260.946876] __kmalloc+0x72/0x390 [ 1260.947320] security_prepare_creds+0x112/0x190 [ 1260.947911] prepare_creds+0x452/0x5e0 [ 1260.948405] selinux_setprocattr+0x354/0xa20 [ 1260.948958] ? selinux_shm_shmctl+0x180/0x180 [ 1260.949525] security_setprocattr+0xb7/0x120 [ 1260.950081] proc_pid_attr_write+0x340/0x7d0 [ 1260.950638] ? rw_verify_area+0x11d/0x350 [ 1260.951162] do_iter_write+0x4f0/0x700 [ 1260.951667] vfs_writev+0x1ae/0x620 [ 1260.952126] ? vfs_iter_write+0xa0/0xa0 [ 1260.952634] ? __fdget_pos+0xf1/0x190 [ 1260.953115] ? lock_downgrade+0x6d0/0x6d0 [ 1260.953640] ? ksys_write+0x12d/0x260 [ 1260.954127] ? __fget_files+0x2f8/0x520 [ 1260.954643] do_writev+0x139/0x300 [ 1260.955095] ? vfs_writev+0x620/0x620 [ 1260.955576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1260.956237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.956892] do_syscall_64+0x33/0x40 [ 1260.957358] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1260.958001] RIP: 0033:0x7f7b39e69b19 [ 1260.958469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.960802] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1260.961776] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1260.962690] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1260.963605] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.964523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1260.965412] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:18:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000500)=ANY=[@ANYBLOB="feff00822db87c3d1ea8d9599eafdb49b36a6d0886e7b1fc965be1a65967e183b5a18278e6d9821c9f", @ANYRES32=r0, @ANYBLOB="00000000000000002ee71f79e169dc3d6aca2f66696c6530002c87af821976de93ac3f8819dedb65c8fa8891ef2e1460c2cfba"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[r1, 0xffffffffffffffff], 0x2) lseek(0xffffffffffffffff, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r3 = openat$hpet(0xffffffffffffff9c, 0x0, 0x12282, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="34010000170001000000000020000000fe8800000000000000000000ce4190da00b8254f618835e2598e2500000100000000000003000000000000000000000000000000000000000000000000000000000000000000fc00"/118, @ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="070000000000000000000000000000027f00000100000000000000000000000200000000000018000a00000000000000776ce5dd8489071246420660a4e58e4bfb5afdc9", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESHEX], 0x134}}, 0x24008811) close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001e000801000000000000000007000000089a000002000100"], 0x1c}, 0x1, 0x0, 0x0, 0xb31505c58d61db6b}, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000100)={0x6200, 0x1f, 0x1}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) copy_file_range(r3, &(0x7f0000000200)=0x80000000, r3, &(0x7f0000000240)=0x401, 0x3, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0) 09:18:00 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 81) 09:18:00 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x8881, 0x2) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x882000, &(0x7f0000000000)={[{@memory_localevents}]}) 09:18:00 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006d) [ 1261.061010] scsi_io_completion_action: 63 callbacks suppressed [ 1261.061040] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1261.063008] sd 0:0:0:0: [sg0] tag#0 CDB: Update Block [ 1261.063664] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 3d c1 9c 9f 7b c3 37 1c 51 2d 41 60 7b 19 e4 ff [ 1261.064719] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 97 e6 d9 60 a0 9c 39 81 8f 37 60 8d ae d0 ba 44 [ 1261.065771] sd 0:0:0:0: [sg0] tag#0 CDB[20]: e1 35 08 80 0a 6e bc 64 7a 49 76 c9 82 69 93 09 [ 1261.066827] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 97 7a a7 fc 4c 57 72 fc 89 e2 41 25 aa 8e 46 d6 [ 1261.067868] sd 0:0:0:0: [sg0] tag#0 CDB[40]: 1f 0b 63 80 68 13 60 18 e8 ee a6 d9 07 0b 6d ce [ 1261.068940] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 2a 97 98 2a 59 60 cd ed 40 3f fc 4f 57 a9 48 18 [ 1261.069988] sd 0:0:0:0: [sg0] tag#0 CDB[60]: 7b cd 40 d7 b0 98 62 51 2d df ba 11 b9 33 ad fc [ 1261.071038] sd 0:0:0:0: [sg0] tag#0 CDB[70]: f9 40 99 0e 19 06 57 32 01 df da ea 31 fc 56 cf [ 1261.072098] sd 0:0:0:0: [sg0] tag#0 CDB[80]: 08 a2 4d 89 25 ff 9c 02 6e 91 4e 53 00 b3 00 ee [ 1261.073150] sd 0:0:0:0: [sg0] tag#0 CDB[90]: 42 b6 93 c4 c8 7d 2c 7a 04 0d 6f 2f 0a 89 aa f3 [ 1261.074197] sd 0:0:0:0: [sg0] tag#0 CDB[a0]: d3 1e 66 c4 89 da c4 80 f6 91 22 39 91 cc f4 b2 [ 1261.075256] sd 0:0:0:0: [sg0] tag#0 CDB[b0]: 9c 98 dd 8b 43 e7 73 09 c9 fa 0a cb 78 65 e3 c6 [ 1261.076319] sd 0:0:0:0: [sg0] tag#0 CDB[c0]: 36 d8 78 34 [ 1261.090665] Process accounting resumed [ 1261.096179] FAULT_INJECTION: forcing a failure. [ 1261.096179] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.098830] CPU: 1 PID: 11470 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1261.100316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1261.102095] Call Trace: [ 1261.102667] dump_stack+0x107/0x167 [ 1261.103450] should_fail.cold+0x5/0xa [ 1261.104264] ? create_object.isra.0+0x3a/0xa20 [ 1261.105252] should_failslab+0x5/0x20 [ 1261.106064] kmem_cache_alloc+0x5b/0x310 [ 1261.106943] create_object.isra.0+0x3a/0xa20 [ 1261.107875] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1261.108967] __kmalloc+0x16e/0x390 [ 1261.109740] security_prepare_creds+0x112/0x190 [ 1261.110741] prepare_creds+0x452/0x5e0 [ 1261.111576] selinux_setprocattr+0x354/0xa20 [ 1261.112520] ? selinux_shm_shmctl+0x180/0x180 [ 1261.113487] security_setprocattr+0xb7/0x120 [ 1261.114430] proc_pid_attr_write+0x340/0x7d0 [ 1261.115369] ? rw_verify_area+0x11d/0x350 [ 1261.116263] do_iter_write+0x4f0/0x700 [ 1261.117174] vfs_writev+0x1ae/0x620 [ 1261.117983] ? vfs_iter_write+0xa0/0xa0 [ 1261.118832] ? __fdget_pos+0xf1/0x190 [ 1261.119636] ? lock_downgrade+0x6d0/0x6d0 [ 1261.120528] ? ksys_write+0x12d/0x260 [ 1261.121343] ? __fget_files+0x2f8/0x520 [ 1261.122202] do_writev+0x139/0x300 [ 1261.122957] ? vfs_writev+0x620/0x620 [ 1261.123764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1261.124881] ? syscall_enter_from_user_mode+0x1d/0x50 09:18:01 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x0, 0x200000d0}, 0x0) syz_io_uring_setup(0x5301, &(0x7f0000000280)={0x0, 0x5f97, 0x2, 0x0, 0x371, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000300)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xa5) ftruncate(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000440)=ANY=[@ANYBLOB="00000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="011400", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r5, &(0x7f0000000340)=0x80, &(0x7f0000000380)=@l2tp={0x2, 0x0, @dev}, 0x0, 0x80000}, 0x0) r7 = syz_io_uring_setup(0x55db, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x271}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000580)='./file0\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x46e2, 0x0) ftruncate(r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r9, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x341681, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0x6, {0x0, r9}, 0x9, 0xf, 0x0, {0x0, r10, r11}}, 0x6) [ 1261.125982] do_syscall_64+0x33/0x40 [ 1261.126994] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1261.128084] RIP: 0033:0x7f7b39e69b19 [ 1261.128883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:18:01 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000029) [ 1261.132788] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1261.134525] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1261.136025] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 09:18:01 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000059) [ 1261.137537] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 09:18:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1261.139151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:18:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530ce000000000000005ffe872c042e6395824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x4000893}, 0x0) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001e00210c000007d69dae3996bf0400000800000000000100e25c95acbe93ca983cd0dec3a3c3cc6c16e1db1be57f27a833cbdb08198a328f10700d5490c39f971b54ed373a61bed97f096e0e9c7444e45ae839cacc2e4453d584907c79f59c5c895c3baef62f7384032bf6234edd877ecc"], 0x1c}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x77, 0x5}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6532207b28232c5d2e0a223abaa5ac8d216824d4ee9dd38ab20e3f0df7e9fc080000000000000086000000009f779e75e0982d737caada9dfcd4a2e3f76841eb1a2fb9ae4f13a1ece25ba8647f01843dfd52e4669763b3ed20875e636ab877cc0d1f5cce01a84423c1e9aa81bac665f84a8c8f8872b640a0d23ee19eb6c9083be8c2f28a62a2a0"], 0x88) lseek(r1, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 1261.140758] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1261.183548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:18:14 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006e) 09:18:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='ip6tnl0\x00') connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb16, 0x1}, 0xe) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5422, 0x0) 09:18:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:18:14 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 82) 09:18:14 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005a) 09:18:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x9c20, 0x0, 0x4, 0x1ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x4, 0x1, 0x80, 0xad, 0x0, 0x0, 0x2a00, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0x42000, 0x3, 0x1, 0x3, 0xf4b, 0x0, 0x1f, 0x0, 0x1774, 0x0, 0x3}, r4, 0xffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, 0x0, 0x101, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000044580)={0x0, 0x0, "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", "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"}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) setresuid(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FSYNC, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x1e, 0xc21, 0x0, 0x0, {0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x820) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x8003, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40, 0x4) openat(r6, &(0x7f0000000240)='./file0\x00', 0x4c0080, 0xa0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0)=0xa2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78, r1}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc004437", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25030000001c000180080003000200000008000100", @ANYRES32=r1, @ANYBLOB="08000300010000000500030004000000400001801400020067656e65766531000000000000000000140002006c6f00000000000000000000000000001400020000000000000000000000000000000000050002000500000034000180080003000200000014000200626f6e64300000000000000000000000140002006d6163736563300000000000000000000500020000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4008004}, 0x4004005) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000000)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000c80)={&(0x7f0000001540)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX=r5, @ANYRES32=r6, @ANYBLOB="08000300010000000500030004000000400001801400020067656e65766531000000200000000000140002006c6f0000000000009c000000000000001400020000000000003358f8968ff11f0000040000000500000034000180080003000200000014000200626f6e6430000000000027c0e3319351607a02006d61637365633000000000000000000005000200005c2adcf88459"], 0xbc}, 0x1, 0x0, 0x0, 0x4008004}, 0x4004005) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x7, @mcast2, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000280)="5b9beddf0321e8f406b3c9c1f185a0a642f2e96ba44f7a1b89c341c0a717755314f8d7a0bcef28fac9207254d8037400499b2e26b03802eb4fb809bc009a1f83d6dfe8cefa6ceb3fe7", 0x49}, {&(0x7f0000000300)="b27c108f2608cb5b35ad7dd9b3d33fe49de645ee4fc19fc98035623fe9c684f68fcc745ddcb9bc8abebbefeac6f3757cc0fa85b6fcbe6e272af744dfb75af55cec90c81d5f22a1a56d1dfcf0929dad6dd9adba77e0e38002cca2c497644527c00f89", 0x62}, {&(0x7f0000000380)="a7ee94f99125bec45c6fc423c65a6000c3cedb59ce2146db017f47d6d45a9603e132b4bcb1d1781bf2b1f5de66d02114f6636d740cbdbde1c94874c9c57e9fa788a68b51f5c31e57af612ceded2c3ae748af1c44759f14ed5323f4ef1e233dc50202db3f5a28322814c1f09c40d2cc046fa319a3f91df257183cd6ae1df791", 0x7f}], 0x3}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x2, @mcast2, 0x101}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000001380)="bf78488c0853235b01c31216cfcd5388c17bdb46b2f726aaed799c44d5f009e779846ae328448e54e489576dedf7ee34e8b21b0fff1cb3c7c0bbd785c41dbebd606e9fbdcef90f1c9619b14d41687beb45579f123f97118f9ea086206f2633914a454e74bcaf10db20358bed07ea35efdc60d56e20e0b3d31c42f3285bb1da676106733c05c76117ba90e50a53a7b68b33bfcdf82ea1bea7262a8022646556d0102183f4cf324665a405869073feb017236859cd9e9db0017d5e9a556f7f3ed67d97b2be4e18a332475aff258fc5646216f58fd2c8cda6", 0xd7}, {&(0x7f0000000600)="b474f8ce5cf9366c362d5b0bd48d8049469f9ed7ccf47d0cdc41e52edf13b0cf42a38b403bad17b7940b56786b6c540c595b2b369f4ba586de93bd6ab7222e81d880ac553e631f6b493fa0c7096b4c7d0e6dcc30562a069028f6e91b6a70de37db474247533aa2a69e4d8b0e7951893079", 0x71}, {&(0x7f0000000680)="d48c9a1ca59f22a3870fa8e80087487178382bc318f383f0a2fbb6cb0b41efad8d72c858e71ac2a428f632277ceab719ca998f450d62211d389b62cafa6894250816b1b0ffeed77fdcffe44b430c84218d604cc6375cb365ab2e426400c2a7273dcedabe587ff1769cb6c70989825999ba7ecb2e6755e6c61b0af3463d1c7939f3af0bd07790339d365b799111837474b38be1c5bb51beb228dcba282da45ebec2d176f7", 0xa4}, {&(0x7f0000000740)="58c943b5aa408a7f5632c251699ca45f445080b91eec3f941ddde81bf1644e82375cec6e20ae1ef3907bc60bb40f64293d11a6b62713fe3e70b2ad274231a3a0a18bd846a64c30b3a831d571dd64838cedfd9d249ae9adc05e39052f810d6f6fa004ddbefe3d36ec746e1c0063e1233eca2c2d9af9dec3a59f20da6419b1442d6b385218fa40aa55dc01b067b7770a5887a62bd27281a51de02e8c892b85e02e258ddbb505c4175aeb3e44ec60cef7800b58f449fbc437d031d5e8ce4afa577b54605fcadca29a640034fb449a37a10cfacac011c8cd9c9929670e068ca9439b99bd41", 0xe3}, {&(0x7f0000000840)="da604f29fd978454e2745ce1c5b05d1a69f0626ca2c0c977d760becedba47ae3042a23dc808fd665077ab252d95f4bc4f2d8c0beadae96c13cb69edc611058be725f0444107a6636b2c33fe66cc88f563a0bfa7bb0b6e815e5d2496d7b186b9c0bcc9b6ae81a5e708dae752f0c218d45eb07809dafe24d1e49b16c01ae6c673e75edfb0c51bcc48c63e7da0c58ea185a696d8bbf13a2def79f8ef6ed5aaf73798a19e3023f46ae58520c37d685cf27680ddaac06084090ae6026c2f88563ae", 0xbf}, {&(0x7f0000000900)="701bd133287811eea877160c2e3456bc2e78d96091fff19b071b00dc49820ca8496901ace63d7d471e4f162ad51d9148f273fd542bb4fa4535f1fce78eb284b564c2f65314efcb60d4351f0bb04854006865daae96732c61515cc610f36a9f8a7ec3b868f7262b3c0bec113fa43d8b2c67f2b73fe756577d166819e3e8ce1e8c933e89db15eca802d1a9d0a84e7438ab53b350e1f2f66950f99b5ffdd913caafbf865c757139d397fa2627a34510fbca8f6de1df811a54e678b8e4b76217c4413942ef197ef27d8e02ecbacc58a6d293cbe4274221130f9a44c67b7899364df9e952cac7b24320dd9f9ca382c2", 0xed}, {&(0x7f0000000a00)="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", 0xfb}], 0x7, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000290000003900000008000207000000007800000000000000290000003900000006d1f2050000000000000000000000000000000000000001fc000000000000000000000000000001ff020000000000000000000000000001fe8000000000000000000000000000aafe800000000000000000000000000027000000000000000000000029000000390000002b0c000500000000fc020000000000000000000000000001fe8000000000000000000000000000aafe80000000000000000000000000001cfc020000000000000000000000000000fc010000000000000000000000000000fe8000"/256], 0x108}}, {{&(0x7f0000000480)={0xa, 0x4e21, 0x403, @local, 0x10001}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000cc0)="3a61147740e096c0cfb4958b0b738794fe5eb8610671cd974444bf0994353acc09eaf5590551b95d76e01e0ff9bc293dedaffee0496236bd23f8cf3f27b8cc83f1d4ca3d4b1986a57e781570df1376a2115f4fe30d9d06ab6e523400fe9ae184c389c2067282be7ac53b0d4c86c476588927bd5084e224d0e9e1ae681e9a8201cfd0107a", 0x84}], 0x1, &(0x7f0000000d80)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xf}, r1}}}, @hopopts={{0x1f0, 0x29, 0x36, {0x2b, 0x3a, '\x00', [@generic={0x5, 0xc2, "b50533fd3a507dadec2254490738431a4429826913bacef564ba730d671729d6e8a3199a5274108bfd4e38b0b5d71a55c86296a3d82d469e16c01b7ee99750d62cadbf53ad092e5f3374dd7a495c8cda967b06fdb0971985d74cf1d9d539b7117051979db748a1bb3c4631ae71153f45b398c47da84cf89dcb6473adf2134f814fba7e032855eb1055192585b3f8312d197946f5ca2152bd2b15268aed597b92bcf66c826358ec539ddbcaebf9c4c79bb3adf5d9569c151143889c16c261f0dafb5a"}, @ra={0x5, 0x2, 0xa9fa}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x8, [0x7e9c]}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xbc, "1afabb018c32f696565fe5bfc9e6a4d410b27d1ce86b760d9ca3a054202ee36e9ad48827eae9b22a1f6285e98cd9bfed1847f5e058294b4ba828d41076be15f397018379551978fed3d3c1edab8e5b628a1c3ef685b8fcdbb1da90d18769c2396aa7d9c27506183893a917e918871b35071cfa6a401b8489bbc0281e9c81bac728201b0bd9516f72ba5b864c6f59595f759a50b06fed17de2b9c2e3b6e3961e569a81caa46a45326cc9d43c3f9b59255864524a8f52f24f02202170b"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xaeb8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdrdstopts={{0x170, 0x29, 0x37, {0x0, 0x2a, '\x00', [@generic={0x4, 0x6d, "0de510e142cc44cb307dad9ab426d935f9ce4ffedfdb98ea07916fa481b23016c7f080eeb1ca277783df3a9d1bbd06f701f7cd24919cbc868ba55a732ecda44513b8a44f6caee9b5dfc0209ccb88a611963fe02cb7e14a45b1488c8138b26df7020218213c6636399c305294df"}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x7, 0xd4, "e3aa57fd8be208ade837dc77617921a0096358c4c2f39a1d4334d3fb20ad0cc0af5695e57fcc6b3220c05e4f4c457cd353d6537e207a9b2b0498e39d10c334a62bc680feb8aabefc243173b43dfce753471a5d7c425c49ba58d0b2bb9655dcfef3ad81850011203d43121f2f1cc02aa5a6c63d76fa4e08e55f692aca45f47e0b1791f646f50f667dcbe3d20804a7028b0534d9c19d0bfe1a00f960629186c2ce59d399ab0940febbacc7812cf955dfe0d2b2c262acc757a1b549fc816dc094f9e63826f0b999d1e3fbbc95c04549b160e1417085"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x80}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r6}}}, @dstopts={{0x158, 0x29, 0x37, {0x2f, 0x27, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x42, [0x0, 0x8, 0x3f, 0x8, 0xc1, 0x4, 0x1000, 0xa2]}}, @enc_lim={0x4, 0x1, 0xdc}, @jumbo={0xc2, 0x4, 0x80000001}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x2, 0xcb, "6a158171d0dcc358c67bfcc7dcfabc3e54b9d937398435032aff3f5dd6d536a0b8c8bf2328bf13d49eb5d89bc220d26ede4eb986ff0a7add719a458d04e2c96096ec803052b050d8d8c426eeb232f30dee22168195f2268c8ead5502485f3e847be91d4c6b0ba137175560c7a7d45cb66086b9ac73d663b0b6df10c7495e9e9817c803d200064ab52eba7e6897ea761b2610b5d771bca49086017aea35721b4129e8a053c4652cff87969644dc028fcc423a175161c59ada709f145e8f6df8be3c262a4818745c5294013d"}]}}}], 0x520}}], 0x3, 0x24040803) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 09:18:14 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002a) 09:18:14 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006f) [ 1274.652956] FAULT_INJECTION: forcing a failure. [ 1274.652956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.654433] CPU: 1 PID: 11506 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1274.655294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1274.656321] Call Trace: [ 1274.656663] dump_stack+0x107/0x167 [ 1274.657122] should_fail.cold+0x5/0xa [ 1274.657599] _copy_from_user+0x2e/0x1b0 [ 1274.658096] memdup_user+0x65/0xd0 [ 1274.658542] proc_pid_attr_write+0x247/0x7d0 [ 1274.659095] ? rw_verify_area+0x11d/0x350 [ 1274.659609] do_iter_write+0x4f0/0x700 [ 1274.660102] vfs_writev+0x1ae/0x620 [ 1274.660566] ? vfs_iter_write+0xa0/0xa0 [ 1274.661065] ? __fdget_pos+0xf1/0x190 [ 1274.661539] ? lock_downgrade+0x6d0/0x6d0 [ 1274.662054] ? ksys_write+0x12d/0x260 [ 1274.662530] ? __fget_files+0x2f8/0x520 [ 1274.663035] do_writev+0x139/0x300 [ 1274.663479] ? vfs_writev+0x620/0x620 [ 1274.663955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1274.664612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1274.665252] do_syscall_64+0x33/0x40 [ 1274.665717] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1274.666350] RIP: 0033:0x7f7b39e69b19 [ 1274.666811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.669092] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1274.670028] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1274.670899] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1274.671769] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1274.672647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1274.673525] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1274.679800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.687010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.713423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11517 comm=syz-executor.6 09:18:14 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005b) 09:18:14 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002b) 09:18:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000000)=0xffffffff, 0x4) r2 = accept$inet(r0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'veth0\x00', @ifru_data=&(0x7f00000000c0)="2f3489b64b0881300ddc36ab27c20630d2e5a40376ed9d0bd2c872644d6f7252"}}) 09:18:14 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000070) 09:18:14 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002c) 09:18:14 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x11}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp}}}}, 0x0) syz_emit_ethernet(0x39, &(0x7f0000000040)={@broadcast, @broadcast, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@x25={0x805, {0x2, 0x1, 0x17, "d6a4360a65cf636125222ad5513103b986a95db1bd03b0d5d94fd8975a53ee43f399cc2c"}}}}, &(0x7f0000000080)={0x0, 0x1, [0x90e, 0xf5b, 0x667, 0x71d]}) 09:18:14 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000071) 09:18:14 executing program 6: ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000040)) syz_emit_ethernet(0xa8, &(0x7f0000000080)=ANY=[], 0x0) 09:18:14 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002d) 09:18:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x40448c0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x200000b, 0x20010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00210c00000000007300000400020010001180809801a7b0c7dba09475f251"], 0x24}}, 0x0) 09:18:27 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005c) 09:18:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:18:27 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002e) 09:18:27 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={r2, 0x8, 0x5}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', 0x7, 0x0, &(0x7f0000000400), 0x20000, &(0x7f0000000700)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c618de59e2026204b7f4c5abdcf34be1452ed3300008605578287ba0eae312c756e695f786c6174653d30146d6f636861727365743d69736f383835392d362c6e6e6f6e756d7461696c3d312c696f636861727365743d63703835352c757365667265652c6e6f6e756d746169422c00a373686f72746e6107003d6d697865642c757466383d302c736d61636b66736861743d24002c61707072616973652c00"]) openat(r4, &(0x7f0000001b40)='./file0\x00', 0x600000, 0xd) ftruncate(r3, 0x0) read(r3, &(0x7f0000000140), 0x0) r5 = syz_io_uring_setup(0x3873, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x68}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r8, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x20) 09:18:27 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000072) 09:18:27 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 83) [ 1287.762539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:18:27 executing program 6: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002d) [ 1287.775342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1287.787803] FAULT_INJECTION: forcing a failure. [ 1287.787803] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.790532] CPU: 0 PID: 11573 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1287.792095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.793971] Call Trace: [ 1287.794568] dump_stack+0x107/0x167 [ 1287.795409] should_fail.cold+0x5/0xa [ 1287.796266] ? prepare_creds+0x25/0x5e0 [ 1287.797176] should_failslab+0x5/0x20 [ 1287.798029] kmem_cache_alloc+0x5b/0x310 [ 1287.798966] prepare_creds+0x25/0x5e0 [ 1287.799825] selinux_setprocattr+0x354/0xa20 [ 1287.800831] ? selinux_shm_shmctl+0x180/0x180 [ 1287.801867] security_setprocattr+0xb7/0x120 [ 1287.802878] proc_pid_attr_write+0x340/0x7d0 [ 1287.803882] ? rw_verify_area+0x11d/0x350 [ 1287.804843] do_iter_write+0x4f0/0x700 [ 1287.805737] vfs_writev+0x1ae/0x620 [ 1287.806559] ? vfs_iter_write+0xa0/0xa0 [ 1287.807446] ? __fdget_pos+0xf1/0x190 [ 1287.808310] ? lock_downgrade+0x6d0/0x6d0 [ 1287.809264] ? ksys_write+0x12d/0x260 [ 1287.810134] ? __fget_files+0x2f8/0x520 [ 1287.811057] do_writev+0x139/0x300 [ 1287.811871] ? vfs_writev+0x620/0x620 [ 1287.812750] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1287.813933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.815107] do_syscall_64+0x33/0x40 [ 1287.815958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1287.817130] RIP: 0033:0x7f7b39e69b19 [ 1287.817973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1287.822168] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1287.823901] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1287.825533] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1287.827151] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.828784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1287.830399] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:18:27 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005d) 09:18:27 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000002f) 09:18:27 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005e) 09:18:27 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000073) 09:18:27 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 84) [ 1287.981827] FAULT_INJECTION: forcing a failure. [ 1287.981827] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.983210] CPU: 1 PID: 11596 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1287.984007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.984962] Call Trace: [ 1287.985267] dump_stack+0x107/0x167 [ 1287.985689] should_fail.cold+0x5/0xa [ 1287.986129] ? create_object.isra.0+0x3a/0xa20 [ 1287.986659] should_failslab+0x5/0x20 [ 1287.987094] kmem_cache_alloc+0x5b/0x310 [ 1287.987566] create_object.isra.0+0x3a/0xa20 [ 1287.988071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1287.988658] kmem_cache_alloc+0x159/0x310 [ 1287.989134] prepare_creds+0x25/0x5e0 [ 1287.989571] selinux_setprocattr+0x354/0xa20 [ 1287.990074] ? selinux_shm_shmctl+0x180/0x180 [ 1287.990603] security_setprocattr+0xb7/0x120 [ 1287.991111] proc_pid_attr_write+0x340/0x7d0 [ 1287.991612] ? rw_verify_area+0x11d/0x350 [ 1287.992095] do_iter_write+0x4f0/0x700 [ 1287.992555] vfs_writev+0x1ae/0x620 [ 1287.992984] ? vfs_iter_write+0xa0/0xa0 [ 1287.993437] ? __fdget_pos+0xf1/0x190 [ 1287.993871] ? lock_downgrade+0x6d0/0x6d0 [ 1287.994347] ? ksys_write+0x12d/0x260 [ 1287.994788] ? __fget_files+0x2f8/0x520 [ 1287.995250] do_writev+0x139/0x300 [ 1287.995664] ? vfs_writev+0x620/0x620 [ 1287.996108] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1287.996723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.997313] do_syscall_64+0x33/0x40 [ 1287.997738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1287.998320] RIP: 0033:0x7f7b39e69b19 [ 1287.998748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.000867] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1288.001731] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1288.002551] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1288.003365] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.004180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1288.005007] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1293.679549] Bluetooth: hci7: command 0x0406 tx timeout 09:18:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:18:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:18:43 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x0) io_uring_enter(r2, 0x176b, 0xfcc5, 0x3, &(0x7f00000000c0)={[0x9]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="010000001800f4ffffff0000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00G/file1\x00']) openat(r3, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000180)="a57a65569418c4b169dc2ce2544416015726d1e40b48da4ae6276398a6ec06ddd7c8e0becb7072fc59067e99eec3f4b0fd50ffe9c5674b23532fa7d0d12b0d152267494e19a87f0232a87623e24808b265c489589e7c2be9db983c766b6feda6f58ff5b9ce3cf38f5bcb6f1542f059aace9cea2aaffebb28676f1c69d64d68cc6b0e05e7f8b8b3298b9ede8a893fd8fb46e6", 0x92}, {&(0x7f0000000240)="c98a349acc08306206bf76687a8d1223f6007b1959863c94486456249d31e77d97500ae050097588fc08f00aafffd58bedee4632c5c29f685652d5921781160f910c6c67ae2b28984395f182c3ae7959162dfd562e00f2fdbccf0b9b59b6bcc9ff6d5646dbc64668b96530eb25533524a1fa01a92998d902149f2652dae988be52893dfc9d845f096143301fd233febb1f810154efd749665b8702", 0x9b}, {&(0x7f0000000300)="f754c102d2a01d5b5818de2063894df04ff306f683c072ae5769fb75c1269bc2ebfd54b707f584970d81e95a8afc999f027b2206ecc3eea642274fbb053dd8ed6e8bbe5b6e088f14b7caced5e42284eeac5c231751da4e535b8bae45153235fc23f0875ed8c87af402454c8eae800e194ea23899067c5eb59f2f21f24258dc9d9df1408d2036125fd80b990b16160bd5b855764b722358d53d09331d8b8be54fda2f23684d090f56b1e87f23b0e79b33a4452998966fb3baf1c5ffbb2a51f4a98f221207a772a6bb80e8e4ce6ccd3065a5ba7e2518440acf1e6f0ed8461c6c26da", 0xe1}, {&(0x7f0000000400)}, {&(0x7f00000004c0)="6544d9b2013684b6119eb2e23fc1ac8a7200889991cd4893e24cf4ebe899dff1c1b8af4b3adfce6ed05e336378e31df8847624a5de07cd85228e2000f8e34fc84d3af209fe18e33d0b8805694d80571b78ffe3f61b41b2c7c990e52e4baf4eff3f4b4285783a03660b78d5cb522c4b128114febbf7534c389166f083dbd80019a11e90d624053ee6d67008ef6572629283ef2420219814939c50c38161470f72972ae0f52413afaa8dff02be6981714c95c80983e4cc39cacb56c1ddec70eda8b630c86db015eb79e1", 0xc9}], 0x5) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xffffffffffffffff}, 0x2, 0x0, 0x1004, 0x9, 0x0, 0xffffffff}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100}) 09:18:43 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000005f) 09:18:43 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000030) 09:18:43 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x100, 0x10e) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x401, 0x1) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000340)='./file0\x00', 0xc2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x20010, r2, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYRESOCT]) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec46065bf6e5c2fd748b7382cb035aee7d07675"]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7f, 0xa4, 0x80, 0x3, 0x0, 0xbae3, 0x22002, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x3, 0x288}, 0x8, 0xbe, 0xfffff800, 0x7, 0x6, 0x58, 0x80, 0x0, 0x200, 0x0, 0x3}, r4, 0x4, 0xffffffffffffffff, 0xb) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000480)={0x0, 0x2560}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) unshare(0x48020200) 09:18:43 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000074) 09:18:43 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 85) [ 1303.717229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1303.718713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1303.730132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:18:43 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000075) [ 1303.749253] FAULT_INJECTION: forcing a failure. [ 1303.749253] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.751982] CPU: 1 PID: 11618 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1303.753469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1303.755239] Call Trace: [ 1303.755802] dump_stack+0x107/0x167 [ 1303.756598] should_fail.cold+0x5/0xa [ 1303.757427] ? security_prepare_creds+0x112/0x190 [ 1303.758458] should_failslab+0x5/0x20 [ 1303.759273] __kmalloc+0x72/0x390 [ 1303.760029] security_prepare_creds+0x112/0x190 [ 1303.761033] prepare_creds+0x452/0x5e0 [ 1303.761867] selinux_setprocattr+0x354/0xa20 [ 1303.762811] ? selinux_shm_shmctl+0x180/0x180 [ 1303.763787] security_setprocattr+0xb7/0x120 [ 1303.764741] proc_pid_attr_write+0x340/0x7d0 [ 1303.765606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1303.765679] ? rw_verify_area+0x11d/0x350 [ 1303.765706] do_iter_write+0x4f0/0x700 [ 1303.768702] vfs_writev+0x1ae/0x620 [ 1303.769486] ? vfs_iter_write+0xa0/0xa0 [ 1303.770335] ? __fdget_pos+0xf1/0x190 [ 1303.771161] ? lock_downgrade+0x6d0/0x6d0 [ 1303.772063] ? ksys_write+0x12d/0x260 [ 1303.772895] ? __fget_files+0x2f8/0x520 [ 1303.773771] do_writev+0x139/0x300 [ 1303.774535] ? vfs_writev+0x620/0x620 [ 1303.775353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1303.776485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1303.777601] do_syscall_64+0x33/0x40 [ 1303.778405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1303.779500] RIP: 0033:0x7f7b39e69b19 [ 1303.780293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1303.784249] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1303.785880] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1303.787409] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1303.788937] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1303.790462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1303.791977] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:18:43 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000076) 09:18:43 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000031) 09:18:43 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 86) 09:18:43 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000060) 09:18:43 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000077) 09:18:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 09:18:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x0, 0x2}, 0xfffffffffffffd9c}}, 0x4) sendfile(r4, r3, &(0x7f0000000440)=0x7, 0x6ee7) sendfile(0xffffffffffffffff, r4, &(0x7f0000000200)=0x80000000000006, 0x0) write$binfmt_elf64(r2, &(0x7f00000008c0)=ANY=[], 0x629) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) pwrite64(r5, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x1000, 0x3, 0x0, 0x0, 0xd10f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c00, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x4, 0x0, 0x4, 0x1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="480300000213890000004c", 0xb}], 0x1}, 0x0) flock(0xffffffffffffffff, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRESDEC]) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) sendfile(r2, r0, 0x0, 0xffffffff000) [ 1304.039039] FAULT_INJECTION: forcing a failure. [ 1304.039039] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.041952] CPU: 1 PID: 11649 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1304.043412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.045173] Call Trace: [ 1304.045732] dump_stack+0x107/0x167 [ 1304.046506] should_fail.cold+0x5/0xa [ 1304.047320] ? create_object.isra.0+0x3a/0xa20 [ 1304.048368] should_failslab+0x5/0x20 [ 1304.049237] kmem_cache_alloc+0x5b/0x310 [ 1304.050095] create_object.isra.0+0x3a/0xa20 [ 1304.051032] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1304.052216] __kmalloc+0x16e/0x390 [ 1304.052986] security_prepare_creds+0x112/0x190 [ 1304.053973] prepare_creds+0x452/0x5e0 [ 1304.054800] selinux_setprocattr+0x354/0xa20 [ 1304.055734] ? selinux_shm_shmctl+0x180/0x180 [ 1304.056695] security_setprocattr+0xb7/0x120 [ 1304.057637] proc_pid_attr_write+0x340/0x7d0 [ 1304.058796] ? rw_verify_area+0x11d/0x350 [ 1304.059902] do_iter_write+0x4f0/0x700 [ 1304.060747] vfs_writev+0x1ae/0x620 [ 1304.061515] ? vfs_iter_write+0xa0/0xa0 [ 1304.062349] ? __fdget_pos+0xf1/0x190 [ 1304.063164] ? lock_downgrade+0x6d0/0x6d0 [ 1304.064170] ? ksys_write+0x12d/0x260 [ 1304.064987] ? __fget_files+0x2f8/0x520 [ 1304.065842] do_writev+0x139/0x300 [ 1304.066593] ? vfs_writev+0x620/0x620 [ 1304.067593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1304.068705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.069794] do_syscall_64+0x33/0x40 [ 1304.070575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.071653] RIP: 0033:0x7f7b39e69b19 [ 1304.072440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.076326] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1304.077945] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1304.079444] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1304.080948] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.082455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1304.083963] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:19:03 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000061) [ 1323.613042] FAULT_INJECTION: forcing a failure. 09:19:03 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000032) 09:19:03 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 87) 09:19:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:19:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x180000030) fcntl$setstatus(r0, 0x4, 0x46400) open(&(0x7f0000000140)='./file2\x00', 0x880, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000500)}}], 0x2, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x180000030) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffff4, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r2, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/sockcreate\x00') openat(r3, &(0x7f00000003c0)='./file1\x00', 0x22000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4268d3bc70a87101) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x6003, @fd=r4, 0x0, &(0x7f0000000280)=""/115, 0x73, 0x0, 0x1}, 0x7fff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1323.613042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.615930] CPU: 1 PID: 11661 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1323.617412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1323.619412] Call Trace: [ 1323.620091] dump_stack+0x107/0x167 [ 1323.621037] should_fail.cold+0x5/0xa [ 1323.622028] _copy_from_user+0x2e/0x1b0 [ 1323.623047] memdup_user+0x65/0xd0 [ 1323.623960] proc_pid_attr_write+0x247/0x7d0 [ 1323.625099] ? rw_verify_area+0x11d/0x350 [ 1323.626164] do_iter_write+0x4f0/0x700 [ 1323.627184] vfs_writev+0x1ae/0x620 [ 1323.628116] ? vfs_iter_write+0xa0/0xa0 [ 1323.629148] ? __fdget_pos+0xf1/0x190 [ 1323.630121] ? lock_downgrade+0x6d0/0x6d0 [ 1323.631185] ? ksys_write+0x12d/0x260 [ 1323.632163] ? __fget_files+0x2f8/0x520 [ 1323.633216] do_writev+0x139/0x300 [ 1323.634126] ? vfs_writev+0x620/0x620 [ 1323.635104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1323.636440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1323.637775] do_syscall_64+0x33/0x40 [ 1323.638725] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1323.640029] RIP: 0033:0x7f7b39e69b19 09:19:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:19:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffffb}, {&(0x7f00000001c0)="02000000030000000450", 0xa, 0x800}], 0x0, &(0x7f0000000140)={[{@bh}]}) 09:19:03 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000078) [ 1323.640991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.645833] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1323.647769] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1323.649589] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1323.651397] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.653228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.655050] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1323.670969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:19:03 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000980)='./file1\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x60, 0xf8, 0x31, 0x1, 0x0, 0xfffffffffffffffe, 0x80410, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff80000, 0x0, @perf_config_ext={0x7, 0x2}, 0x4050, 0x3, 0x81, 0xb, 0x7b8b, 0x4, 0x7cb, 0x0, 0x3f, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28efcc17e7ff2515d37091448ed8e5668c7bf46632e043d5fcdf362eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069aeff070000ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f07000000d554eb2d645860"], 0x200900) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) eventfd(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4015) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2", 0x44}], 0x4}, 0x38008004) dup2(r1, r2) [ 1323.691353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.697879] loop4: detected capacity change from 0 to 16776704 [ 1323.709298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.714525] EXT4-fs (loop4): Ignoring removed bh option [ 1323.715760] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1323.727246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.745486] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 20484)! [ 1323.747613] EXT4-fs (loop4): group descriptors corrupted! 09:19:03 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000062) 09:19:03 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000079) [ 1323.797861] loop4: detected capacity change from 0 to 16776704 09:19:03 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000033) [ 1323.814810] EXT4-fs (loop4): Ignoring removed bh option [ 1323.816464] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1323.823307] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 20484)! [ 1323.825812] EXT4-fs (loop4): group descriptors corrupted! 09:19:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x93}) [ 1323.911099] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 147 (only 16 groups) 09:19:03 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000063) 09:19:03 executing program 2: ftruncate(0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680), 0xc, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000001c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x9, 0x4, 0x3, 0x3, 0x0, 0x5, 0x201, 0x40, 0x9e, 0x3ff, 0xc9, 0x38, 0x7, 0x5, 0x5, 0x1ff}, [{0x0, 0x1ff, 0x0, 0xc000000000, 0x2, 0x9, 0x81, 0x3f}], "55a70d7b5547341d935ec2c4c27f344f8d4d7b7adbf895f4445a40037092f2aa6be0ff3fdff002f7f9148d526dffb64b7d3f55597b928356a060b771b07497b01f64f1ba5a229353009ade75e57fbe6145948a8a3395422a64564d0b836d115aebe4cc705b8d90ba9624409c328d5bbcfe5a439a7774c71034e2bb7426cf80cbfb525b834a21a6706742b2b6074e988837f63e92144ed09401ea60e2ce90fc00454554caad5c35b8df5e6f32b8dd0f8cde2c5889323dec5de9698c83a595405a14051e536054e9d1a25991fc118c322ff62f458a2f8cc2e4f8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x751) umount2(0x0, 0x8) read(0xffffffffffffffff, &(0x7f0000000040)=""/24, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001040)={{{@in6=@initdev, @in=@empty}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', &(0x7f00000007c0), 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 1323.976921] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 147 (only 16 groups) 09:19:16 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000007a) 09:19:16 executing program 2: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3f, 0x4, 0xfc, 0x5, 0x0, 0x0, 0xa25d, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x412b, 0x2, @perf_config_ext={0x5, 0x7fff}, 0x4800, 0x80000001, 0x8, 0x2, 0x8, 0x20, 0x81, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000380)='./file0\x00', 0x5db9c3, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, 0x0, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x474, 0x1, 0x10000000, 0x770133f7}) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5d) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat(0xffffffffffffffff, 0x0, 0x490a40, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x40001) read(0xffffffffffffffff, &(0x7f0000000140)=""/123, 0x7b) 09:19:16 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000064) 09:19:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:19:16 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000034) 09:19:16 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 88) 09:19:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:19:16 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a00)=ANY=[@ANYBLOB="000000000023000000000000cc93ed3b5914b126a17cb15964b91597ea8a45cb9504eca4f6aeebb05ef6554a71722f503a3b31d83c5c164aca360a91416171b94b69c78b99f0e0e45cc8710c11f0397f40d23c5944cb94e7be84523c0e879c2970f771a9015d78ab029fd9d4cecf241e28245332aeb9045ab718dcd0f3b6fcca1b1774e22fd18d79893703d19be3e209763fc8ac5ae1e69560127ad78d03fa50ed9bd66f0cb9e908503b1e99548763cab314acb12dd95eaae38219fbde8efd64d0b587ba22ef185b84b2a677966c48aef2d3", @ANYRES64, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="1baf190006020000f3b223c918ee0690c27c452e4a019e8847c3b319f28b49be5d67079bfe7d9894d4933f4553b280941511dfe2469a8d9ee33fc846e6a82bda4cc3c5f8fa1848b48cc020c2c3eebaa312189b76c7cc5f432944cf6959a2d9bf55bd5fcfda7f440aca9d85eadac3e408ab0070277e48dfd51f19713c5d44292d2b7de3f6bdd70f8eb42716bb78981ac5452010fec631"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0xfdef) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000300)) preadv2(r2, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/243, 0xf3}], 0x4, 0x3, 0x5cf8, 0x0) r4 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000300)) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(r5, &(0x7f0000000100)='./file0\x00', 0x600100, 0x0) fstat(r6, &(0x7f0000000340)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) unshare(0x48020200) [ 1336.963238] FAULT_INJECTION: forcing a failure. [ 1336.963238] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.966892] CPU: 1 PID: 11718 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1336.968692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.970578] Call Trace: [ 1336.971148] dump_stack+0x107/0x167 [ 1336.971934] should_fail.cold+0x5/0xa [ 1336.972759] ? prepare_creds+0x25/0x5e0 [ 1336.973633] should_failslab+0x5/0x20 [ 1336.974450] kmem_cache_alloc+0x5b/0x310 [ 1336.975335] prepare_creds+0x25/0x5e0 [ 1336.976155] selinux_setprocattr+0x354/0xa20 [ 1336.977108] ? selinux_shm_shmctl+0x180/0x180 [ 1336.978064] kauditd_printk_skb: 54 callbacks suppressed [ 1336.978083] security_setprocattr+0xb7/0x120 [ 1336.978100] audit: type=1400 audit(1747214356.908:88): avc: denied { associate } for pid=11720 comm="syz-executor.4" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:syslogd_var_lib_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 1336.985200] proc_pid_attr_write+0x340/0x7d0 [ 1336.986048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.986140] ? rw_verify_area+0x11d/0x350 [ 1336.986168] do_iter_write+0x4f0/0x700 [ 1336.989341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.989946] vfs_writev+0x1ae/0x620 [ 1336.989969] ? vfs_iter_write+0xa0/0xa0 [ 1336.989989] ? __fdget_pos+0xf1/0x190 [ 1336.990017] ? lock_downgrade+0x6d0/0x6d0 [ 1336.995342] ? ksys_write+0x12d/0x260 [ 1336.996172] ? __fget_files+0x2f8/0x520 [ 1336.997055] do_writev+0x139/0x300 [ 1336.997829] ? vfs_writev+0x620/0x620 [ 1336.998715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1336.999847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.000957] do_syscall_64+0x33/0x40 [ 1337.001764] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1337.002877] RIP: 0033:0x7f7b39e69b19 [ 1337.003675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.007644] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1337.009261] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1337.010890] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1337.012416] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1337.013945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.015464] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1337.019412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.044949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:19:16 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000007b) 09:19:17 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 89) 09:19:17 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000035) 09:19:17 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000065) 09:19:17 executing program 2: sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000004080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[]}, @devid=r2}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={r2, "1f97da2d965551153358c180300791a3"}) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="300000001e00210c00a900"], 0x30}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000004480)=ANY=[], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="290000206e4f2a242de9dfd8b4c36af2b05b036e0ad3ce8452888a6f53769a0aa6c864a8269f4c99df0e0375aa5eac827217308c67cdf2e5e416a4c0c50b6c45b9ffcb18f5f7f37e8e62729789aef44292b5a4f273db776c9ad8b2e5efa8f966303fe0f3e6468cca072288edac94e27ff7885ce7c4491623b1c149cd9b56f954546a4c6a10b258aecf8a351d9f4226a6a63833ddf0d6a09c0cc0916df936e9b62ccb11c1f5df823034c40e89963529856686f40000000000", @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r3, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x8054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1337.171097] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1337.174119] FAULT_INJECTION: forcing a failure. [ 1337.174119] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.176699] CPU: 0 PID: 11737 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1337.178267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1337.180150] Call Trace: [ 1337.180749] dump_stack+0x107/0x167 [ 1337.181582] should_fail.cold+0x5/0xa [ 1337.182447] ? create_object.isra.0+0x3a/0xa20 [ 1337.183479] should_failslab+0x5/0x20 [ 1337.184344] kmem_cache_alloc+0x5b/0x310 [ 1337.185290] create_object.isra.0+0x3a/0xa20 [ 1337.186282] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1337.187440] kmem_cache_alloc+0x159/0x310 [ 1337.188386] prepare_creds+0x25/0x5e0 [ 1337.189266] selinux_setprocattr+0x354/0xa20 [ 1337.190258] ? selinux_shm_shmctl+0x180/0x180 [ 1337.191290] security_setprocattr+0xb7/0x120 [ 1337.192299] proc_pid_attr_write+0x340/0x7d0 [ 1337.193305] ? rw_verify_area+0x11d/0x350 [ 1337.194255] do_iter_write+0x4f0/0x700 [ 1337.195155] vfs_writev+0x1ae/0x620 [ 1337.195987] ? vfs_iter_write+0xa0/0xa0 [ 1337.196886] ? __fdget_pos+0xf1/0x190 [ 1337.197759] ? lock_downgrade+0x6d0/0x6d0 [ 1337.198703] ? ksys_write+0x12d/0x260 [ 1337.199575] ? __fget_files+0x2f8/0x520 [ 1337.200498] do_writev+0x139/0x300 [ 1337.201321] ? vfs_writev+0x620/0x620 [ 1337.202185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.203374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.204557] do_syscall_64+0x33/0x40 [ 1337.205411] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1337.206577] RIP: 0033:0x7f7b39e69b19 [ 1337.207423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.211602] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1337.213345] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1337.214943] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1337.216560] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1337.218181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.219795] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:19:17 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000007c) [ 1337.287536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.289507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.291315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1337.301801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1351.455698] loop4: detected capacity change from 0 to 33559552 09:19:31 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 90) 09:19:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:19:31 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000066) 09:19:31 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x17, "77004a6efdff00002d1ceb7300"}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNDETACHFILTER(r0, 0x800454e1, 0x20000000) 09:19:31 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000036) 09:19:31 executing program 4: r0 = creat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x7, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000380)={@loopback}, 0x14) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000000)=0x7, 0x4) fsmount(r0, 0x1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)={0x16, 0x17, 0x2, {0xfffffffffffffeaa, './file0'}}, 0x16) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r3 = dup2(r1, r2) fcntl$getown(r3, 0x9) 09:19:31 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000007d) 09:19:31 executing program 6: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3873, &(0x7f00000001c0)={0x0, 0x4, 0x10, 0x0, 0x80000003}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(r3, 0x200, 0x3, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:19:31 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000067) [ 1351.504112] FAULT_INJECTION: forcing a failure. [ 1351.504112] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.507172] CPU: 0 PID: 11778 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1351.508778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1351.510716] Call Trace: [ 1351.511331] dump_stack+0x107/0x167 [ 1351.512184] should_fail.cold+0x5/0xa [ 1351.513075] ? security_prepare_creds+0x112/0x190 [ 1351.514202] should_failslab+0x5/0x20 [ 1351.515086] __kmalloc+0x72/0x390 [ 1351.515898] security_prepare_creds+0x112/0x190 [ 1351.516981] prepare_creds+0x452/0x5e0 [ 1351.517893] selinux_setprocattr+0x354/0xa20 [ 1351.518915] ? selinux_shm_shmctl+0x180/0x180 [ 1351.519968] security_setprocattr+0xb7/0x120 [ 1351.520997] proc_pid_attr_write+0x340/0x7d0 [ 1351.522021] ? rw_verify_area+0x11d/0x350 [ 1351.522986] do_iter_write+0x4f0/0x700 [ 1351.523905] vfs_writev+0x1ae/0x620 [ 1351.524746] ? vfs_iter_write+0xa0/0xa0 [ 1351.525674] ? __fdget_pos+0xf1/0x190 [ 1351.526551] ? lock_downgrade+0x6d0/0x6d0 [ 1351.527513] ? ksys_write+0x12d/0x260 [ 1351.528396] ? __fget_files+0x2f8/0x520 [ 1351.529340] do_writev+0x139/0x300 [ 1351.530161] ? vfs_writev+0x620/0x620 [ 1351.531043] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1351.532247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1351.533441] do_syscall_64+0x33/0x40 [ 1351.534302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1351.535477] RIP: 0033:0x7f7b39e69b19 [ 1351.536332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1351.540572] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1351.542328] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1351.543967] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1351.545608] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1351.547245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1351.548883] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:19:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) fsetxattr$security_selinux(r0, &(0x7f00000005c0), &(0x7f0000000600)='system_u:object_r:syslog_conf_t:s0\x00', 0x23, 0x3) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xff}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) clone3(&(0x7f0000000480)={0x2080, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000300), {0x2}, &(0x7f0000000380)=""/10, 0xa, 0x0, &(0x7f0000000380)}, 0x58) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x81) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44001}, 0x14) unshare(0x48020200) [ 1351.592271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:19:31 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000068) 09:19:31 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000007e) 09:19:31 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000037) 09:19:31 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 91) [ 1351.743021] FAULT_INJECTION: forcing a failure. [ 1351.743021] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.744396] CPU: 1 PID: 11799 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1351.745201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1351.746151] Call Trace: [ 1351.746464] dump_stack+0x107/0x167 [ 1351.746889] should_fail.cold+0x5/0xa [ 1351.747341] ? create_object.isra.0+0x3a/0xa20 [ 1351.747871] should_failslab+0x5/0x20 [ 1351.748312] kmem_cache_alloc+0x5b/0x310 [ 1351.748778] create_object.isra.0+0x3a/0xa20 [ 1351.749297] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1351.749882] __kmalloc+0x16e/0x390 [ 1351.750299] security_prepare_creds+0x112/0x190 [ 1351.750844] prepare_creds+0x452/0x5e0 [ 1351.751298] selinux_setprocattr+0x354/0xa20 [ 1351.751799] ? selinux_shm_shmctl+0x180/0x180 [ 1351.752320] security_setprocattr+0xb7/0x120 [ 1351.752839] proc_pid_attr_write+0x340/0x7d0 [ 1351.753360] do_iter_write+0x4f0/0x700 [ 1351.753824] vfs_writev+0x1ae/0x620 [ 1351.754245] ? vfs_iter_write+0xa0/0xa0 [ 1351.754712] ? __fdget_pos+0xf1/0x190 [ 1351.755147] ? lock_downgrade+0x6d0/0x6d0 [ 1351.755628] ? ksys_write+0x12d/0x260 [ 1351.756073] ? __fget_files+0x2f8/0x520 [ 1351.756541] do_writev+0x139/0x300 [ 1351.756957] ? vfs_writev+0x620/0x620 [ 1351.757411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1351.758021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1351.758613] do_syscall_64+0x33/0x40 [ 1351.759041] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1351.759628] RIP: 0033:0x7f7b39e69b19 [ 1351.760056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1351.762163] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1351.763064] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1351.763892] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1351.764714] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1351.765540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1351.766365] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:19:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000001540), 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) fallocate(r2, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8080, 0x122) 09:19:31 executing program 6: ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000002600)={{}, "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"}) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x84018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x1d3, 0x0, 0x7, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20000000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000dc4f4e8a1492574e5c64095a19375dadfae4f74c"]) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)={0xd4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa4b6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) fallocate(r2, 0x10, 0x7e10, 0x6) lseek(r1, 0x2, 0x3) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000640), 0xd00, 0x0) fcntl$dupfd(r4, 0x0, r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000380)={0x0, 0x80, 0x8, 0x5, 0xe8, 0x81, 0x0, 0x6, 0x4200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x7}, 0x2000, 0x100, 0x800, 0x0, 0x10000, 0x8001, 0x0, 0x0, 0x3, 0x0, 0x800}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x40) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000081) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) 09:19:31 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000069) [ 1356.591500] Bluetooth: hci7: command 0x0409 tx timeout [ 1358.639525] Bluetooth: hci7: command 0x041b tx timeout [ 1360.687570] Bluetooth: hci7: command 0x040f tx timeout [ 1361.654129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.656366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.659807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1361.712901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.714770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.717391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1361.857954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.865313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.735917] Bluetooth: hci7: command 0x0419 tx timeout 09:19:56 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000038) 09:19:56 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x40448c0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r6, 0x0) syz_io_uring_setup(0x7f76, &(0x7f0000000340)={0x0, 0xb0d6, 0x2, 0x1, 0x39e, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x80, 0x0, 0x1109, 0x2}, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) 09:19:56 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000082) 09:19:56 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:19:56 executing program 2: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r1, 0x5451) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=@hopopts={0x0, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn, @generic={0x3f, 0x27, "bfbaee49142b9384acc194db5e0212fa866035729354d71dcc1fec512f7773e70fb2d4781cc61c"}]}, 0x38) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80) perf_event_open(&(0x7f0000000980)={0xc, 0x80, 0xe1, 0x20, 0x9, 0x63, 0x0, 0x0, 0x4400, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x8180, 0x22a, 0x1, 0x0, 0x0, 0x8, 0x2bd3, 0x0, 0x8, 0x0, 0xa4b9}, 0x0, 0x5, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 09:19:56 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006a) 09:19:56 executing program 4: syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1056e2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, r0, 0xd8cee000) ftruncate(r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0x30, r0, 0x0) 09:19:56 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 92) [ 1376.536110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1376.542362] FAULT_INJECTION: forcing a failure. [ 1376.542362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.543718] loop6: detected capacity change from 0 to 41948160 [ 1376.545069] CPU: 1 PID: 12292 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1376.547605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.549329] Call Trace: [ 1376.549894] dump_stack+0x107/0x167 [ 1376.550648] should_fail.cold+0x5/0xa [ 1376.551454] _copy_from_user+0x2e/0x1b0 [ 1376.552280] memdup_user+0x65/0xd0 [ 1376.553018] proc_pid_attr_write+0x247/0x7d0 [ 1376.553929] ? rw_verify_area+0x11d/0x350 [ 1376.554801] do_iter_write+0x4f0/0x700 [ 1376.555648] vfs_writev+0x1ae/0x620 [ 1376.556416] ? vfs_iter_write+0xa0/0xa0 [ 1376.557250] ? __fdget_pos+0xf1/0x190 [ 1376.558075] ? lock_downgrade+0x6d0/0x6d0 [ 1376.558957] ? ksys_write+0x12d/0x260 [ 1376.559755] ? __fget_files+0x2f8/0x520 [ 1376.560604] do_writev+0x139/0x300 [ 1376.561358] ? vfs_writev+0x620/0x620 [ 1376.562161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.563279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.564353] do_syscall_64+0x33/0x40 [ 1376.565131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.566201] RIP: 0033:0x7f7b39e69b19 [ 1376.566976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.570773] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1376.572342] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1376.573821] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1376.575300] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.576774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.578258] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1376.640909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.642621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.644919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:19:56 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000083) 09:19:56 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 93) 09:19:56 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000039) [ 1376.744951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:19:56 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006b) 09:19:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) flistxattr(r0, &(0x7f00000010c0)=""/4102, 0x1006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x309040, 0xc0) accept4$inet(r1, 0x0, &(0x7f0000000040), 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x1c0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x100) unshare(0x6000480) fork() fork() [ 1376.821246] FAULT_INJECTION: forcing a failure. [ 1376.821246] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.823865] CPU: 1 PID: 12315 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1376.825305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.827027] Call Trace: [ 1376.827576] dump_stack+0x107/0x167 [ 1376.828327] should_fail.cold+0x5/0xa [ 1376.829131] ? security_prepare_creds+0x112/0x190 [ 1376.829311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.830140] should_failslab+0x5/0x20 [ 1376.830160] __kmalloc+0x72/0x390 [ 1376.830203] security_prepare_creds+0x112/0x190 [ 1376.834714] prepare_creds+0x452/0x5e0 [ 1376.835520] selinux_setprocattr+0x354/0xa20 [ 1376.836430] ? selinux_shm_shmctl+0x180/0x180 [ 1376.837378] security_setprocattr+0xb7/0x120 [ 1376.838295] proc_pid_attr_write+0x340/0x7d0 [ 1376.839203] ? rw_verify_area+0x11d/0x350 [ 1376.840082] do_iter_write+0x4f0/0x700 [ 1376.840918] vfs_writev+0x1ae/0x620 [ 1376.841690] ? vfs_iter_write+0xa0/0xa0 [ 1376.842503] ? __fdget_pos+0xf1/0x190 [ 1376.843292] ? lock_downgrade+0x6d0/0x6d0 [ 1376.844156] ? ksys_write+0x12d/0x260 [ 1376.844947] ? __fget_files+0x2f8/0x520 [ 1376.845802] do_writev+0x139/0x300 [ 1376.846545] ? vfs_writev+0x620/0x620 [ 1376.847331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.848423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.849527] do_syscall_64+0x33/0x40 [ 1376.850306] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.851366] RIP: 0033:0x7f7b39e69b19 [ 1376.852163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.855964] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1376.857549] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1376.859030] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1376.860509] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.861983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.863450] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:19:56 executing program 2: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000000c0)={'fscrypt:', @auto=[0x0, 0x36, 0x31, 0x64, 0x35, 0x62, 0x35, 0x39, 0x32, 0x35, 0x33, 0x36, 0x65, 0x38, 0x39, 0x31]}, &(0x7f0000000200)={0x0, "f038679de002000000000000000000009d1fa459d07100bc7ae6d0e1c7391515c7ab7c8e06000000000000000400", 0x27}, 0x48, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000400), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000005c0)='{N$\x0f[\xc9UY\xb1y\x9a\x03\r\xc8y8\xb5\x15\xb2\xa6\x11\x9e\xaf\xd3bj\xd0\xee0%`\xf7\xd6\xf3\xf3\x03\x8da7\xa6\x95\x85\xbc\xfc\xae%~V\x8c\x90C\x13\xba\x1c0q3\tET(_\xa8\xbb\x9c\xd9e\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffc) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000080)="a3", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000780)='dns_resolver\x00', &(0x7f0000000740)=@secondary) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolve\xc8C', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x4000001) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000580)={0x92, 0x1, 0x3, 0x5}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:19:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001640)) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 09:19:56 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000084) 09:19:56 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 94) 09:19:56 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003a) 09:19:56 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006c) [ 1377.059179] FAULT_INJECTION: forcing a failure. [ 1377.059179] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.061837] CPU: 1 PID: 12335 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1377.063306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.065072] Call Trace: [ 1377.065654] dump_stack+0x107/0x167 [ 1377.066431] should_fail.cold+0x5/0xa [ 1377.067258] ? create_object.isra.0+0x3a/0xa20 [ 1377.068254] should_failslab+0x5/0x20 [ 1377.069082] kmem_cache_alloc+0x5b/0x310 [ 1377.069984] create_object.isra.0+0x3a/0xa20 [ 1377.070936] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1377.072047] kmem_cache_alloc+0x159/0x310 [ 1377.072972] prepare_creds+0x25/0x5e0 [ 1377.073819] selinux_setprocattr+0x354/0xa20 [ 1377.074794] ? selinux_shm_shmctl+0x180/0x180 [ 1377.075796] security_setprocattr+0xb7/0x120 [ 1377.076780] proc_pid_attr_write+0x340/0x7d0 [ 1377.077760] ? rw_verify_area+0x11d/0x350 [ 1377.078680] do_iter_write+0x4f0/0x700 [ 1377.079557] vfs_writev+0x1ae/0x620 [ 1377.080359] ? vfs_iter_write+0xa0/0xa0 [ 1377.081237] ? __fdget_pos+0xf1/0x190 [ 1377.082085] ? lock_downgrade+0x6d0/0x6d0 [ 1377.083007] ? ksys_write+0x12d/0x260 [ 1377.083853] ? __fget_files+0x2f8/0x520 [ 1377.084748] do_writev+0x139/0x300 [ 1377.085546] ? vfs_writev+0x620/0x620 [ 1377.086390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1377.087550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.088691] do_syscall_64+0x33/0x40 [ 1377.089521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.090654] RIP: 0033:0x7f7b39e69b19 [ 1377.091473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.095553] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1377.097229] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1377.098800] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1377.100374] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.101949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.103515] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:19:57 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000085) [ 1381.871566] Bluetooth: hci7: command 0x0409 tx timeout [ 1383.919491] Bluetooth: hci7: command 0x041b tx timeout [ 1385.967472] Bluetooth: hci7: command 0x040f tx timeout [ 1386.320031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.321903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.325853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1386.373650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.375351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.377840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1386.541382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.549224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.015470] Bluetooth: hci7: command 0x0419 tx timeout 09:20:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:20:20 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 95) 09:20:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x81403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4, 0x3, 0xfffffffc, 0x2, 0x3, 0x400, 0xfffe, 0x0, 0xfffffffc, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2c4100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) fcntl$getownex(r4, 0x10, &(0x7f0000000340)) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r6, &(0x7f00000000c0)="04", 0x1, 0x3ff03) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x43000, 0x3, 0x0, 0x4, 0x0, 0x4}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="4ec066696c6530105336954469db231bf1a7c73921847aeaa9", @ANYRES64=r9, @ANYBLOB="a64f55f4387590b3e1df13820ee2f5cf669fbbf224b264ccd71d2b9428f28fde2af2b6fb30d354559bf9a4b9a1e4445dd113caceec2a1c9998e369310f87b846c78f86290869b813e4669af512c812044817c69126ba26fc80d2c1442e15b5e41b8bdfc2cb45f021924b719bf69fd9957e2d0913575f0d840df6c7c5d8d2c1", @ANYRESOCT]) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000300)) sendfile(r1, r0, 0x0, 0xffffffff000) 09:20:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) fsetxattr$security_selinux(r0, &(0x7f00000005c0), &(0x7f0000000600)='system_u:object_r:syslog_conf_t:s0\x00', 0x23, 0x3) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x9, 0x9, 0xda8, 0x3, 0x2400]}, &(0x7f0000000300)=0x54) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xff}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="3c0000000100000003ea14c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec46065bf6e5cafd748b7382cb035aee7d0767597dae49a310f20ffd9b0fe60a9c4cc341cc29fb43d12bb081cd5caa2da30849435550172e7ec9968275e3ca4f2524061fc3351655c9f4559a4e74f47d5d15eba87c32d976b4054a60bb0e9ba523af58bf4d181f007563de920103b7f8cc6b3c01f40c2584cc693c5092e887c0d321be197bf5687986a6c1dd710ed55bcf22a3ea2057469af589c07426b4d62f4f5e3c2b1ff7e09a395b37f65723d224c8cf34ec21685fb4b192eed1b789e385192d0c29c9c2f2624e3781575ef65569fee8cf1a959250623a5829fd6fdd59fbf98eea9484f6d463d24e5cb5e716b6b4537602ca1c491a5fc43bdd7dea617d5fbf495e0ce485403eb17eb9534f41efc75afa4a4621580040ca472ceaf3cad62d8727fa2742b9fbe356e71537dfd38f2c5a4baaf4b388252041e280289a8c3304c9e4915652e9011c9054bac"]}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x1, 0x3, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/139, 0x8b}], 0x1, 0x0, 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5, 0x5, 0x0, 0xffffffff, 0x0, 0x1}, 0x3ff) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44001}, 0x14) unshare(0x48020200) write$P9_RXATTRCREATE(r1, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) 09:20:20 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000086) 09:20:20 executing program 6: creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0xb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8a1bc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:20:20 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003b) 09:20:20 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006d) [ 1400.634294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:20:20 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006e) [ 1400.664289] FAULT_INJECTION: forcing a failure. [ 1400.664289] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.667268] CPU: 0 PID: 12832 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1400.667280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1400.667286] Call Trace: [ 1400.667312] dump_stack+0x107/0x167 [ 1400.667334] should_fail.cold+0x5/0xa [ 1400.667356] ? security_prepare_creds+0x112/0x190 [ 1400.667379] should_failslab+0x5/0x20 [ 1400.667404] __kmalloc+0x72/0x390 [ 1400.667430] security_prepare_creds+0x112/0x190 [ 1400.667455] prepare_creds+0x452/0x5e0 [ 1400.667476] selinux_setprocattr+0x354/0xa20 [ 1400.667497] ? selinux_shm_shmctl+0x180/0x180 [ 1400.667530] security_setprocattr+0xb7/0x120 [ 1400.667558] proc_pid_attr_write+0x340/0x7d0 [ 1400.667577] ? rw_verify_area+0x11d/0x350 [ 1400.667602] do_iter_write+0x4f0/0x700 [ 1400.667638] vfs_writev+0x1ae/0x620 [ 1400.667661] ? vfs_iter_write+0xa0/0xa0 [ 1400.667681] ? __fdget_pos+0xf1/0x190 09:20:20 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x1a0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x80, "5fabd34a60e47f"}) r9 = openat$incfs(r1, &(0x7f0000000300)='.log\x00', 0x400000, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a780)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x81, "f0179025db635f"}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201) r11 = creat(&(0x7f0000000040)='./file0\x00', 0x0) accept$inet6(r11, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r11, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010010000100f2ff17000000", @ANYRES32=r0, @ANYBLOB="01040000000000002e2f66696c653000"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0xb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8a1bc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1400.667701] ? lock_downgrade+0x6d0/0x6d0 09:20:20 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003c) [ 1400.667739] ? __fget_files+0x2f8/0x520 [ 1400.667780] do_writev+0x139/0x300 [ 1400.667801] ? vfs_writev+0x620/0x620 [ 1400.667826] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1400.667847] ? syscall_enter_from_user_mode+0x1d/0x50 09:20:20 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 96) [ 1400.667870] do_syscall_64+0x33/0x40 [ 1400.667890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1400.667903] RIP: 0033:0x7f7b39e69b19 [ 1400.667922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1400.667933] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1400.667955] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1400.667967] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1400.667979] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1400.667990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1400.668002] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1400.687231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:20:20 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000087) [ 1400.808919] FAULT_INJECTION: forcing a failure. [ 1400.808919] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.810511] CPU: 1 PID: 12853 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1400.811341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1400.812330] Call Trace: [ 1400.812649] dump_stack+0x107/0x167 [ 1400.813076] should_fail.cold+0x5/0xa [ 1400.813524] ? create_object.isra.0+0x3a/0xa20 [ 1400.814081] should_failslab+0x5/0x20 [ 1400.814545] kmem_cache_alloc+0x5b/0x310 [ 1400.815040] create_object.isra.0+0x3a/0xa20 [ 1400.815563] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1400.816167] __kmalloc+0x16e/0x390 [ 1400.816596] security_prepare_creds+0x112/0x190 [ 1400.817151] prepare_creds+0x452/0x5e0 [ 1400.817625] selinux_setprocattr+0x354/0xa20 [ 1400.818146] ? selinux_shm_shmctl+0x180/0x180 [ 1400.818689] security_setprocattr+0xb7/0x120 [ 1400.819216] proc_pid_attr_write+0x340/0x7d0 [ 1400.819738] ? rw_verify_area+0x11d/0x350 [ 1400.820230] do_iter_write+0x4f0/0x700 [ 1400.820703] vfs_writev+0x1ae/0x620 [ 1400.821129] ? vfs_iter_write+0xa0/0xa0 [ 1400.821609] ? __fdget_pos+0xf1/0x190 [ 1400.822053] ? lock_downgrade+0x6d0/0x6d0 [ 1400.822542] ? ksys_write+0x12d/0x260 [ 1400.822989] ? __fget_files+0x2f8/0x520 [ 1400.823468] do_writev+0x139/0x300 [ 1400.823892] ? vfs_writev+0x620/0x620 [ 1400.824348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1400.824970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1400.825588] do_syscall_64+0x33/0x40 [ 1400.826024] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1400.826619] RIP: 0033:0x7f7b39e69b19 [ 1400.827059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1400.829196] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1400.830091] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1400.830935] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1400.831772] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1400.832606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1400.833434] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:20:35 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000040)=""/33) r1 = semget(0x2, 0x1, 0x420) semop(r1, &(0x7f0000000040), 0x0) 09:20:35 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000006f) 09:20:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@loopback}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000200)={0xa, 0x4e22, 0xffff, @mcast2, 0xfffffffc}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="0f520db5664e7e14d2c2d568307180cd7500b3a63c4833d517f016eb4af9d63bcd6c42cd9b94af21bb32d8fb19ec8d22410a117f1b1474ad9807cc6f68e1fab25955966564a634ae983150939c52d99bc56d1e0d236f28a670c3def7aa5a00cdab4cc8f0ff71e073eefb7a8d91137356c87d89940426d65fc99ce0ebdc9baedce15de6dd76ab3416dd5e4a135fd7cee86d171e8ba5edd5126549ea7f8641c861135e8a6600719c4e866b78276bda09af4d868c5191c1d386c84e82ee31c7b0c4da12aba349d259a16bc7f2", 0xcb}, {&(0x7f0000000340)="8e42f4e454baf21dd763ec6180da3d3cca5b7cdd48b8e7883a5180fae188b741b3a1bae593d8a5bb3746a93963d71cb90c13e0e58dac1703c0cfa32ed041a2557b6b49251ad19e752299", 0x4a}, {&(0x7f00000003c0)="9af9c4920a31eb7467b79f803c367e396ec9688845b9bdd4a5866f333814fefdf087508eabedfc64523874e59e469e586310cb33d2e14fdb8bc592568e8cf35daaa820296e67", 0x46}], 0x3, &(0x7f0000000700)=[@dstopts_2292={{0xb0, 0x29, 0x4, {0x11, 0x12, '\x00', [@generic={0x8, 0x57, "0edb5b9d597f6537bcb3461c78bc0abd8dcb7357d06a4cd1acbb66149ca9a65cf34090f14dcf6e3694512c8a42f15cef78072b5808a029eddc8637368db77c366380b0f70dacd18141b7f99081a581a065cc985cbb314e"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0x6, [0x20, 0x400000000000000, 0x8]}}, @jumbo={0xc2, 0x4, 0x1ff}, @ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0x63}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x7b}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x62, 0x8, 0x2, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x26}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}, @rthdr={{0x28, 0x29, 0x39, {0x33, 0x2, 0x1, 0x5, 0x0, [@loopback]}}}, @hoplimit_2292={{0x14}}], 0x198}, 0x1) accept4$packet(r2, 0x0, &(0x7f0000000180), 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) 09:20:35 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000088) 09:20:35 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e07ced4d6483fd16af86bddb3f00cc0d4998d86fc1243aa08ab9c46635843b2f862fc9fa5daa708d494af1671aa8d578b67c5879634211c6db634055dab84d1f1335990ea2075a00922bcbe2261cd32390d3315b8aedc0c0a14a026df745c2e27197cc5cb369cdab99db85157628be51d7d3df13e68c4e1c5d3cf550411b0c66d7cf097fd42b1c13f3f1989b8f1491e3a47c37402465ad3411d9c817b1b8b3e85ee53baf05b2a4395005f6c850fd3d036e251c08234883d3ed188551fa3b6faccf6e3731f6c328614fe93e1fa43335f8e99ecfa45d46f25a1672a6f36e8f2eb5dffdb1319552d9b977b38a6ea634a973ae37463e54a5c414500c080ff809428893ab02673b98bb1f459e046ce86e665d77b787f66178680025568e7ecfa2f53ff44cec4cfef534fef39099fa854dda2eb7e26392fa2f7ea83eb1fc9cb3564bf4e6919999059241d12f66b528bff2ed049b4c80aa7b6fd014d049e5cbec4af20e4c2769d9c11a84568f6f243fdf36133fa61e767c3c1e03158b161d15ad6094cf4d371a8b981344a68ded8f7bbb2922f3b174df52151fe569c3ee317e257f96c7924d45231a7518dfe424bc3a75bb79f7713aba4a7dd2b742b99800a32bbd26b5253f925f45e87f92544fb9f470868c8a9616e8109dacc07b29a7d56f94d8d511dc1d7962a2f7558dc0b278d70239a1166d155b946b086cc2cb855299e459132d3a4994ca3e105fe481d4230639cfeff4fa812841c844a07645fd33b4e796260da119e1762b8c9c853d7409983b7643fafe1718592ea22bfe1cd3227fa5751944eaeea91251c77c87eeeed4ce3095386d5796ea8d48414aa9c03d55f023b6fadd817899e53e68868fab9e2524dca8583b9714873afdfbbb1f1053c559b41a55a96f7008d416bcab4c508c7d27be82e94b4ba5a08dcda9ea1019de335a23f84836394a7371596f2087858fc0579af893379ac3a8d010eb35ca19f682b380489dfb9f4d976da44b8e511e3ebd76dbda1f0e89044378db9404ccdf499ffb0f8ced54599f96cc3ba9c0c46cb233548426cc899e135dadd8503b775788ca2a9fc611fffba8c451571f41bcc8c24da387216c71424651b812b1e44cfd17261d31a97caf5331b31f14e0b5f05f740cd7e81d8f0f9c70be3ebd1dd6b307e47768175a3c13e8bf48bdac086b93a1a731c8b45ef8c78c211cfdc815dbcc83f6feccd7731ddc0859fe262603608047c49a3e5e8a147285196efb5d9678abd62a1cf4c7c1e85c788351762032faaebfba4e5aa78e390d8bd31302f39564d9fe4d19208e0a77cfecd53eb6100f8b1986cef6f35d010cd382b9e4fee1398400c16b5baca28cf6ef5f049d69eaa541c5293e2661e99388440a05b9c38bb75109672b545ae760995c35a38feb9c203a82ba5ec55b242270aed928e1bbec210384a29e3068d42aee5ed6d3367812f1202f9c13c34fe619bd933ab5e342341e51fb44d9756960bdd681b0e4a597a08244488cb70ba6a3ce2402c63b4250cbd56bef9824e391b0cd3f6b1d15e36136129b976570cb89a1c870a9394443b3b618cb372904312611d77c230110eb4b0e17fa6da0b6fd289cb768085d20abc67ad679b68d7b8981c47487c58c768f8a77fa2bb62fdfc2587b0bcce66390dc80284c211781d229e3dfc0c313fc24e564ca701d43c8d31b59b5b667df56d76277075ab94b46dcbf1aba47ee9e4c1caf236767b93faef69038550ac89df3e63f9b65a5b45218fe97ea7c4f4ce7b412d9d0802703a185d45312ddc0bbd4f1e6215d8586405450edb8e9536c68b9e95caa4b1b1ca8991462f5cb51775289227fa3476358bb3a262ec7439884054cd0c213978dc26f6039f25041438fbc6f96045d813ba55f23922ca20b2391227da26d078dfa9ca9c8a1db8967b88d46cd7e7ab3bbb17189f3103fab5b4fc3b87c41fda5aac307c593f976b7c8478e58ce7962d90dfcf264f774d6d43ed20966c", 0xa28, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r3 = getpgrp(0x0) r4 = syz_open_dev$mouse(&(0x7f0000000240), 0x9, 0x200000) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="3ea9eaf700000000000000000000000000000000000000000000000000000000c70000000800d1c60c37d693a02023114035ac7aa54cb6b5a7b93564e8ade8b37fed0deb99b8fbadc4a0fab755df85f8a1fc125f420ae7f5a6b12f80038a1a877aa49f10c1db8992db2489d891ad36fbd533ee511c3463b0e58436b8aac2c8fdb9b6e41f70be9aa888eb16b12af9091b1bfe1b72085261d36007a9832b45fac584fda52bcc18218a2f9c01a51104ecb43d2afa4f34c37b3a2ed75a69541b0a187a17fc59c60e09e76d50ca11b684216467caf84f0b6ae11a6ff570e3f38b61256599b619e72fe12fc5cfde"], &(0x7f00000003c0)=0xeb) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xe5, 0x5, 0xef, 0x0, 0x5, 0x420, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x2144, 0x6, 0x0, 0x0, 0x7, 0x0, 0x800, 0x0, 0x4, 0x0, 0x81}, r3, 0x4, r2, 0xa) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r7 = fcntl$dupfd(r6, 0x0, r5) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, 0x12, 0xc21, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x2f, 0x0, 0x0, @ipv6=@ipv4}]}, 0x34}}, 0x0) 09:20:35 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 97) 09:20:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:20:35 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003d) [ 1415.157797] FAULT_INJECTION: forcing a failure. [ 1415.157797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.159557] CPU: 1 PID: 12875 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1415.160540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1415.161732] Call Trace: [ 1415.162120] dump_stack+0x107/0x167 [ 1415.162655] should_fail.cold+0x5/0xa [ 1415.163207] _copy_from_user+0x2e/0x1b0 [ 1415.163776] memdup_user+0x65/0xd0 [ 1415.164289] proc_pid_attr_write+0x247/0x7d0 [ 1415.164919] ? rw_verify_area+0x11d/0x350 [ 1415.165518] do_iter_write+0x4f0/0x700 [ 1415.166095] vfs_writev+0x1ae/0x620 [ 1415.166612] ? vfs_iter_write+0xa0/0xa0 [ 1415.167178] ? __fdget_pos+0xf1/0x190 [ 1415.167719] ? lock_downgrade+0x6d0/0x6d0 [ 1415.168314] ? ksys_write+0x12d/0x260 [ 1415.168865] ? __fget_files+0x2f8/0x520 [ 1415.169441] do_writev+0x139/0x300 [ 1415.169953] ? vfs_writev+0x620/0x620 [ 1415.170500] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1415.171249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1415.171993] do_syscall_64+0x33/0x40 [ 1415.172532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1415.173270] RIP: 0033:0x7f7b39e69b19 [ 1415.173797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1415.176392] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1415.177477] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1415.178454] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1415.179475] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.180485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1415.181496] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 [ 1415.185215] loop4: detected capacity change from 0 to 41948160 [ 1415.203288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.222260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:20:35 executing program 2: ftruncate(0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680), 0xc, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000001c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x9, 0x4, 0x3, 0x3, 0x0, 0x5, 0x201, 0x40, 0x9e, 0x3ff, 0xc9, 0x38, 0x7, 0x5, 0x5, 0x1ff}, [{0x0, 0x1ff, 0x0, 0xc000000000, 0x2, 0x9, 0x81, 0x3f}], "55a70d7b5547341d935ec2c4c27f344f8d4d7b7adbf895f4445a40037092f2aa6be0ff3fdff002f7f9148d526dffb64b7d3f55597b928356a060b771b07497b01f64f1ba5a229353009ade75e57fbe6145948a8a3395422a64564d0b836d115aebe4cc705b8d90ba9624409c328d5bbcfe5a439a7774c71034e2bb7426cf80cbfb525b834a21a6706742b2b6074e988837f63e92144ed09401ea60e2ce90fc00454554caad5c35b8df5e6f32b8dd0f8cde2c5889323dec5de9698c83a595405a14051e536054e9d1a25991fc118c322ff62f458a2f8cc2e4f8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x751) umount2(0x0, 0x8) read(0xffffffffffffffff, &(0x7f0000000040)=""/24, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@initdev, @in=@empty}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', &(0x7f00000007c0), 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 09:20:35 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000089) 09:20:35 executing program 6: capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) r1 = pidfd_open(r0, 0x0) r2 = dup(r1) setns(r2, 0x4000000) 09:20:35 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000003e) [ 1415.271212] netlink: 'syz-executor.4': attribute type 47 has an invalid length. [ 1415.290936] capability: warning: `syz-executor.6' uses 32-bit capabilities (legacy support in use) 09:20:35 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000070) 09:20:35 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="041f003dcfae8b51630000008d566350a3223002b2ee6df0ff0000050200010758"], 0x108) setsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8050) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x5, 0x6e, 0x72, 0x7f, 0x0, 0x9b46, 0x40080, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x3b3}, 0xe0, 0x6, 0xfffffff9, 0x0, 0x5, 0xb045, 0x3, 0x0, 0x7, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r6, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) io_uring_enter(r0, 0x800012d, 0x4, 0x0, 0x0, 0x0) 09:20:35 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 98) 09:20:35 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000008a) [ 1415.435140] FAULT_INJECTION: forcing a failure. [ 1415.435140] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.436684] CPU: 1 PID: 12909 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1415.437587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1415.438662] Call Trace: [ 1415.438991] dump_stack+0x107/0x167 [ 1415.439434] should_fail.cold+0x5/0xa [ 1415.439897] ? prepare_creds+0x25/0x5e0 [ 1415.440384] should_failslab+0x5/0x20 [ 1415.440842] kmem_cache_alloc+0x5b/0x310 [ 1415.441334] prepare_creds+0x25/0x5e0 [ 1415.441812] selinux_setprocattr+0x354/0xa20 [ 1415.442363] ? selinux_shm_shmctl+0x180/0x180 [ 1415.442915] security_setprocattr+0xb7/0x120 [ 1415.443451] proc_pid_attr_write+0x340/0x7d0 [ 1415.444020] ? rw_verify_area+0x11d/0x350 [ 1415.444527] do_iter_write+0x4f0/0x700 [ 1415.445009] vfs_writev+0x1ae/0x620 [ 1415.445450] ? vfs_iter_write+0xa0/0xa0 [ 1415.445936] ? __fdget_pos+0xf1/0x190 [ 1415.446426] ? lock_downgrade+0x6d0/0x6d0 [ 1415.446933] ? ksys_write+0x12d/0x260 [ 1415.447396] ? __fget_files+0x2f8/0x520 [ 1415.447889] do_writev+0x139/0x300 [ 1415.448322] ? vfs_writev+0x620/0x620 [ 1415.448787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1415.449419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1415.450052] do_syscall_64+0x33/0x40 [ 1415.450507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1415.451165] RIP: 0033:0x7f7b39e69b19 [ 1415.451616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1415.453821] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1415.454777] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1415.455636] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1415.456488] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.457384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1415.458247] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:20:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000003b67bb4d41b4869efb7b81a71eed78b3000000010000000100000000400000004000002000", 0x3a, 0x400}], 0x8040, &(0x7f0000000040)={[{@auto_da_alloc_val}]}) 09:20:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1429.610975] loop6: detected capacity change from 0 to 2048 09:20:49 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000041) 09:20:49 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000071) 09:20:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc0800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x9}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) sync() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200), 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x1}, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x800) recvfrom$inet6(r1, &(0x7f00000000c0)=""/180, 0xb4, 0x10000, &(0x7f0000000040)={0xa, 0x4e24, 0x81, @loopback, 0x2}, 0x1c) 09:20:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x13bc, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfe, {0x11}, [@nested={0x7a, 0x2a, 0x0, 0x1, [@generic="bf26899e70b1b2ce3998de0963ca80a0277777f9da5ec7438c231998c2595184a35f1fcd8bfde4db6f7a107bace8d5904a88a9", @generic="865e377261a49e3e46e2bdb30a918c9fc3859e20550a2030afff44e55e797710523eb7afdee6ca88072f8d54fc99130a1807aeee83ffe7", @typed={0xc, 0x88, 0x0, 0x0, @u64=0xfe8}]}, @nested={0x1244, 0x43, 0x0, 0x1, [@typed={0x67, 0x55, 0x0, 0x0, @binary="cc5ae5c7cbae3cdc8c85dd4154bad985b670fab0ff9959956d39e2c6e1600ab18be9e6d481b506e3a19405bcddd11d99dc3bc98bbd9e5b27867da0dda4e109f72fede03a9836c596cc4da92095c96c7e03b1144cb46a216a3091602fe96d64cdb3d633"}, @typed={0x5, 0x22, 0x0, 0x0, @str='\x00'}, @generic="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", @generic="17d3ec60e7c3a5a876dc73f062bd1003e97146381a4d1839", @typed={0x8, 0xf, 0x0, 0x0, @fd=r0}, @generic="af552fdc61032d0cd95c6999f29ef891a60e69f63f69b46c679bba78fbd8a3a1d11a71cb9218380e60573fc9c77f10c9dd02e6c2c2e9ce3b01b49d868ffa8353909ab1e2627f7b5524207d4730345b130852df439404c3ca465ec84e8274eb572a5e665830fde6f3c29c16877fe6b22fa4b5480c783ed489e587f53220b3080993ed59049768d108626e621c9501d1fe717bc44f7676db44ebd9973dc7a1544bfa66abef618902d3a0353443cf746479ab0555c6d77f78523de8b4b6faff541626988bacf101bcfb64cab12c92148180", @typed={0x3d, 0x12, 0x0, 0x0, @binary="efde924a737229a1e8818701522390dcede11b0a00734b0c9543868e0ae95787f4695d77144df1f30f76f339b32ab478dc7b5f46a26e5fa15a"}, @generic="c76d9a0c478237b48fd5698906e347e58c999014873809f587d352c941c4258b5a9260080dbb8789aa66a7fb4d909c5cae0a84302b945b76a486948d377b89f4ea180b30913fcdb0361849d66309f5fef08b874f869b029e489801f714d19bf4a6cf93017d031e6e61562b430cba882e6af48943c4bdfc14b2a208a353b840263bfad10e16c380e1cc34716e3c204572", @typed={0x8, 0x61, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x57, 0x0, 0x0, @fd=r1}]}, @generic="a3907a577a83ce6d31076dc340e610fa1803e0b60d7771cd712b45e92f0764460392b9d7074ff9196537f97aa092e9b6e471c02716b794f09eff68df566e680b563bd658b87003da7482a7c994310fc8e1d4048e76609057d259ea7eb357c61f19c6a8ed3d7567ca0b8b35106c88789ac7058abcc40f79df72a49401e86c240c2ceb720fc34d4f7e5460c5a455df80c437d8a7b4a16793e523e689119cd69fa9c3ef9fccb63dffc46efac92f2921a00cce3161d110586b1064bb26e05ddf80eae1314a246644c1570ebe6578dcd45f6fdf76321d5ec7733687566f56e51769a2c375d0f83bb5"]}, 0x13bc}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000002) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0)=0xa2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)={0x3, 'wlan0\x00', {0x6}, 0xd}) 09:20:49 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 99) 09:20:49 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000008b) [ 1429.636262] loop6: detected capacity change from 0 to 2048 [ 1429.650399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.668930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.714323] FAULT_INJECTION: forcing a failure. [ 1429.714323] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.717209] CPU: 0 PID: 12939 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1429.718788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1429.720677] Call Trace: [ 1429.721278] dump_stack+0x107/0x167 [ 1429.722122] should_fail.cold+0x5/0xa [ 1429.722983] ? create_object.isra.0+0x3a/0xa20 [ 1429.724021] should_failslab+0x5/0x20 [ 1429.724889] kmem_cache_alloc+0x5b/0x310 [ 1429.725822] create_object.isra.0+0x3a/0xa20 [ 1429.726825] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1429.727978] kmem_cache_alloc+0x159/0x310 [ 1429.728924] prepare_creds+0x25/0x5e0 [ 1429.729784] selinux_setprocattr+0x354/0xa20 [ 1429.730791] ? selinux_shm_shmctl+0x180/0x180 [ 1429.731824] security_setprocattr+0xb7/0x120 [ 1429.732827] proc_pid_attr_write+0x340/0x7d0 [ 1429.733825] ? rw_verify_area+0x11d/0x350 [ 1429.734780] do_iter_write+0x4f0/0x700 [ 1429.735678] vfs_writev+0x1ae/0x620 [ 1429.736505] ? vfs_iter_write+0xa0/0xa0 [ 1429.737406] ? __fdget_pos+0xf1/0x190 [ 1429.738272] ? lock_downgrade+0x6d0/0x6d0 [ 1429.739215] ? ksys_write+0x12d/0x260 [ 1429.740081] ? __fget_files+0x2f8/0x520 [ 1429.741002] do_writev+0x139/0x300 [ 1429.741804] ? vfs_writev+0x620/0x620 [ 1429.742681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1429.743865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1429.745034] do_syscall_64+0x33/0x40 [ 1429.745884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1429.747039] RIP: 0033:0x7f7b39e69b19 [ 1429.747875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1429.752045] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1429.753768] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1429.755384] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1429.756993] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1429.758612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1429.760217] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:20:49 executing program 6: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2000000000d, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000940)={{r0}, "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"}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}]}}) 09:20:49 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000008c) 09:20:49 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000072) 09:20:49 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000042) 09:20:49 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/anycast6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) 09:20:49 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x30, 0x2}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x23456}, 0x80000001) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x40448c0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) syz_io_uring_submit(r11, r9, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r9, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) ftruncate(r0, 0xfffffffffffffffb) io_uring_enter(r1, 0x800012d, 0x4, 0x0, 0x0, 0x0) 09:21:04 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000008d) 09:21:04 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000073) 09:21:04 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000043) 09:21:04 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:21:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') creat(&(0x7f0000000480)='./file0/file0\x00', 0x0) unlink(&(0x7f00000007c0)='./file0/file1\x00') 09:21:04 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) (fail_nth: 100) 09:21:04 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=r0, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800db00", @ANYRES32, @ANYBLOB], 0x30}}, 0x0) 09:21:04 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x224, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5b, 0xa8, @random="9dd271be379ded80eab9f6bfe76860cb9736454c8d744ee0f2f329578e8d4be4dd87e23c7f043c3bab49511d338e9b277c1f30977637892c5a1bb50f899e07fdaca0d77900bdc220c30e5f21172f41d8acfe4111babccd"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x61, 0xa8, @random="8617e5de04b4512dd62da95059fc2d8bd5e3e6a3488bd22a65d46ad6e46ac45259e25e57b4586f6bab3410b403a578d2f7a93cd975e9f225aa9fd84c609b1d62fe5f028f44436c074985a277e4fc0feaad97d274657b88fa240f033712"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x97, 0xa8, @random="49fcbffcf2b15e3f9b072588dc45e5b53666941ba331d8d606d1b28b43a53deeb7d6836ca2968c8a455a1db9f87c11ba71994e69abd68698d281b66c899785cf03e0c1c2426df3be9956ccf7eec6db3f99d237b010027546fc02922089f3bc30e5f66f1355c2733a8e40e224ba7bbc42b894427fa6beb141fc63dbf5d3933742962f6f9832e8607af932070be0cc2a643ff98c"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x74, 0xa8, @random="c4fb84f3902bd4aee50db8e07a9e2b9c5afd7ac41f57593a2aa017107fda2e76a53ce8b33b53e3cc765b26a4e0def714cf39f442cb47b8eaea02eb7dfe6b6d55f26352c8f0169bbac009d9957174e32e731884f20f8eed8c7e09891bcf5f2b70c3f28645a7712b0987662686b7604de7"}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000940}, 0x30000800) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) [ 1444.286250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.303796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.324251] FAULT_INJECTION: forcing a failure. [ 1444.324251] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.327106] CPU: 0 PID: 12996 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1444.328689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.330586] Call Trace: [ 1444.331192] dump_stack+0x107/0x167 [ 1444.332026] should_fail.cold+0x5/0xa [ 1444.332895] ? security_prepare_creds+0x112/0x190 [ 1444.334006] should_failslab+0x5/0x20 [ 1444.334877] __kmalloc+0x72/0x390 [ 1444.335675] security_prepare_creds+0x112/0x190 [ 1444.336740] prepare_creds+0x452/0x5e0 [ 1444.337628] selinux_setprocattr+0x354/0xa20 [ 1444.338638] ? selinux_shm_shmctl+0x180/0x180 [ 1444.339670] security_setprocattr+0xb7/0x120 [ 1444.340678] proc_pid_attr_write+0x340/0x7d0 [ 1444.341677] ? rw_verify_area+0x11d/0x350 [ 1444.342638] do_iter_write+0x4f0/0x700 [ 1444.343543] vfs_writev+0x1ae/0x620 [ 1444.344374] ? vfs_iter_write+0xa0/0xa0 [ 1444.345281] ? __fdget_pos+0xf1/0x190 [ 1444.346163] ? lock_downgrade+0x6d0/0x6d0 [ 1444.347114] ? ksys_write+0x12d/0x260 [ 1444.347986] ? __fget_files+0x2f8/0x520 [ 1444.348911] do_writev+0x139/0x300 [ 1444.349720] ? vfs_writev+0x620/0x620 [ 1444.350598] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1444.351788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.352958] do_syscall_64+0x33/0x40 [ 1444.353810] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1444.354983] RIP: 0033:0x7f7b39e69b19 [ 1444.355827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.359994] RSP: 002b:00007f7b373df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1444.361724] RAX: ffffffffffffffda RBX: 00007f7b39f7cf60 RCX: 00007f7b39e69b19 [ 1444.363350] RDX: 100000000000037f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1444.364964] RBP: 00007f7b373df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.366596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1444.368214] R13: 00007ffece67aa5f R14: 00007f7b373df300 R15: 0000000000022000 09:21:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) tee(0xffffffffffffffff, r0, 0x1, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB]) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @empty}, &(0x7f0000000200)=0xc) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000038c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x541b, 0x0) close_range(r3, r4, 0x2) fallocate(r2, 0x0, 0x0, 0x1000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x109082, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) r7 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) 09:21:04 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xa6d7c000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x20, 0x2, 0x40, 0x0, 0x0, 0x0, 0x40021, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x44042, 0x2, 0x9, 0x0, 0x0, 0x7, 0x1, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0xb, r1, 0x2) r2 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000a5f000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000100)) lseek(0xffffffffffffffff, 0x0, 0x0) 09:21:04 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000044) 09:21:04 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000008e) 09:21:04 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000074) 09:21:04 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(r1, 0x0, 0x1) r2 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) quotactl(0x9ad6, &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0)="3fc7453a8371731b063e2b3a6a2d7ebd08d4f496f1a4fc2ac650dab72e6e558b819c5afbdb665a1507a35b9058a1aab837cd3d05f9a6f4587047facc71d9568dbf64bd3c13c4531d27a4a7634cfc87fa63831f6648") r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x12, 0x0, r3) dup2(r0, r2) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r1, 0x8000000) mkdir(&(0x7f0000000000)='./file1\x00', 0x10) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4000, @fd, 0x0, 0x0, 0x0, 0x19, 0x0, {0x2}}, 0x8) 09:21:04 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) 09:21:04 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000008f) 09:21:04 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000045) 09:21:04 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:21:04 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000075) 09:21:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x13, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001280)=ANY=[@ANYBLOB="21000e6401000000180000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file']) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000012c0)={0x4, 0x40000000, 0x2, 0x6}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r3, @ANYBLOB="04082bbd7000fbdbdf256f0000000a00060008021100000100000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000041) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r5, 0x0) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000000)) write(r4, &(0x7f0000000100)="a44cd6eea2349dbffbedf6cb364110385e4d65bd1dd55a83b0b202eb287bad9d97b6eeee0e3068034036a43e5f9cbd6c42c768d554dd61cf0654cca455c9a793c8bb7d7ff0159d5d2b272333bd12f7fb04d56d553864b043377a4fdbe2c8729c5cbdb5f3e0aaadc1349e018d236fb7a10417b63701b371f68cb4da18c5fea4df0d37cfddfa53c154bfa15bbf4f5af757ce052cb647d13c8c68753bfe25c5877c9a33052f7b4ca99881944ffa6877dbb7932c20b69f13330ad4a1e72ba91388af059df922a06d17c576f9eadc55496f1801f68b0c9c1aefb21b550b15bf0db968701acde990873bfbe1c72e3ae009f59f4c8afa2c70634f4fbd05ef319154642f0a89aaed59aa6fa897cd92c7b31b482974eb45dd2567d62e5783e79c3be6452325c88aaee88343e4a7e86633f9134d1db5f75b9b5b485658a9b567e090cf23530425a85de93bbf7f72332fe9b45125b65cfa742869c8e0f4feec17fca73a93e464544325b4af7f0f9f140016e9b6d62a443b2e2889c941935cf210e342c1dee37baa367dcd33b9a5982b3f50696850addfe2bac70c1f18e634bb03d0f4297b4f48041d3cf9fd347a055be3e4145611481685d4bc174919cd37bf089435bc7b96d29c9939dc5de2138b42332ae5d0a38faad1f85d8482ec6c4cb6d5b32ef590c0070bb16d9dc4f1b877e3357c02b57c1b94a0b6321723dd16a2878a44621e7764700fb4f88ee4a339b106c1f7116ac62f08de2de29e219c4ba7b9204a8663003a5aaad3cb80d165b6782598dacdf285b0647048ebf0dfc8d44940fa4f1c1261776cf91cc18785bd891b616d1071a401d0dc9444c67bedd77252dacee8b5d246c90232e9165c0788dbe1f4b74e3eb773f231ca1160fa0e3230c2a200299297536de0332a3d59f1cd82ca0030707fff2d20aae4808a5b2e03c0f964d0951910fb18695d62aadda97d440d58eec1e3eb248024b65a56a0aa416bf45537c6ac87f36e06cb78b566c40a4e6b394c2c03ec5e7fad89d49bec4e546ec8655af92989b0b0c779aef2b045d7ac0ea776250e254d5fc633c2f93ed9515a2eb2e25a428931164e9acf317ec1bc5faaf181f3bc3dd60a9190c6530cc1ee77da98316b0a9a1acbcc0100ce4fb5e7134492967693f57c0131e5b670e57084810b833b57e7875af5cb3159d9732cdaa99c787ada5811b1ae0166268c24d6d47a8f0a92ff64d6d40c5987829e70eb956f40e5a28204fefbbbb447100f7d3336df5fc991f33584da98bbbc79fae33ef2da1829d5f93cdfb508653bce8685af4a763732e0c03fa2523146534269c51bae75f3294e84e73ec65713dd85cb73bd9d7b30255495fc77d089d467db0e0520b9e07ff56c207c83b137aa34f3017ea85766407c1c8eede2d0d92ae407a2cea5f3ec9a07b5c361793790938241ba12c82b0b6712786a4e89759563e36fbbf6725357b51297f7b054d2489b2356e77b988ef31eb386b6af37d4a9a72acaa2b1efd579ba0ec2163bad29c49dc55f85513b2233ca1a46c46b23b6830ce3525435d729fb6540003d0d64a2ef95816371fc51427c3026bddcf9cf7622bdb55fb471c70f85805101a4692b05dceb876920bf0d373d28602f28e504385566881290e0e3e9ae05f7a35fe6ba343f0803a76ad9ac133c1a1278f20b9d57210281fc550b423965d7a442526541722fc58b19bd569d8d0150c11204572e07c88afcf4e2d3fb997f70e773924d6f6a0154e6c8d61d38507c837f1fffb8cff1926ad5714df24b2a226771ec9c8e1a037abeaa6e62d0d166ed506b9dcfd45c91a0edf52d1e63900d396355d35c567309994cbe390f6538dd48adedd8437ea4c3d81314d8bdab86e6fa2c6bdf8aa30eb781327bc5b6f1055e9edf1407eba0eb5ef13e4bb810ca28e731db403f54eab8837cb6cfdc902e873157ae479b43c73e7af18a65b3e132b8b0ed6db11a791ad0da07b383096b765f3fea1eb2bc0b3e84f7d2deec56b9d6a6207ccfbfd6c31e61056a3b1df8f8016564f532404f8be641afff7062dc1b96b355afb495edd104bd4c5888280e212ce0bdc86f6aa3a629394dccb748298aa9ec0dcee7f244170252e9bc109a0c711509dbf94801dba816280825bdcde1ac140f1368a558795bde6dd756ce395cf7fd3dc2615448322c3fe04c4acd0014347d7f4759169ff0840d9ab4a57e73c1a0dc000b3d5eb8ebd0d326fdde0128cc3f2f1f185d3e1a0d55c72fdc6e0d0715576503ed267649f9cd6d73e8e265391d935ce4f1f8a595d86865d77bf1738005cbd9f6344f4354aa8ede5f4ee660268ad30381dee76a453e4b9799871614e04c2f79c0abcea0f468c9b1ee7981317d26ba5a4bd9f9f8e1c8f8b9684994983d71a7f5f9daea96158341e7d4e4124d8e712ed02a60ca36327d5cef88304581d4d4d86cd93086d67171e6a17adf090ee7dd7fe83b663e1a710f0dd22f1638532168e897e029362e161b291b3aa84f44232bec55feb7e0f0ec60c1624b6711286537ba58274c2e7a1e4a85f9358edad7ca8f673936a29a06969a976db21012d5e7be6ad20b81971b29a347b215633ea27255949c76807c25d14a393f3e2751c5c9fee977809b9cdd5d19c524b8c246437f5508a38f25549763e587e870eea68dd49cee65c2d142644264adc5f67869e6a09f695be63097a517b10002e8f99aa49936f00be0ca8bd44289bdf05a729a2aed9df8b55fbbd839807e0cd86970acfdf73417c0b8eab80e00cd69e4175a88df504d3bd0dd2ab62bd56a6dfa6a519be2291f9fb502820e11d175449b6a7abbab34b506911cc69d37f0eb8cb67b82938d185353de272584f0d67c4d92c901f425aada3f8fb85cf9f504da398b21a5e46c3d1c2d51baf4ea2140784703124ad8740480cd6eaed701c367ef4e42458e1702e6ecbb48f6ff1105aa3dc3d1bb7ec75afe716757dfd9688a5f40a5999bd173d9aee46a9d776fc97d007a61614863e51ea67613f98ae841f456b9f733fc0e90809f76524565f17a9cc98f246834bbbba6a1091a6eac1ce8e154c77147799cf7dca7417b6967238e4f90e78527ffc6fac271d96610243e09a5e29850edccc980a2404503fba3863221334deb7fc04bd6e51b8a90fcb2b18f4de76832406009cd08e51b2632042c6e0bd56448cd4851b1c16dfd222193eaec53501d0dde22808e9cf8642fc73deb6691a0ba9d7b30fdb410b4d3ae9fb8211e65b9cf36b6db5d99329651cf3869a2f20e7845c10e7034f272de6bec58b2842a1c9e9c67d03457ccac48ddeca69e34ae73344e90c9224f9dfedf65d4f7ae35198214b70ff2e7f4d2e9c3e708488015087fa5895be042eb1697059a396955575fb5dec2dcacc95a8b4b5660ce3b45b8635f3fdcb22dc1d6e65b0f07b088e700f7103761fdd6794790a2650cdb26ef443711859b7986abb83e6a313cddf1eae348609ac927c34f518bc4c15a50e6acc01b66bea8bc08af130c00f748e89221f71e9506bb355c6d67d8ab810af053cdf515d2b1942e29b9c9ef6ea74e770c629bd185bcd66630c6e3f54bf85e0903ec1fbe2fdd0e0d6851bdab7c39f0198f821625e610ad9206ecdcfbab44cc936789702f1e3222b34e10633dea80d222ac6320cec879e6402b5f0c161c917d21efdac096fb92e338d14aef0301624e6f096c3c6c9f5ec1050c4bb5ddb5523344fc1d3325f0ff6149d8f4dc197cc30276c1a4790a0c59df147d85265854b332ecf45d3f78a02d25c5eef7a1ce90cb24cf7c12467bcb4f8e1ef8bbd9d9cc47ca4fa788f905a14efb32b95541a18f14cc63bb0058ce97512a3514581f92ec4e9cda5461b36049dafc2b70263570313ad454dbceedb5721fb6dbb9163f93ac77498d4e839b94e7252b246a17290e79b49c799d6fb6d76a9a23dca8c5b0a597b023b8de30f1eb616d41fe66f7c1a667245e6e2d41f5c5a1c72dfbd931d260ebc13cecbd15b5375934fb2c5352c2c21736d5c8461919be168765631357dd6b2305a60426d9d12ba32dc1b3897c11ce8419b39fb4d9c714e618a0c25b52d98bfb659216acf4d3ce0c5afb3d350affc6918801d3fd1d3b98debf361725368e0eb0ce933be063978883521aed85b2779836c0a08a9e78875c173d95f5f946c34d176eb8cb6eb0c1b9b019e057414858d8b9321bc2fedca17c19595dee19ae282a65761d14e4d008d77320ad0b78006fb6978788062facc1683f0bb7a9f4cab280c692090f9994324df44ed2e39d90fc9aa2b427d2754e7aaccb4923029db1a7cc738690c269e1a7c75c0613aa8761031bd7d38d15a2c17851862b94044db8828568c275441aee5c5b84498435abed3ed25734aacf0db4344b3e1469589aba2a6d44222628963b2fec70aab58e1cdc464c13717cb367c2aa57e87a94f2796c725cc6e222b78bd497f6f1f525081419fe55c5eb7f2199c21abadeb9ed02291205aa0a5d1c685c6e4d5acb017384278974788e82f0409f003260016992454d91c9942ab4e18f655f0e83effb75673fe849c4af66ddc238aa1c6018721feda2f7250e2aec7718df3102927c7aa336e2f6c8a4ee68eddeb95ddb143153352a909e58c369c9737c646f25619664d0a6a09599424ceb628622e010fd9d836ccb9f766ac9e16d04cf5a6f531cfac77bdc57de5337e040e94bc2c1b03e19873b2802a6f3ef6974ade2765522c12c8256052a8228b4c03c16511308a3ce7b3a243e4ceb80eb49a1c2f952a9491b716a39d46fc4c9a421e09bc4974c12998693865e53cd82defc36295be358ae0cc52978fbe93a13d981245050f8809939be1ff1ff39e679ea1702d73c374efa73eedae64054ebd41ce0e0266281762c63e1306486db05f5977e35871719712cd58dc21c1bc25e5f4daede5396682c74f59b8fbed1ba1873442a417c89b60b7929ba14af54f7a2bdb6962bc074361bcae152b292c86d7104787381a4cd4251e55f664b40badd08378e83095412f5eccc3c9e2c59caec64e2b0b004b6d037e49ac1177ddaae13f84e23fcfd3003abfceb6d7657b5958b7f08b8adfd55cd1cca98235fc792b428715c8a77f27bdd8e37be61cde42b4bcfdc02ef47ca4cafe54555981c4e1ec2ce4985239f71733747cd551564946cd78517903c2bb1a204a53e146f9f993e0dbf57e85ab18a4bcc1c5caa34385a2ec6b36bc07b9bf6686b3e54dc1d8243549cec78b8d11ec1d1e5f16b993987583281fb7f58183e0708bc9db0629d0e97bf806322510808fbe9eed9c4c8145022b4958834bb252fd095df6a002365eac198d2eab86e3930a963154cd0c658e3a716d867fd4cc814b2941ce2837596e2c537ba51e1e993fa64c243ce74b1e7c8f8918e4ca69d61426498b972036fbc38149399b3362992178dc6ee7b5444b234366b7da53806791073160f35ae8f68e8198e988b5324f6209adb0e2bf8deca7694f223528034c654eb6edf4db49855c59e8acce0681f4edaa9506e90f642f31b8919bd3838126791a440cea79bea4fdce071c4b5d84e717c14fd64c5557d2ef6dbc240b4b24652cf5f6cc2213e1ed7b78f5f5948dc2081b8b1477b73e2235858a781a1876d630172e0bb248e3a870ba3c12ca246c4247af8dacba009b04ae93194f5124ee6004e3f3256cd4787d18e3ec91d9dd09b0e3c4980218d600339e285dcc0d2b963a2853b08e59b644743b433cae86bc43c192da83a1515930fe657c7464c12bf467868c9827bdcb4fb4a3faae41354edabf34b3f96fb01e6e6f90a4cf7e54eb2267b53d493177dfaf57dff", 0xff8) 09:21:04 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000076) [ 1444.835012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.848916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:21:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:21:18 executing program 6: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r0, 0x0, 0x0) semget$private(0x0, 0x2, 0x104) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x1, 0x9c9, 0x1800}, {0x3, 0xf9a1, 0x800}, {0x3, 0x1ff, 0x800}, {0x1, 0x9, 0x800}, {0x4, 0xe21c}, {0x4, 0x0, 0x800}, {0x1, 0x9}], 0x7, &(0x7f0000000180)={r1, r2+60000000}) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r3, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) 09:21:18 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000090) 09:21:18 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000046) 09:21:18 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000077) 09:21:18 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="7f", 0x1}], 0x100000000000037f) 09:21:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x200049c4) syz_genetlink_get_family_id$ipvs(0x0, r0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000000)={0x1, 0x8, 0x401}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="018200000000000000000000000000000000f6f62f369fa061a7b0c3cc634fb90c482339edd6660ae4263260b1361512fdec7310cbfd2c998088e09ac97ee483d364f96e957259223682bbbd9a960c8ac6ac8be625804654d4f2de10e9d099efa01a1efe9dc607c1000000000000000000", @ANYRES32=r3, @ANYBLOB="be29c763ae824317a12d46abadd1702944b0e4779f4f99a27eb7d97c937a933df545e222694e7abb11a14a7b22fcfb68270657d85ec9bd47870f6547a5c8dfdebfa63629345c7580580d244c4928fbf8327e74021f382c08cfdbd23525ced1a123861df8d998d39ae2a7e7ca7c78c356c9df4d21cfafd7802729"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) unshare(0x48020200) 09:21:18 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0xecb02, 0x0) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r1, 0x30ab6000) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x40448c0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r7, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r1, &(0x7f0000000040)={0x8}, r7, 0x1, 0x0, 0x1}, 0x6) [ 1458.641744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.661725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:21:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x501000, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x40, 0x3f, 0xe1, 0x7f, 0x0, 0x81, 0x0, 0x10, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4}, 0x93eaa28efd14134, 0x4, 0x3, 0x2, 0x6, 0xfff, 0x6, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x6, r0, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x94, 0x1, 0xd9, 0x4, 0x0, 0x0, 0x10106, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x2000, 0x5, 0x6e08, 0x9, 0x8, 0x200, 0x7ff, 0x0, 0x6}, r4, 0x8, r3, 0xd) 09:21:18 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000078) 09:21:18 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000091) 09:21:18 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000047) [ 1458.830382] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.2'. 09:21:18 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000092) 09:21:18 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000048) 09:21:18 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000079) [ 1458.921323] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.2'. 09:21:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="afeaee7d9192d91b0aab3aa18f531dd0ccb5788d58cee8cce139d7afad4d4fd1438d962ad61406ca6d8de81f4781ef86dcb30ed1ab0f5ab0a96d413eb6a7e523070b4e6ad8af12c4bc0be4fb4846bf2fd34be9d7d2d02ef37db944bb7c0377ee1191c6846bb149f571a1c24685e59fba6ce979e3ed80c5965869c47d73c43215831c2ada12e5fb2837f9f47d640e67c404caba44ebf486910738d095a42c151f3b1066855854b57b060384fab1d429be0d"], 0x138) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x8}) 09:21:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10204, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000, 0xfffffffffffffffd}, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x10, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) utimensat(r0, 0x0, &(0x7f0000000200), 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x20000, 0x62) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000001c0)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') r3 = openat(r2, &(0x7f0000001680)='./file1\x00', 0x5c5081, 0x8) mkdirat(r3, &(0x7f00000016c0)='./file1\x00', 0xc1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) preadv(r4, &(0x7f0000001600)=[{&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/2, 0x2}, {&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/30, 0x1e}, {&(0x7f0000001580)=""/59, 0x3b}, {&(0x7f00000015c0)=""/32, 0x20}], 0x8, 0x1ff, 0x2b2) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x601, 0xcad2c232ea4510c1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 09:21:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530ce000000000000005ffe872c042e6395824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x4000893}, 0x0) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001e00210c000007d69dae3996bf0400000800000000000100e25c95acbe93ca983cd0dec3a3c3cc6c16e1db1be57f27a833cbdb08198a328f10700d5490c39f971b54ed373a61bed97f096e7b9c7444e45ae839cacc2e4453d584907c79f59c5c895c3baef62f7384032bf6234edd877ecc"], 0x1c}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x77, 0x5}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6532207b28232c5d2e0a223abaa5ac8d216824d4ee9dd38ab20e3f0df7e9fc08000000000000008615aa362a9f779e75e0982d737caada9dfcd4a2e3f76841eb1a2fb9ae4f13a1ece25ba8647f01843dfd52e4669763b3ed20875e636ab877cc0d1f5cce01a84423c1e9aaf2edff23fc6afde68872b640a0d23ee19eb6c9083be8c2f28a62a2a0"], 0x88) lseek(r1, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 09:21:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:21:31 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="be", 0x1}], 0x100000000000037f) 09:21:31 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000093) 09:21:31 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000007a) 09:21:31 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000049) 09:21:31 executing program 6: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000092) [ 1471.607702] SELinux: Context ¾ is not valid (left unmapped). 09:21:31 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000094) [ 1471.658143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.672328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:21:31 executing program 6: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000092) 09:21:31 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004a) 09:21:31 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000007b) 09:21:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0xc}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_setup(0x387c, &(0x7f00000000c0)={0x0, 0xe98f, 0x4, 0x1, 0xad, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) fallocate(r1, 0x3, 0x0, 0x8000) 09:21:31 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x100000000000037f) 09:21:45 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004b) 09:21:45 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000095) 09:21:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:21:45 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x2}], 0x100000000000037f) 09:21:45 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000007c) 09:21:45 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0xa28, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r3 = getpgrp(0x0) r4 = syz_open_dev$mouse(&(0x7f0000000240), 0x9, 0x200000) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/279], &(0x7f00000003c0)=0xeb) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xe5, 0x5, 0xef, 0x0, 0x5, 0x420, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x2144, 0x6, 0x0, 0x0, 0x7, 0x0, 0x800, 0x0, 0x4, 0x0, 0x81}, r3, 0x4, r2, 0xa) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r7 = fcntl$dupfd(r6, 0x0, r5) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, 0x12, 0xc21, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x2f, 0x0, 0x0, @ipv6=@ipv4}]}, 0x34}}, 0x0) 09:21:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001000000180000006aa46ad65766083bf128d86bae2e267be99e0a6b85e3abe5204c44fb103f7a75abe1424c9c0b357ee1c57bf2e65fd198e060dbc62e93154bd5c76d3073f207416dde35e441c2e22c4ed72d81b42cee4b956d016cae8eb46d26fd513e6ce96eb3b5f9fbedf363c250464ae058b961632688705aa32333d36a2b234e8ddb3b67730efacde9ae52ebb67164e10782cb71599770b916d093e6fe3841ae2ecb7b54be5844caf1e43288d4f156013d5974186d392c93349cacf97618897ae514b3e658ee895de1e7f1c891347eb46bda8c5f8678482381e85a0dddd177d059fe90ca88b8", @ANYRES32=0xffffffffffffffff, @ANYBLOB="06000000ff1b04002e2f09696c653000"]) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r1, &(0x7f0000000500)=@xdp, &(0x7f0000000140)=0x80) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0xffffff5d, 0x3f7, 0x400, 0x70bd25, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c, 0x0, 0xd8499488957a772f, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x6f87, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) perf_event_open(&(0x7f0000000580)={0x7, 0x80, 0x0, 0x2, 0x35, 0xe, 0x0, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000280), 0x2}, 0x180, 0xffffffff, 0x1, 0x8, 0x0, 0x35a, 0x40b, 0x0, 0x800, 0x0, 0x53980000000000}, 0xffffffffffffffff, 0x9, r7, 0xb) syz_io_uring_submit(r11, r10, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r8, 0x3491, 0x0, 0x0, 0x0, 0x0) 09:21:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x196) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xeffb, 0x0, 0x9, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x10000) setresuid(0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x2007) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x3ff, 0x4, &(0x7f0000000500)=[{&(0x7f0000000240)="ac170b46de1aebfc6326c6424815b9f7d0ce46f94f155edb77a282e6ab258597561ce43ab530a8429764a88fd73aaf6d0474805be5916088ec023de8a8aa4cd57c574f6103472904fad6c632dbba1c5e87d69f6af548938c7e4ac038c4e1", 0x5e, 0x4}, {&(0x7f00000003c0)="2f3abe8a1fe414c15416f15ca4b8f0f3c3bdb6a7b4f12ccd36c33cce4012ecf83b9554e01f6ed2aa521bf8aecc9d091d76a597b8cfd0b3f7a7e8045cbc1558438ba53b475c8a9730087d5ceb150dcbffed8c8a2abc4983b0dbdca7ccf9833e375da615064ef3bbf759630f6fd27ca314d1466009937e797d5f38b1e4f2549ddaf965bb992e3493353d743ff6a34d63c8644a496bbf24e2", 0x97, 0x8001}, {&(0x7f00000002c0)="5a73c81ab704e6da6578481a0bedca32dc9d8b9f4c2331d52503ec9d1ae1895bdf70175e5ecef66bedd97b8b95d9498726fe7f626fa943963b68940c3642ac293c61e321ff09c3688788fe845feeda112b4633a8ebc287aa70e9ff26ba5b", 0x5e, 0x80000001}, {&(0x7f00000001c0)="f389fce09f4307302e55c45ae4edb2b7d4edf81e7d3aa237ade137a66164051125049a11c360ab6f2a7426d9182b7f7d4d2d08f0c83683e6f2305f", 0x3b, 0x3}], 0x1000, &(0x7f00000005c0)={[{@grpquota}], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt}, {@dont_measure}, {@euid_lt={'euid<', r1}}, {@hash}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) [ 1485.469900] loop6: detected capacity change from 0 to 41948160 [ 1485.502003] netlink: 'syz-executor.6': attribute type 47 has an invalid length. [ 1485.504740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:21:45 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000007d) [ 1485.556033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:21:45 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000096) 09:21:45 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000007e) 09:21:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:21:58 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000082) 09:21:58 executing program 4: r0 = syz_io_uring_setup(0x5cc3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x40010, r0, 0x0) 09:21:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x196) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xeffb, 0x0, 0x9, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x10000) setresuid(0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x2007) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x3ff, 0x4, &(0x7f0000000500)=[{&(0x7f0000000240)="ac170b46de1aebfc6326c6424815b9f7d0ce46f94f155edb77a282e6ab258597561ce43ab530a8429764a88fd73aaf6d0474805be5916088ec023de8a8aa4cd57c574f6103472904fad6c632dbba1c5e87d69f6af548938c7e4ac038c4e1", 0x5e, 0x4}, {&(0x7f00000003c0)="2f3abe8a1fe414c15416f15ca4b8f0f3c3bdb6a7b4f12ccd36c33cce4012ecf83b9554e01f6ed2aa521bf8aecc9d091d76a597b8cfd0b3f7a7e8045cbc1558438ba53b475c8a9730087d5ceb150dcbffed8c8a2abc4983b0dbdca7ccf9833e375da615064ef3bbf759630f6fd27ca314d1466009937e797d5f38b1e4f2549ddaf965bb992e3493353d743ff6a34d63c8644a496bbf24e2", 0x97, 0x8001}, {&(0x7f00000002c0)="5a73c81ab704e6da6578481a0bedca32dc9d8b9f4c2331d52503ec9d1ae1895bdf70175e5ecef66bedd97b8b95d9498726fe7f626fa943963b68940c3642ac293c61e321ff09c3688788fe845feeda112b4633a8ebc287aa70e9ff26ba5b", 0x5e, 0x80000001}, {&(0x7f00000001c0)="f389fce09f4307302e55c45ae4edb2b7d4edf81e7d3aa237ade137a66164051125049a11c360ab6f2a7426d9182b7f7d4d2d08f0c83683e6f2305f", 0x3b, 0x3}], 0x1000, &(0x7f00000005c0)={[{@grpquota}], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt}, {@dont_measure}, {@euid_lt={'euid<', r1}}, {@hash}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) 09:21:58 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x9d, 0x19, 0x3, 0x0, 0x1, 0x4004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x76ad8092}, 0xdd40, 0x2, 0x0, 0x5, 0x6, 0x40, 0x0, 0x0, 0x1, 0x0, 0x7f}, 0x0, 0xe, r0, 0x10) r1 = syz_io_uring_setup(0x3ce, &(0x7f0000000080)={0x0, 0xf433, 0x10, 0x1, 0x1d6}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r5, 0x0) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x9, 0x4, 0x8, 0x1, 0x0, 0x8000, 0x8400, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000300)}, 0x3000, 0xde6, 0xfff, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x7, 0x0, 0x4}, r4, 0xf, r5, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x1, {0x2}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x4000010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1ff) io_setup(0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r9, 0x40007ffffffffffc) io_submit(0x0, 0x5, &(0x7f00000009c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x8001, r8, &(0x7f0000000400)="0110cd2fa90b8cc7396709f13394ef9cbf553bd1b394625b29ed2d86cd8ab718e3b52988a97ab83473337ae490d36fe14c6a2d9f4e925afbacd56ec052922ff9e44ee17012cc707c90755462dbb1", 0x4e, 0x7, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xad1c, r1, &(0x7f0000000540)="6b0fd8c7d2b10e163f901b58ae366bfc7386a2a67682f09e6e6d90caa6b722713745fbe30a998d9556df13af84f9447f52beb081686eb4022450824b3d8889024c97a01fa9caacb641539f6c235adbbdf3e697f48f81d57ddd8d196d0ab43f8339d265c763df7ebb1f96e29cb019e6d2f965cce8c71b4fa36618863ea011f0", 0x7f, 0x9d59, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000640)="d10658a8db608e21b331fa9b3c3ad8147f2d1b396882052bac077898dd021553574734f6bc781b53e01b83da2edafcb12add9b89e0836e2f1be30d6344f340f40f8a14f66608fbc4aaf0ebc8d6f9c5a570239093786aab9428f847faf448d035d73e3b806590a712d4abc7a1e2f94eebcf24287587b21537bceaab4ab1d8ec4c514c219957eb3f29d9f4ff0ed0b211f1107653d496b4b5bc062e1678039449859f62b031a2c895899dbdaa52d54bf5b4690584e859aac90c503b40c75bb16b5dfe32726ea87426", 0xc7, 0x6, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f0000000780)="1cf89d4df98e1b0cf4c56480cc3594ce4317413ad0a7982dcab2d52518e66c1a4b1754cec9323944c29de1afb838ed8f38c0244460ef71febbeb9cde38d1b005c9aeee582b6c87b3c003a082899f8094d9435e0e24360120bc4c73b4814d283b8a232e909d2dbe797fc627d3a904b851fd79899e5cb981f30f4a8bdcb8fb6e952d50f436863f1d85b457d757a7328a59b84be6973daab8", 0x97, 0x10001, 0x0, 0x2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x18, r9, &(0x7f0000000880)="96b93fd008ebe8eda9b59081600a2995a1083a6ca842e0645f39e516c71009a84dbffb04c5d27c1fe5f78ce4f3ec26b341f77f260e87d6db8088f5a4416d1f6f2a20e87972550a1defad69f38acf04152191c029c0f0495398bc0f8e7ccd78ba6a80f22d51a356a650230dd9e5e31730562bc178432a77d47be7ebca94010e4da96ae8fd8c6cffffe84dc61769b8e9c342b85748266665b207361a523363a23fb7eca0515fb318bd6d81501fee7fd7c3e605f55233784a3bb2383743c5be9df4392614cd26654b9010e5600874c881d742103cf9a4722bc22a2932a4c7", 0xdd, 0x6, 0x0, 0x1, r5}]) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r1, 0x10000000) syz_io_uring_submit(r7, r10, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x111922, 0x22, 0xe}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x23456}, 0x9) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd_index, 0x8, 0x80000001, 0x0, 0x1}, 0x80000001) io_uring_enter(r1, 0x1c6, 0xffcd, 0x0, 0x0, 0x0) 09:21:58 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004c) 09:21:58 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000097) 09:21:58 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x3}], 0x100000000000037f) [ 1498.441281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:21:58 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004d) [ 1498.470026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:21:58 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000083) 09:21:58 executing program 4: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000540)) pipe(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x9}, 0x10006, 0x4, 0x1002, 0x5, 0x7, 0x0, 0xd395}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @dev}, {0x2, 0x0, @loopback}, {0x2, 0x4e20, @loopback}, 0x155, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000380), 0xb}, 0x1a408, 0x0, 0xfffffffd, 0x2, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1e, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(r2, &(0x7f0000002e00)=""/4102) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000003c0)={0x245, 0xfff, 0x3}) r3 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0xfffffffffffffffe, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 09:21:58 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000098) 09:21:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000000c0)="07aa059d7b95084798f15c4b00"/30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000)) write$bt_hci(r0, &(0x7f0000000100)={0x1, @inquiry={{0x401, 0x5}, {"6e5dbd", 0x1, 0x2}}}, 0x9) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000000000200100011808098010500c7dba09475f2510000000000000000000201377c68805ab1b5114bc10b870a9a26338dff6e918aa4b92d7185382726f5248525ae20a19a248b76f1938754e09b6f6a161fe388f9633824fb08266b814068e17a46477e39fc2d14d66c0000933e2af2b0a3b9fbf71469cd31fc0000000000000007481227da1c7078e7d8411ead45f37209a8e00458f1542da0554abc015d0dd77327ad2471ee73f8aa73e775c491ecfabbd3409437720000000aec07c922927edfb56e44535f9c6b75af17f45246cbbddb1111fc08bf09f3568c20b7e6f74a9226e4c452378fe832779ec5444a6702d9695720ba51cb1d125523dd91e938aba006f71c9ec0ae220715d5729a925b7c2470984b25c0bc86c2760f"], 0x24}}, 0x0) 09:21:58 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004e) 09:21:58 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000099) 09:21:58 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) sendfile(r0, r1, 0x0, 0x7) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1000000000000084) 09:21:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:21:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 09:21:58 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f00000000c0)=""/120, 0x78) poll(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 09:21:58 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x80200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000004f) [ 1498.904020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.916249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.929072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1499.006257] audit: type=1326 audit(1747214518.938:89): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13255 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57f8af6b19 code=0x0 [ 1499.040359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1499.083834] audit: type=1326 audit(1747214519.019:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13255 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57f8af6b19 code=0x0 [ 1502.575465] Bluetooth: hci7: command 0x0406 tx timeout [ 1504.239443] Bluetooth: hci1: command 0x0409 tx timeout [ 1506.287440] Bluetooth: hci1: command 0x041b tx timeout [ 1507.423767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.424901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.426978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1507.458397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.459436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.461234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1507.594351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.598110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.335437] Bluetooth: hci1: command 0x040f tx timeout [ 1510.383441] Bluetooth: hci1: command 0x0419 tx timeout [ 1513.502203] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1513.503463] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.237 #1 [ 1513.504100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1513.505055] Call Trace: [ 1513.505361] dump_stack+0x107/0x167 [ 1513.505785] dump_header+0x107/0x689 [ 1513.506219] oom_kill_process.cold+0x10/0x15 [ 1513.506733] out_of_memory+0x358/0x1440 [ 1513.507196] ? oom_killer_disable+0x280/0x280 [ 1513.507708] ? mutex_trylock+0x237/0x2b0 [ 1513.508155] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1513.508835] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1513.509474] ? lock_acquire+0x137/0x470 [ 1513.509931] ? warn_alloc+0x190/0x190 [ 1513.510367] __alloc_pages_nodemask+0x51d/0x600 [ 1513.510909] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1513.511562] ? find_get_entry+0x2c8/0x740 [ 1513.512043] alloc_pages_current+0x187/0x280 [ 1513.512517] __page_cache_alloc+0x2d2/0x360 [ 1513.513012] pagecache_get_page+0x2c7/0xc80 [ 1513.513510] filemap_fault+0x177d/0x2210 [ 1513.513982] ? read_cache_page_gfp+0x30/0x30 [ 1513.514489] ? replace_page_cache_page+0x1200/0x1200 [ 1513.515042] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1513.515648] ext4_filemap_fault+0x87/0xc0 [ 1513.516122] __do_fault+0x113/0x410 [ 1513.516523] handle_mm_fault+0x1e53/0x3500 [ 1513.517010] ? find_held_lock+0x2c/0x110 [ 1513.517477] ? __pmd_alloc+0x5e0/0x5e0 [ 1513.517928] ? vmacache_find+0x55/0x2a0 [ 1513.518390] do_user_addr_fault+0x56e/0xc60 [ 1513.518897] exc_page_fault+0xa2/0x1a0 [ 1513.519344] ? asm_exc_page_fault+0x8/0x30 [ 1513.519831] asm_exc_page_fault+0x1e/0x30 [ 1513.520303] RIP: 0033:0x7f1b0c225b30 [ 1513.520730] Code: Unable to access opcode bytes at RIP 0x7f1b0c225b06. [ 1513.521478] RSP: 002b:00007ffc5921ece8 EFLAGS: 00010202 [ 1513.522085] RAX: 0000000000000300 RBX: 00007f1b0c362ba0 RCX: 0000000000000006 [ 1513.522862] RDX: 0000000000000006 RSI: 00007f1b0c6a2a39 RDI: 00007ffc5921f250 [ 1513.523678] RBP: 00007ffc5921f240 R08: 00000000ffffffff R09: 000000000000000c [ 1513.524489] R10: 00007f1b0c6a2a39 R11: 0000000000000000 R12: 00007ffc5921f250 [ 1513.525311] R13: 00007f1b0c69c12b R14: 00007ffc5921f390 R15: 0000000000000006 [ 1513.526140] Mem-Info: [ 1513.526461] active_anon:757 inactive_anon:58751 isolated_anon:0 [ 1513.526461] active_file:11 inactive_file:6 isolated_file:0 [ 1513.526461] unevictable:0 dirty:0 writeback:0 [ 1513.526461] slab_reclaimable:8424 slab_unreclaimable:262297 [ 1513.526461] mapped:69634 shmem:119 pagetables:1579 bounce:0 [ 1513.526461] free:2800 free_pcp:90 free_cma:0 [ 1513.529954] Node 0 active_anon:3028kB inactive_anon:235004kB active_file:44kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:476kB writeback_tmp:0kB kernel_stack:4416kB all_unreclaimable? yes [ 1513.532575] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1513.535543] lowmem_reserve[]: 0 1616 1616 1616 [ 1513.536085] Node 0 DMA32 free:4708kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:3028kB inactive_anon:235004kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:6316kB bounce:0kB free_pcp:360kB local_pcp:172kB free_cma:0kB [ 1513.539323] lowmem_reserve[]: 0 0 0 0 [ 1513.539797] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB [ 1513.541423] Node 0 DMA32: 1128*4kB (UME) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4512kB [ 1513.542845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1513.543819] 138 total pagecache pages [ 1513.544253] 0 pages in swap cache [ 1513.544645] Swap cache stats: add 0, delete 0, find 0/0 [ 1513.545252] Free swap = 0kB [ 1513.545619] Total swap = 0kB [ 1513.545943] 524158 pages RAM [ 1513.546288] 0 pages HighMem/MovableOnly [ 1513.546744] 105069 pages reserved [ 1513.547176] Unreclaimable slab info: [ 1513.547786] Name Used Total [ 1513.548463] pid_2 67KB 67KB [ 1513.549069] IEEE-802.15.4-MAC 63KB 63KB [ 1513.549668] IEEE-802.15.4-RAW 63KB 63KB [ 1513.550276] p9_req_t 8KB 8KB [ 1513.550881] ip6-frags 15KB 15KB [ 1513.551503] fib6_nodes 36KB 36KB [ 1513.552108] ip6_dst_cache 41KB 41KB [ 1513.552700] RAWv6 252KB 252KB [ 1513.553305] UDPLITEv6 62KB 62KB [ 1513.553900] UDPv6 62KB 62KB [ 1513.554531] tw_sock_TCPv6 7KB 7KB [ 1513.555106] TCPv6 62KB 62KB [ 1513.555738] scsi_sense_cache 8KB 8KB [ 1513.556343] sd_ext_cdb 3KB 3KB [ 1513.556969] virtio_scsi_cmd 16KB 16KB [ 1513.557602] sgpool-128 89KB 89KB [ 1513.558210] sgpool-64 63KB 63KB [ 1513.558810] sgpool-32 293KB 293KB [ 1513.559433] sgpool-16 67KB 67KB [ 1513.560043] sgpool-8 56KB 56KB [ 1513.560666] io_kiocb 302KB 322KB [ 1513.561271] mqueue_inode_cache 62KB 62KB [ 1513.561903] nfs_commit_data 15KB 15KB [ 1513.562492] nfs_write_data 47KB 47KB [ 1513.563105] jbd2_inode 11KB 11KB [ 1513.563733] ext4_system_zone 7KB 7KB [ 1513.564341] ext4_io_end_vec 7KB 7KB [ 1513.564935] ext4_bio_post_read_ctx 15KB 15KB [ 1513.565607] kioctx 31KB 31KB [ 1513.566219] aio_kiocb 7KB 7KB [ 1513.566854] dnotify_mark 3KB 3KB [ 1513.567475] dnotify_struct 3KB 3KB [ 1513.568082] dio 46KB 46KB [ 1513.568702] bio-2 4KB 4KB [ 1513.569309] fasync_cache 7KB 7KB [ 1513.569906] pid_namespace 7KB 7KB [ 1513.570532] posix_timers_cache 15KB 15KB [ 1513.571159] rpc_buffers 31KB 31KB [ 1513.571755] rpc_tasks 3KB 3KB [ 1513.572367] UNIX 228KB 416KB [ 1513.572997] ip4-frags 7KB 7KB [ 1513.573623] UDP-Lite 63KB 63KB [ 1513.574230] tcp_bind_bucket 8KB 8KB [ 1513.574861] inet_peer_cache 8KB 8KB [ 1513.575487] xfrm_state 32KB 32KB [ 1513.576092] ip_fib_trie 8KB 8KB [ 1513.576687] ip_fib_alias 19KB 19KB [ 1513.577294] ip_dst_cache 56KB 56KB [ 1513.577883] PING 62KB 62KB [ 1513.578513] RAW 93KB 93KB [ 1513.579092] UDP 283KB 346KB [ 1513.579679] request_sock_TCP 7KB 7KB [ 1513.580245] TCP 60KB 60KB [ 1513.580835] hugetlbfs_inode_cache 30KB 30KB [ 1513.581456] bio-1 11KB 11KB [ 1513.582021] eventpoll_pwq 23KB 23KB [ 1513.582609] eventpoll_epi 43KB 43KB [ 1513.583182] inotify_inode_mark 46KB 46KB [ 1513.583820] request_queue 60KB 60KB [ 1513.584391] blkdev_ioc 30KB 30KB [ 1513.584971] bio-0 168KB 168KB [ 1513.585553] biovec-max 714KB 714KB [ 1513.586120] biovec-64 297KB 297KB [ 1513.586709] biovec-16 45KB 45KB [ 1513.587276] uid_cache 8KB 8KB [ 1513.587860] dmaengine-unmap-2 4KB 4KB [ 1513.588450] audit_buffer 7KB 7KB [ 1513.589018] skbuff_fclone_cache 127KB 142KB [ 1513.589661] skbuff_head_cache 581KB 581KB [ 1513.590231] file_lock_cache 40KB 63KB [ 1513.590864] file_lock_ctx 7KB 7KB [ 1513.591486] fsnotify_mark_connector 28KB 28KB [ 1513.592150] net_namespace 143KB 143KB [ 1513.593164] task_delay_info 122KB 135KB [ 1513.594161] taskstats 69KB 69KB [ 1513.594841] proc_dir_entry 375KB 390KB [ 1513.595473] pde_opener 39KB 39KB [ 1513.596075] seq_file 82KB 82KB [ 1513.596697] sigqueue 110KB 110KB [ 1513.597307] shmem_inode_cache 1294KB 1383KB [ 1513.597892] kernfs_iattrs_cache 247KB 247KB [ 1513.598543] kernfs_node_cache 5447KB 5507KB [ 1513.599154] mnt_cache 244KB 244KB [ 1513.599809] filp 1641KB 2385KB [ 1513.600449] names_cache 9651KB 11215KB [ 1513.601056] hashtab_node 274KB 274KB [ 1513.601680] ebitmap_node 1149KB 1149KB [ 1513.602286] avtab_node 4976KB 4976KB [ 1513.602919] avc_node 35KB 35KB [ 1513.603560] lsm_inode_cache 3191KB 3289KB [ 1513.604138] lsm_file_cache 143KB 216KB [ 1513.604765] key_jar 39KB 39KB [ 1513.605367] uts_namespace 15KB 15KB [ 1513.605989] nsproxy 11KB 11KB [ 1513.606648] vm_area_struct 1891KB 2220KB [ 1513.607220] fs_cache 78KB 96KB [ 1513.607855] files_cache 270KB 366KB [ 1513.608482] signal_cache 494KB 710KB [ 1513.609090] sighand_cache 326KB 390KB [ 1513.609718] task_struct 1437KB 1758KB [ 1513.610331] cred_jar 168KB 300KB [ 1513.610971] anon_vma_chain 390KB 507KB [ 1513.611601] anon_vma 276KB 326KB [ 1513.612209] pid 105KB 120KB [ 1513.612838] Acpi-Operand 215KB 245KB [ 1513.613466] Acpi-ParseExt 23KB 23KB [ 1513.614073] Acpi-Parse 197KB 213KB [ 1513.614704] Acpi-State 94KB 110KB [ 1513.615311] Acpi-Namespace 24KB 24KB [ 1513.615935] numa_policy 3KB 3KB [ 1513.616559] trace_event_file 176KB 176KB [ 1513.617166] ftrace_event_field 280KB 280KB [ 1513.617795] pool_workqueue 40KB 40KB [ 1513.618420] task_group 16KB 16KB [ 1513.619029] mm_struct 544KB 598KB [ 1513.619653] vmap_area 126KB 126KB [ 1513.620232] page->ptl 290KB 389KB [ 1513.620854] kmemleak_scan_area 67KB 67KB [ 1513.621499] kmemleak_object 802346KB 802484KB [ 1513.622115] kmalloc-8k 4544KB 4544KB [ 1513.622752] kmalloc-4k 6872KB 7808KB [ 1513.623374] kmalloc-2k 4368KB 5184KB [ 1513.624015] kmalloc-1k 2464KB 3712KB [ 1513.624648] kmalloc-512 27700KB 27700KB [ 1513.625260] kmalloc-256 1183KB 1280KB [ 1513.625889] kmalloc-192 542KB 552KB [ 1513.626663] kmalloc-128 523KB 648KB [ 1513.627284] kmalloc-96 424KB 600KB [ 1513.627926] kmalloc-64 1062KB 1292KB [ 1513.628554] kmalloc-32 97092KB 97092KB [ 1513.629171] kmalloc-16 368KB 368KB [ 1513.629797] kmalloc-8 334KB 334KB [ 1513.630422] kmem_cache_node 47KB 47KB [ 1513.631039] kmem_cache 75KB 75KB [ 1513.631664] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=6925,uid=0 [ 1513.633813] Out of memory: Killed process 6925 (syz-executor.4) total-vm:93544kB, anon-rss:456kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1514.643272] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1514.644356] CPU: 1 PID: 269 Comm: syz-fuzzer Not tainted 5.10.237 #1 [ 1514.645041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1514.645937] Call Trace: [ 1514.646224] dump_stack+0x107/0x167 [ 1514.646649] dump_header+0x107/0x689 [ 1514.647084] oom_kill_process.cold+0x10/0x15 [ 1514.647587] out_of_memory+0x1149/0x1440 [ 1514.648058] ? oom_killer_disable+0x280/0x280 [ 1514.648581] ? mutex_trylock+0x237/0x2b0 [ 1514.649046] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1514.649724] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1514.650400] ? lock_acquire+0x137/0x470 [ 1514.650864] ? warn_alloc+0x190/0x190 [ 1514.651312] __alloc_pages_nodemask+0x51d/0x600 [ 1514.651847] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1514.652504] ? find_get_entry+0x2c8/0x740 [ 1514.652988] alloc_pages_current+0x187/0x280 [ 1514.653494] __page_cache_alloc+0x2d2/0x360 [ 1514.653991] pagecache_get_page+0x2c7/0xc80 [ 1514.654490] filemap_fault+0x177d/0x2210 [ 1514.654968] ? read_cache_page_gfp+0x30/0x30 [ 1514.655477] ? replace_page_cache_page+0x1200/0x1200 [ 1514.656056] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1514.656658] ext4_filemap_fault+0x87/0xc0 [ 1514.657133] __do_fault+0x113/0x410 [ 1514.657555] handle_mm_fault+0x1e53/0x3500 [ 1514.658047] ? ep_read_events_proc+0x3d0/0x3d0 [ 1514.658571] ? __pmd_alloc+0x5e0/0x5e0 [ 1514.659031] ? vmacache_find+0x55/0x2a0 [ 1514.659494] do_user_addr_fault+0x56e/0xc60 [ 1514.659994] exc_page_fault+0xa2/0x1a0 [ 1514.660443] ? asm_exc_page_fault+0x8/0x30 [ 1514.660928] asm_exc_page_fault+0x1e/0x30 [ 1514.661375] RIP: 0033:0x4666e0 [ 1514.661745] Code: Unable to access opcode bytes at RIP 0x4666b6. [ 1514.662439] RSP: 002b:000000c0005f77f0 EFLAGS: 00010246 [ 1514.663054] RAX: 0000000000000000 RBX: 00000000000003e4 RCX: 00000000004666e0 [ 1514.663830] RDX: 0000000000000080 RSI: 000000c0005f7840 RDI: 0000000000000003 [ 1514.664649] RBP: 000000c0005f7e40 R08: 0000000000000000 R09: 0000000000000000 [ 1514.665422] R10: 00000000000003e4 R11: 0000000000000246 R12: 0000000000000003 [ 1514.666243] R13: 000000c000001680 R14: 00000160e6f1d871 R15: 0000000000000000 [ 1514.667123] Mem-Info: [ 1514.667419] active_anon:757 inactive_anon:58719 isolated_anon:0 [ 1514.667419] active_file:32 inactive_file:5 isolated_file:0 [ 1514.667419] unevictable:0 dirty:0 writeback:0 [ 1514.667419] slab_reclaimable:8424 slab_unreclaimable:262379 [ 1514.667419] mapped:69634 shmem:119 pagetables:1548 bounce:0 [ 1514.667419] free:2762 free_pcp:55 free_cma:0 [ 1514.670833] Node 0 active_anon:3028kB inactive_anon:234876kB active_file:128kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:476kB writeback_tmp:0kB kernel_stack:4416kB all_unreclaimable? no [ 1514.673445] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1514.676411] lowmem_reserve[]: 0 1616 1616 1616 [ 1514.676958] Node 0 DMA32 free:4556kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:3028kB inactive_anon:234876kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:6192kB bounce:0kB free_pcp:220kB local_pcp:216kB free_cma:0kB [ 1514.680348] lowmem_reserve[]: 0 0 0 0 [ 1514.680822] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB [ 1514.682409] Node 0 DMA32: 1097*4kB (UME) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4388kB [ 1514.683820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1514.684800] 158 total pagecache pages [ 1514.685233] 0 pages in swap cache [ 1514.685631] Swap cache stats: add 0, delete 0, find 0/0 [ 1514.686235] Free swap = 0kB [ 1514.686591] Total swap = 0kB [ 1514.686943] 524158 pages RAM [ 1514.687289] 0 pages HighMem/MovableOnly [ 1514.687758] 105069 pages reserved [ 1514.688151] Unreclaimable slab info: [ 1514.688593] Name Used Total [ 1514.689223] pid_2 67KB 67KB [ 1514.689846] IEEE-802.15.4-MAC 63KB 63KB [ 1514.690476] IEEE-802.15.4-RAW 63KB 63KB [ 1514.691091] p9_req_t 8KB 8KB [ 1514.691681] ip6-frags 15KB 15KB [ 1514.692288] fib6_nodes 36KB 36KB [ 1514.692883] ip6_dst_cache 41KB 41KB [ 1514.693509] RAWv6 252KB 252KB [ 1514.694114] UDPLITEv6 62KB 62KB [ 1514.694721] UDPv6 62KB 62KB [ 1514.695328] tw_sock_TCPv6 7KB 7KB [ 1514.695925] TCPv6 62KB 62KB [ 1514.696558] scsi_sense_cache 8KB 8KB [ 1514.697168] sd_ext_cdb 3KB 3KB [ 1514.697767] virtio_scsi_cmd 16KB 16KB [ 1514.698377] sgpool-128 89KB 89KB [ 1514.699009] sgpool-64 63KB 63KB [ 1514.699633] sgpool-32 293KB 293KB [ 1514.700241] sgpool-16 75KB 75KB [ 1514.700839] sgpool-8 56KB 56KB [ 1514.701463] io_kiocb 302KB 322KB [ 1514.702037] mqueue_inode_cache 62KB 62KB [ 1514.702682] nfs_commit_data 15KB 15KB [ 1514.703288] nfs_write_data 47KB 47KB [ 1514.703888] jbd2_inode 11KB 11KB [ 1514.704517] ext4_system_zone 7KB 7KB [ 1514.705123] ext4_io_end_vec 7KB 7KB [ 1514.705723] ext4_bio_post_read_ctx 15KB 15KB [ 1514.706377] kioctx 31KB 31KB [ 1514.707012] aio_kiocb 7KB 7KB [ 1514.707641] dnotify_mark 3KB 3KB [ 1514.708245] dnotify_struct 3KB 3KB [ 1514.708875] dio 46KB 46KB [ 1514.709467] bio-2 4KB 4KB [ 1514.710074] fasync_cache 7KB 7KB [ 1514.710681] pid_namespace 7KB 7KB [ 1514.711289] posix_timers_cache 15KB 15KB [ 1514.711899] rpc_buffers 31KB 31KB [ 1514.712525] rpc_tasks 3KB 3KB [ 1514.713133] UNIX 228KB 416KB [ 1514.713764] ip4-frags 7KB 7KB [ 1514.714371] UDP-Lite 63KB 63KB [ 1514.715007] tcp_bind_bucket 8KB 8KB [ 1514.715631] inet_peer_cache 8KB 8KB [ 1514.716244] xfrm_state 32KB 32KB [ 1514.716870] ip_fib_trie 8KB 8KB [ 1514.717494] ip_fib_alias 19KB 19KB [ 1514.718103] ip_dst_cache 56KB 56KB [ 1514.718728] PING 62KB 62KB [ 1514.719795] RAW 93KB 93KB [ 1514.720735] UDP 283KB 346KB [ 1514.721349] request_sock_TCP 7KB 7KB [ 1514.722016] TCP 60KB 60KB [ 1514.722654] hugetlbfs_inode_cache 30KB 30KB [ 1514.723298] bio-1 11KB 11KB [ 1514.723894] eventpoll_pwq 23KB 23KB [ 1514.724526] eventpoll_epi 43KB 43KB [ 1514.725128] inotify_inode_mark 46KB 46KB [ 1514.725766] request_queue 60KB 60KB [ 1514.726371] blkdev_ioc 30KB 30KB [ 1514.726998] bio-0 228KB 228KB [ 1514.727628] biovec-max 714KB 714KB [ 1514.728195] biovec-64 316KB 316KB [ 1514.728823] biovec-16 45KB 45KB [ 1514.729451] uid_cache 8KB 8KB [ 1514.730054] dmaengine-unmap-2 4KB 4KB [ 1514.730690] audit_buffer 7KB 7KB [ 1514.731304] skbuff_fclone_cache 127KB 142KB [ 1514.731945] skbuff_head_cache 663KB 663KB [ 1514.732569] file_lock_cache 40KB 63KB [ 1514.733175] file_lock_ctx 7KB 7KB [ 1514.733762] fsnotify_mark_connector 28KB 28KB [ 1514.734446] net_namespace 143KB 143KB [ 1514.735022] task_delay_info 122KB 135KB [ 1514.735647] taskstats 69KB 69KB [ 1514.736254] proc_dir_entry 375KB 390KB [ 1514.736879] pde_opener 39KB 39KB [ 1514.737506] seq_file 82KB 82KB [ 1514.738109] sigqueue 110KB 110KB [ 1514.738748] shmem_inode_cache 1294KB 1383KB [ 1514.739352] kernfs_iattrs_cache 247KB 247KB [ 1514.739995] kernfs_node_cache 5447KB 5507KB [ 1514.740621] mnt_cache 244KB 244KB [ 1514.741241] filp 1565KB 2325KB [ 1514.741874] names_cache 9231KB 10829KB [ 1514.742498] hashtab_node 274KB 274KB [ 1514.743113] ebitmap_node 1149KB 1149KB [ 1514.743739] avtab_node 4976KB 4976KB [ 1514.744311] avc_node 35KB 35KB [ 1514.744945] lsm_inode_cache 3191KB 3289KB [ 1514.745569] lsm_file_cache 143KB 216KB [ 1514.746175] key_jar 39KB 39KB [ 1514.746810] uts_namespace 15KB 15KB [ 1514.747434] nsproxy 11KB 11KB [ 1514.748054] vm_area_struct 1891KB 2220KB [ 1514.748678] fs_cache 78KB 96KB [ 1514.749287] files_cache 270KB 366KB [ 1514.749910] signal_cache 494KB 710KB [ 1514.750535] sighand_cache 326KB 390KB [ 1514.751148] task_struct 1437KB 1758KB [ 1514.751773] cred_jar 168KB 300KB [ 1514.752347] anon_vma_chain 390KB 507KB [ 1514.752975] anon_vma 275KB 326KB [ 1514.753604] pid 105KB 120KB [ 1514.754212] Acpi-Operand 215KB 245KB [ 1514.754845] Acpi-ParseExt 23KB 23KB [ 1514.755473] Acpi-Parse 197KB 213KB [ 1514.756081] Acpi-State 94KB 110KB [ 1514.756705] Acpi-Namespace 24KB 24KB [ 1514.757310] numa_policy 3KB 3KB [ 1514.757936] trace_event_file 176KB 176KB [ 1514.758559] ftrace_event_field 280KB 280KB [ 1514.759185] pool_workqueue 40KB 40KB [ 1514.759806] task_group 16KB 16KB [ 1514.760430] mm_struct 544KB 598KB [ 1514.761002] vmap_area 126KB 126KB [ 1514.761628] page->ptl 290KB 389KB [ 1514.762235] kmemleak_scan_area 67KB 67KB [ 1514.762876] kmemleak_object 803202KB 803202KB [ 1514.763509] kmalloc-8k 4544KB 4544KB [ 1514.764122] kmalloc-4k 6872KB 7808KB [ 1514.764749] kmalloc-2k 4368KB 5184KB [ 1514.765366] kmalloc-1k 2464KB 3712KB [ 1514.765987] kmalloc-512 27948KB 27948KB [ 1514.766619] kmalloc-256 1183KB 1280KB [ 1514.767196] kmalloc-192 542KB 552KB [ 1514.767829] kmalloc-128 523KB 648KB [ 1514.768459] kmalloc-96 437KB 600KB [ 1514.769032] kmalloc-64 1083KB 1292KB [ 1514.769657] kmalloc-32 97132KB 97132KB [ 1514.770264] kmalloc-16 368KB 368KB [ 1514.770893] kmalloc-8 334KB 334KB [ 1514.771520] kmem_cache_node 47KB 47KB [ 1514.772125] kmem_cache 75KB 75KB [ 1514.772746] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=269,uid=0 [ 1514.774741] Out of memory (oom_kill_allocating_task): Killed process 254 (syz-fuzzer) total-vm:1242880kB, anon-rss:202036kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:948kB oom_score_adj:0 [ 1522.076114] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 1522.077370] CPU: 1 PID: 103 Comm: systemd-journal Not tainted 5.10.237 #1 [ 1522.078156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1522.079118] Call Trace: [ 1522.079435] dump_stack+0x107/0x167 [ 1522.079856] dump_header+0x107/0x689 [ 1522.080293] oom_kill_process.cold+0x10/0x15 [ 1522.080800] out_of_memory+0x1149/0x1440 [ 1522.081269] ? oom_killer_disable+0x280/0x280 [ 1522.081786] ? mutex_trylock+0x237/0x2b0 [ 1522.082258] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1522.082945] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1522.083630] ? lock_acquire+0x137/0x470 [ 1522.084086] ? warn_alloc+0x190/0x190 [ 1522.084536] __alloc_pages_nodemask+0x51d/0x600 [ 1522.085073] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1522.085770] ? find_get_entry+0x2c8/0x740 [ 1522.086260] alloc_pages_current+0x187/0x280 [ 1522.086776] __page_cache_alloc+0x2d2/0x360 [ 1522.087272] pagecache_get_page+0x2c7/0xc80 [ 1522.087771] filemap_fault+0x177d/0x2210 [ 1522.088245] ? read_cache_page_gfp+0x30/0x30 [ 1522.088752] ? replace_page_cache_page+0x1200/0x1200 [ 1522.089334] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1522.089938] ext4_filemap_fault+0x87/0xc0 [ 1522.090419] __do_fault+0x113/0x410 [ 1522.090846] handle_mm_fault+0x1e53/0x3500 [ 1522.091334] ? timerfd_tmrproc+0xc0/0xc0 [ 1522.091799] ? fsnotify_perm.part.0+0x22d/0x620 [ 1522.092335] ? __pmd_alloc+0x5e0/0x5e0 [ 1522.092787] ? vmacache_find+0x55/0x2a0 [ 1522.093250] do_user_addr_fault+0x56e/0xc60 [ 1522.093748] exc_page_fault+0xa2/0x1a0 [ 1522.094193] ? asm_exc_page_fault+0x8/0x30 [ 1522.094677] asm_exc_page_fault+0x1e/0x30 [ 1522.095153] RIP: 0033:0x7f182fde5b30 [ 1522.095579] Code: Unable to access opcode bytes at RIP 0x7f182fde5b06. [ 1522.096333] RSP: 002b:00007ffdc6b9f928 EFLAGS: 00010246 [ 1522.096943] RAX: 0000000000000000 RBX: 000055b972b4f380 RCX: 00007f182fbadecc [ 1522.097760] RDX: 000055b972b4f380 RSI: 0000000000000000 RDI: 0000000000000000 [ 1522.098578] RBP: 000055b972b4f3d0 R08: 0000000000000000 R09: 00007ffdc6bfa080 [ 1522.099400] R10: 00007ffdc6bfa0f0 R11: 0000000000000000 R12: 00063515161afc4c [ 1522.100217] R13: 000000000000000c R14: 00007ffdc6b9f980 R15: 000000000000000c [ 1522.101119] Mem-Info: [ 1522.101430] active_anon:34 inactive_anon:7089 isolated_anon:0 [ 1522.101430] active_file:0 inactive_file:15 isolated_file:0 [ 1522.101430] unevictable:0 dirty:0 writeback:0 [ 1522.101430] slab_reclaimable:6735 slab_unreclaimable:386946 [ 1522.101430] mapped:8712 shmem:73 pagetables:231 bounce:0 [ 1522.101430] free:2860 free_pcp:59 free_cma:0 [ 1522.104938] Node 0 active_anon:136kB inactive_anon:28356kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34848kB dirty:0kB writeback:0kB shmem:292kB writeback_tmp:0kB kernel_stack:2880kB all_unreclaimable? yes [ 1522.107562] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1522.110521] lowmem_reserve[]: 0 1616 1616 1616 [ 1522.111068] Node 0 DMA32 free:4948kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:136kB inactive_anon:28356kB active_file:64kB inactive_file:24kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:924kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 1522.114260] lowmem_reserve[]: 0 0 0 0 [ 1522.114737] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB [ 1522.116327] Node 0 DMA32: 1236*4kB (UME) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4944kB [ 1522.117781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1522.118765] 110 total pagecache pages [ 1522.119199] 0 pages in swap cache [ 1522.119610] Swap cache stats: add 0, delete 0, find 0/0 [ 1522.120219] Free swap = 0kB [ 1522.120581] Total swap = 0kB [ 1522.120926] 524158 pages RAM [ 1522.121268] 0 pages HighMem/MovableOnly [ 1522.121732] 105069 pages reserved [ 1522.122128] Unreclaimable slab info: [ 1522.122577] Name Used Total [ 1522.123215] pid_2 67KB 67KB [ 1522.123839] IEEE-802.15.4-MAC 63KB 63KB [ 1522.124462] IEEE-802.15.4-RAW 63KB 63KB [ 1522.125068] p9_req_t 8KB 8KB [ 1522.125688] ip6-frags 15KB 15KB [ 1522.126293] fib6_nodes 36KB 36KB [ 1522.126919] ip6_dst_cache 41KB 41KB [ 1522.127542] RAWv6 252KB 252KB [ 1522.128149] UDPLITEv6 62KB 62KB [ 1522.128772] UDPv6 62KB 62KB [ 1522.129376] tw_sock_TCPv6 7KB 7KB [ 1522.130001] TCPv6 62KB 62KB [ 1522.130625] scsi_sense_cache 8KB 8KB [ 1522.131236] sd_ext_cdb 3KB 3KB [ 1522.131858] virtio_scsi_cmd 16KB 16KB [ 1522.132484] sgpool-128 89KB 89KB [ 1522.133091] sgpool-64 63KB 63KB [ 1522.133715] sgpool-32 246KB 293KB [ 1522.134324] sgpool-16 97KB 97KB [ 1522.134955] sgpool-8 63KB 63KB [ 1522.135581] io_kiocb 302KB 322KB [ 1522.136186] mqueue_inode_cache 62KB 62KB [ 1522.136815] nfs_commit_data 15KB 15KB [ 1522.137436] nfs_write_data 47KB 47KB [ 1522.138045] jbd2_inode 11KB 11KB [ 1522.138668] ext4_system_zone 7KB 7KB [ 1522.139283] ext4_io_end_vec 7KB 7KB [ 1522.139907] ext4_bio_post_read_ctx 15KB 15KB [ 1522.140583] kioctx 31KB 31KB [ 1522.141191] aio_kiocb 7KB 7KB [ 1522.141812] dnotify_mark 3KB 3KB [ 1522.142435] dnotify_struct 3KB 3KB [ 1522.143053] dio 46KB 46KB [ 1522.143679] bio-2 4KB 4KB [ 1522.144285] fasync_cache 7KB 7KB [ 1522.144911] pid_namespace 7KB 7KB [ 1522.145533] posix_timers_cache 15KB 15KB [ 1522.146155] rpc_buffers 31KB 31KB [ 1522.146785] rpc_tasks 3KB 3KB [ 1522.147413] UNIX 222KB 416KB [ 1522.148019] ip4-frags 7KB 7KB [ 1522.148647] UDP-Lite 63KB 63KB [ 1522.149268] tcp_bind_bucket 8KB 8KB [ 1522.149900] inet_peer_cache 8KB 8KB [ 1522.150531] xfrm_state 32KB 32KB [ 1522.151148] ip_fib_trie 8KB 8KB [ 1522.151774] ip_fib_alias 19KB 19KB [ 1522.152386] ip_dst_cache 56KB 56KB [ 1522.153006] PING 62KB 62KB [ 1522.153635] RAW 93KB 93KB [ 1522.154239] UDP 283KB 346KB [ 1522.154867] request_sock_TCP 7KB 7KB [ 1522.155490] TCP 60KB 60KB [ 1522.156097] hugetlbfs_inode_cache 30KB 30KB [ 1522.156755] bio-1 11KB 11KB [ 1522.157364] eventpoll_pwq 23KB 23KB [ 1522.157984] eventpoll_epi 43KB 43KB [ 1522.158608] inotify_inode_mark 46KB 46KB [ 1522.159230] request_queue 60KB 60KB [ 1522.159864] blkdev_ioc 30KB 30KB [ 1522.160495] bio-0 468KB 468KB [ 1522.161103] biovec-max 1160KB 1160KB [ 1522.161726] biovec-64 351KB 429KB [ 1522.162335] biovec-16 56KB 56KB [ 1522.162961] uid_cache 8KB 8KB [ 1522.163590] dmaengine-unmap-2 4KB 4KB [ 1522.164200] audit_buffer 7KB 7KB [ 1522.164825] skbuff_fclone_cache 127KB 142KB [ 1522.165480] skbuff_head_cache 461KB 558KB [ 1522.166089] file_lock_cache 40KB 63KB [ 1522.166711] file_lock_ctx 7KB 7KB [ 1522.167325] fsnotify_mark_connector 28KB 28KB [ 1522.168002] net_namespace 143KB 143KB [ 1522.168631] task_delay_info 121KB 135KB [ 1522.169240] taskstats 69KB 69KB [ 1522.169869] proc_dir_entry 375KB 390KB [ 1522.170491] pde_opener 39KB 39KB [ 1522.171109] seq_file 52KB 52KB [ 1522.171730] sigqueue 110KB 110KB [ 1522.172340] shmem_inode_cache 1294KB 1383KB [ 1522.172967] kernfs_iattrs_cache 247KB 247KB [ 1522.173618] kernfs_node_cache 5367KB 5453KB [ 1522.174230] mnt_cache 244KB 244KB [ 1522.174870] filp 1211KB 1462KB [ 1522.175490] names_cache 7526KB 7526KB [ 1522.176098] hashtab_node 274KB 274KB [ 1522.176718] ebitmap_node 1149KB 1149KB [ 1522.177326] avtab_node 4976KB 4976KB [ 1522.177952] avc_node 35KB 35KB [ 1522.178605] lsm_inode_cache 2529KB 2949KB [ 1522.179220] lsm_file_cache 141KB 216KB [ 1522.179843] key_jar 39KB 39KB [ 1522.180470] uts_namespace 15KB 15KB [ 1522.181078] nsproxy 11KB 11KB [ 1522.181718] vm_area_struct 1110KB 1276KB [ 1522.182329] fs_cache 77KB 96KB [ 1522.182958] files_cache 269KB 350KB [ 1522.183586] signal_cache 490KB 710KB [ 1522.184196] sighand_cache 249KB 390KB [ 1522.184828] task_struct 1069KB 1627KB [ 1522.185466] cred_jar 150KB 296KB [ 1522.186081] anon_vma_chain 254KB 374KB [ 1522.186701] anon_vma 131KB 195KB [ 1522.187317] pid 104KB 116KB [ 1522.187939] Acpi-Operand 215KB 245KB [ 1522.188566] Acpi-ParseExt 23KB 23KB [ 1522.189172] Acpi-Parse 197KB 213KB [ 1522.189801] Acpi-State 94KB 110KB [ 1522.190418] Acpi-Namespace 24KB 24KB [ 1522.191031] numa_policy 3KB 3KB [ 1522.191654] trace_event_file 176KB 176KB [ 1522.192257] ftrace_event_field 280KB 280KB [ 1522.192889] pool_workqueue 40KB 40KB [ 1522.193519] task_group 16KB 16KB [ 1522.194125] mm_struct 348KB 504KB [ 1522.194756] vmap_area 126KB 126KB [ 1522.195373] page->ptl 189KB 322KB [ 1522.195997] kmemleak_scan_area 67KB 67KB [ 1522.196627] kmemleak_object 1210493KB 1210493KB [ 1522.197244] kmalloc-8k 4560KB 4672KB [ 1522.197872] kmalloc-4k 7672KB 8192KB [ 1522.198508] kmalloc-2k 4444KB 5152KB [ 1522.199129] kmalloc-1k 2716KB 3680KB [ 1522.199750] kmalloc-512 42060KB 42060KB [ 1522.200358] kmalloc-256 1267KB 1280KB [ 1522.200979] kmalloc-192 550KB 552KB [ 1522.201611] kmalloc-128 528KB 648KB [ 1522.202234] kmalloc-96 363KB 596KB [ 1522.202887] kmalloc-64 862KB 1288KB [ 1522.203510] kmalloc-32 158568KB 158572KB [ 1522.204117] kmalloc-16 368KB 368KB [ 1522.204738] kmalloc-8 334KB 334KB [ 1522.205346] kmem_cache_node 47KB 47KB [ 1522.205972] kmem_cache 75KB 75KB [ 1522.206593] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=103,uid=0 [ 1522.208778] Out of memory (oom_kill_allocating_task): Killed process 103 (systemd-journal) total-vm:31944kB, anon-rss:884kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:88kB oom_score_adj:-250 [ 1522.995792] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1522.996931] CPU: 1 PID: 178 Comm: in:imklog Not tainted 5.10.237 #1 [ 1522.997652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1522.998598] Call Trace: [ 1522.998905] dump_stack+0x107/0x167 [ 1522.999325] dump_header+0x107/0x689 [ 1522.999753] oom_kill_process.cold+0x10/0x15 [ 1523.000260] out_of_memory+0x1149/0x1440 [ 1523.000726] ? oom_killer_disable+0x280/0x280 [ 1523.001238] ? mutex_trylock+0x237/0x2b0 [ 1523.001700] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1523.002375] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1523.003050] ? lock_acquire+0x137/0x470 [ 1523.003504] ? warn_alloc+0x190/0x190 [ 1523.003950] __alloc_pages_nodemask+0x51d/0x600 [ 1523.004485] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1523.005167] ? find_get_entry+0x2c8/0x740 [ 1523.005644] alloc_pages_current+0x187/0x280 [ 1523.006145] __page_cache_alloc+0x2d2/0x360 [ 1523.006640] pagecache_get_page+0x2c7/0xc80 [ 1523.007139] filemap_fault+0x177d/0x2210 [ 1523.007603] ? read_cache_page_gfp+0x30/0x30 [ 1523.008107] ? replace_page_cache_page+0x1200/0x1200 [ 1523.008679] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1523.009274] ext4_filemap_fault+0x87/0xc0 [ 1523.009749] __do_fault+0x113/0x410 [ 1523.010167] handle_mm_fault+0x1e53/0x3500 [ 1523.010652] ? find_held_lock+0x2c/0x110 [ 1523.011124] ? __pmd_alloc+0x5e0/0x5e0 [ 1523.011570] ? vmacache_find+0x55/0x2a0 [ 1523.012026] do_user_addr_fault+0x56e/0xc60 [ 1523.012521] exc_page_fault+0xa2/0x1a0 [ 1523.012965] ? asm_exc_page_fault+0x8/0x30 [ 1523.013446] asm_exc_page_fault+0x1e/0x30 [ 1523.013913] RIP: 0033:0x55c1b5037210 [ 1523.014336] Code: Unable to access opcode bytes at RIP 0x55c1b50371e6. [ 1523.015087] RSP: 002b:00007f399eb512b8 EFLAGS: 00010202 [ 1523.015689] RAX: 000055c1bb32dde0 RBX: 0000000000000000 RCX: 0000000000009c40 [ 1523.016503] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000055c1bb32de68 [ 1523.017318] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 1523.018128] R10: a3d70a3d70a3d70b R11: 0000000000000000 R12: 0000000000000001 [ 1523.018945] R13: 00007f3998044aa0 R14: 000055c1bb32dc80 R15: 00007f399eb51d7b [ 1523.019829] Mem-Info: [ 1523.020121] active_anon:33 inactive_anon:6869 isolated_anon:0 [ 1523.020121] active_file:27 inactive_file:9 isolated_file:0 [ 1523.020121] unevictable:0 dirty:0 writeback:0 [ 1523.020121] slab_reclaimable:6723 slab_unreclaimable:387115 [ 1523.020121] mapped:8736 shmem:73 pagetables:212 bounce:0 [ 1523.020121] free:2855 free_pcp:0 free_cma:0 [ 1523.023625] Node 0 active_anon:132kB inactive_anon:27476kB active_file:108kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34944kB dirty:0kB writeback:0kB shmem:292kB writeback_tmp:0kB kernel_stack:2848kB all_unreclaimable? yes [ 1523.026195] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1523.029125] lowmem_reserve[]: 0 1616 1616 1616 [ 1523.029679] Node 0 DMA32 free:4932kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:132kB inactive_anon:27476kB active_file:292kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:848kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1523.032868] lowmem_reserve[]: 0 0 0 0 [ 1523.033321] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1523.034875] Node 0 DMA32: 1250*4kB (UME) 30*8kB (M) 7*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5352kB [ 1523.036360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1523.037327] 113 total pagecache pages [ 1523.037769] 0 pages in swap cache [ 1523.038161] Swap cache stats: add 0, delete 0, find 0/0 [ 1523.038783] Free swap = 0kB [ 1523.039128] Total swap = 0kB [ 1523.039482] 524158 pages RAM [ 1523.039823] 0 pages HighMem/MovableOnly [ 1523.040266] 105069 pages reserved [ 1523.040667] Unreclaimable slab info: [ 1523.041086] Name Used Total [ 1523.041720] pid_2 67KB 67KB [ 1523.042325] IEEE-802.15.4-MAC 63KB 63KB [ 1523.042947] IEEE-802.15.4-RAW 63KB 63KB [ 1523.043606] p9_req_t 8KB 8KB [ 1523.044208] ip6-frags 15KB 15KB [ 1523.044838] fib6_nodes 36KB 36KB [ 1523.045453] ip6_dst_cache 41KB 41KB [ 1523.046059] RAWv6 252KB 252KB [ 1523.046674] UDPLITEv6 62KB 62KB [ 1523.047280] UDPv6 62KB 62KB [ 1523.047893] tw_sock_TCPv6 7KB 7KB [ 1523.048512] TCPv6 62KB 62KB [ 1523.049117] scsi_sense_cache 8KB 8KB [ 1523.049731] sd_ext_cdb 3KB 3KB [ 1523.050331] virtio_scsi_cmd 16KB 16KB [ 1523.050953] sgpool-128 89KB 89KB [ 1523.051569] sgpool-64 63KB 63KB [ 1523.052173] sgpool-32 261KB 293KB [ 1523.052785] sgpool-16 97KB 97KB [ 1523.053387] sgpool-8 63KB 63KB [ 1523.054000] io_kiocb 302KB 322KB [ 1523.054624] mqueue_inode_cache 62KB 62KB [ 1523.055239] nfs_commit_data 15KB 15KB [ 1523.055873] nfs_write_data 47KB 47KB [ 1523.056489] jbd2_inode 11KB 11KB [ 1523.057097] ext4_system_zone 7KB 7KB [ 1523.057711] ext4_io_end_vec 7KB 7KB [ 1523.058317] ext4_bio_post_read_ctx 15KB 15KB [ 1523.058985] kioctx 31KB 31KB [ 1523.059601] aio_kiocb 7KB 7KB [ 1523.060205] dnotify_mark 3KB 3KB [ 1523.060825] dnotify_struct 3KB 3KB [ 1523.061441] dio 46KB 46KB [ 1523.062048] bio-2 4KB 4KB [ 1523.062661] fasync_cache 7KB 7KB [ 1523.063276] pid_namespace 7KB 7KB [ 1523.063890] posix_timers_cache 15KB 15KB [ 1523.064517] rpc_buffers 31KB 31KB [ 1523.065116] rpc_tasks 3KB 3KB [ 1523.065748] UNIX 222KB 416KB [ 1523.066349] ip4-frags 7KB 7KB [ 1523.066985] UDP-Lite 63KB 63KB [ 1523.067605] tcp_bind_bucket 8KB 8KB [ 1523.068204] inet_peer_cache 8KB 8KB [ 1523.068822] xfrm_state 32KB 32KB [ 1523.069437] ip_fib_trie 8KB 8KB [ 1523.070034] ip_fib_alias 19KB 19KB [ 1523.070649] ip_dst_cache 56KB 56KB [ 1523.071254] PING 62KB 62KB [ 1523.071869] RAW 93KB 93KB [ 1523.072486] UDP 283KB 346KB [ 1523.073083] request_sock_TCP 7KB 7KB [ 1523.073699] TCP 60KB 60KB [ 1523.074297] hugetlbfs_inode_cache 30KB 30KB [ 1523.074954] bio-1 11KB 11KB [ 1523.075571] eventpoll_pwq 23KB 23KB [ 1523.076177] eventpoll_epi 43KB 43KB [ 1523.076800] inotify_inode_mark 46KB 46KB [ 1523.077440] request_queue 60KB 60KB [ 1523.078040] blkdev_ioc 30KB 30KB [ 1523.078658] bio-0 468KB 468KB [ 1523.079263] biovec-max 1160KB 1160KB [ 1523.079878] biovec-64 366KB 429KB [ 1523.080494] biovec-16 56KB 56KB [ 1523.081093] uid_cache 8KB 8KB [ 1523.081710] dmaengine-unmap-2 4KB 4KB [ 1523.082309] audit_buffer 7KB 7KB [ 1523.082936] skbuff_fclone_cache 127KB 142KB [ 1523.083578] skbuff_head_cache 460KB 558KB [ 1523.084178] file_lock_cache 40KB 63KB [ 1523.084795] file_lock_ctx 7KB 7KB [ 1523.085411] fsnotify_mark_connector 28KB 28KB [ 1523.086071] net_namespace 143KB 143KB [ 1523.086682] task_delay_info 121KB 135KB [ 1523.087289] taskstats 69KB 69KB [ 1523.087920] proc_dir_entry 374KB 390KB [ 1523.088534] pde_opener 39KB 39KB [ 1523.089138] seq_file 52KB 52KB [ 1523.089756] sigqueue 110KB 110KB [ 1523.090368] shmem_inode_cache 1294KB 1383KB [ 1523.090999] kernfs_iattrs_cache 247KB 247KB [ 1523.091633] kernfs_node_cache 5367KB 5453KB [ 1523.092235] mnt_cache 244KB 244KB [ 1523.092861] filp 1210KB 1462KB [ 1523.093480] names_cache 7526KB 7526KB [ 1523.094084] hashtab_node 274KB 274KB [ 1523.094702] ebitmap_node 1149KB 1149KB [ 1523.095310] avtab_node 4976KB 4976KB [ 1523.095925] avc_node 35KB 35KB [ 1523.096553] lsm_inode_cache 2526KB 2945KB [ 1523.097151] lsm_file_cache 141KB 216KB [ 1523.097770] key_jar 39KB 39KB [ 1523.098372] uts_namespace 15KB 15KB [ 1523.099004] nsproxy 11KB 11KB [ 1523.099632] vm_area_struct 1110KB 1276KB [ 1523.100237] fs_cache 77KB 96KB [ 1523.100861] files_cache 269KB 350KB [ 1523.101482] signal_cache 490KB 710KB [ 1523.102092] sighand_cache 249KB 390KB [ 1523.102715] task_struct 1069KB 1627KB [ 1523.103329] cred_jar 150KB 296KB [ 1523.103954] anon_vma_chain 254KB 374KB [ 1523.104568] anon_vma 126KB 187KB [ 1523.105173] pid 104KB 116KB [ 1523.105792] Acpi-Operand 215KB 245KB [ 1523.106411] Acpi-ParseExt 23KB 23KB [ 1523.107022] Acpi-Parse 197KB 213KB [ 1523.107641] Acpi-State 94KB 110KB [ 1523.108255] Acpi-Namespace 24KB 24KB [ 1523.108879] numa_policy 3KB 3KB [ 1523.109505] trace_event_file 176KB 176KB [ 1523.110114] ftrace_event_field 280KB 280KB [ 1523.110755] pool_workqueue 40KB 40KB [ 1523.111357] task_group 16KB 16KB [ 1523.111983] mm_struct 348KB 504KB [ 1523.112604] vmap_area 126KB 126KB [ 1523.113209] page->ptl 189KB 322KB [ 1523.113834] kmemleak_scan_area 67KB 67KB [ 1523.114459] kmemleak_object 1211096KB 1211096KB [ 1523.115072] kmalloc-8k 4464KB 4640KB [ 1523.115695] kmalloc-4k 7432KB 8192KB [ 1523.116301] kmalloc-2k 4372KB 5120KB [ 1523.116926] kmalloc-1k 2638KB 3680KB [ 1523.117543] kmalloc-512 42072KB 42092KB [ 1523.118151] kmalloc-256 1238KB 1280KB [ 1523.118770] kmalloc-192 550KB 552KB [ 1523.119404] kmalloc-128 527KB 648KB [ 1523.120010] kmalloc-96 360KB 592KB [ 1523.120647] kmalloc-64 861KB 1280KB [ 1523.121257] kmalloc-32 158688KB 158688KB [ 1523.121872] kmalloc-16 368KB 368KB [ 1523.122492] kmalloc-8 334KB 334KB [ 1523.123097] kmem_cache_node 47KB 47KB [ 1523.123719] kmem_cache 75KB 75KB [ 1523.124320] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=178,uid=0 [ 1523.126096] Out of memory (oom_kill_allocating_task): Killed process 173 (rsyslogd) total-vm:220876kB, anon-rss:1128kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 1524.080083] oom_reaper: reaped process 13220 (syz-executor.6), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1524.119607] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1524.120713] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.237 #1 [ 1524.121389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1524.122333] Call Trace: [ 1524.122634] dump_stack+0x107/0x167 [ 1524.123056] dump_header+0x107/0x689 [ 1524.123482] oom_kill_process.cold+0x10/0x15 [ 1524.123981] out_of_memory+0x358/0x1440 [ 1524.124441] ? oom_killer_disable+0x280/0x280 [ 1524.124950] ? mutex_trylock+0x237/0x2b0 [ 1524.125408] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1524.126084] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1524.126758] ? lock_acquire+0x137/0x470 [ 1524.127213] ? warn_alloc+0x190/0x190 [ 1524.127660] __alloc_pages_nodemask+0x51d/0x600 [ 1524.128189] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1524.128875] ? find_get_entry+0x2c8/0x740 [ 1524.129347] alloc_pages_current+0x187/0x280 [ 1524.129849] __page_cache_alloc+0x2d2/0x360 [ 1524.130340] pagecache_get_page+0x2c7/0xc80 [ 1524.130836] filemap_fault+0x177d/0x2210 [ 1524.131302] ? read_cache_page_gfp+0x30/0x30 [ 1524.131803] ? replace_page_cache_page+0x1200/0x1200 [ 1524.132376] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1524.132974] ext4_filemap_fault+0x87/0xc0 [ 1524.133443] __do_fault+0x113/0x410 [ 1524.133857] handle_mm_fault+0x1e53/0x3500 [ 1524.134338] ? find_held_lock+0x2c/0x110 [ 1524.134812] ? __pmd_alloc+0x5e0/0x5e0 [ 1524.135268] ? vmacache_find+0x55/0x2a0 [ 1524.135727] do_user_addr_fault+0x56e/0xc60 [ 1524.136219] exc_page_fault+0xa2/0x1a0 [ 1524.136656] ? asm_exc_page_fault+0x8/0x30 [ 1524.137136] asm_exc_page_fault+0x1e/0x30 [ 1524.137604] RIP: 0033:0x7f1b0c304edb [ 1524.138029] Code: Unable to access opcode bytes at RIP 0x7f1b0c304eb1. [ 1524.138787] RSP: 002b:00007ffc5921f2b8 EFLAGS: 00010283 [ 1524.139393] RAX: 000056345ef8d4c0 RBX: 00007ffc5921f2e0 RCX: 0000000000000031 [ 1524.140204] RDX: 0000000000000006 RSI: 00007f1b0c6a2a31 RDI: 000056345ef8d4c0 [ 1524.141018] RBP: 00007f1b0c6a2a31 R08: 000056345ef8d4c0 R09: 0000000000000001 [ 1524.141834] R10: d50bf52555a779ac R11: 0000000000000000 R12: 0000000000000044 [ 1524.142650] R13: 000056345ef8d4c0 R14: 00007ffc5921f510 R15: 00007ffc5921f4c0 [ 1524.143525] Mem-Info: [ 1524.143819] active_anon:32 inactive_anon:6447 isolated_anon:0 [ 1524.143819] active_file:5 inactive_file:0 isolated_file:0 [ 1524.143819] unevictable:0 dirty:0 writeback:0 [ 1524.143819] slab_reclaimable:6723 slab_unreclaimable:387551 [ 1524.143819] mapped:8705 shmem:73 pagetables:196 bounce:0 [ 1524.143819] free:2829 free_pcp:235 free_cma:0 [ 1524.147319] Node 0 active_anon:128kB inactive_anon:25788kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:0kB writeback:0kB shmem:292kB writeback_tmp:0kB kernel_stack:2720kB all_unreclaimable? yes [ 1524.149865] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.152801] lowmem_reserve[]: 0 1616 1616 1616 [ 1524.153337] Node 0 DMA32 free:4796kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:128kB inactive_anon:25788kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:784kB bounce:0kB free_pcp:936kB local_pcp:700kB free_cma:0kB [ 1524.156532] lowmem_reserve[]: 0 0 0 0 [ 1524.156983] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1524.158507] Node 0 DMA32: 1175*4kB (UME) 12*8kB (UM) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4796kB [ 1524.159953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1524.160925] 92 total pagecache pages [ 1524.161344] 0 pages in swap cache [ 1524.161751] Swap cache stats: add 0, delete 0, find 0/0 [ 1524.162351] Free swap = 0kB [ 1524.162707] Total swap = 0kB [ 1524.163052] 524158 pages RAM [ 1524.163407] 0 pages HighMem/MovableOnly [ 1524.163852] 105069 pages reserved [ 1524.164240] Unreclaimable slab info: [ 1524.164673] Name Used Total [ 1524.165289] pid_2 67KB 67KB [ 1524.165904] IEEE-802.15.4-MAC 63KB 63KB [ 1524.166522] IEEE-802.15.4-RAW 63KB 63KB [ 1524.167127] p9_req_t 8KB 8KB [ 1524.167743] ip6-frags 15KB 15KB [ 1524.168341] fib6_nodes 36KB 36KB [ 1524.168961] ip6_dst_cache 41KB 41KB [ 1524.169582] RAWv6 252KB 252KB [ 1524.170184] UDPLITEv6 62KB 62KB [ 1524.170806] UDPv6 62KB 62KB [ 1524.171426] tw_sock_TCPv6 7KB 7KB [ 1524.172025] TCPv6 62KB 62KB [ 1524.172642] scsi_sense_cache 8KB 8KB [ 1524.173238] sd_ext_cdb 3KB 3KB [ 1524.173851] virtio_scsi_cmd 16KB 16KB [ 1524.174475] sgpool-128 89KB 89KB [ 1524.175085] sgpool-64 63KB 63KB [ 1524.175707] sgpool-32 290KB 293KB [ 1524.176308] sgpool-16 97KB 97KB [ 1524.176923] sgpool-8 63KB 63KB [ 1524.177543] io_kiocb 302KB 322KB [ 1524.178143] mqueue_inode_cache 62KB 62KB [ 1524.178776] nfs_commit_data 15KB 15KB [ 1524.179376] nfs_write_data 47KB 47KB [ 1524.179991] jbd2_inode 11KB 11KB [ 1524.180607] ext4_system_zone 7KB 7KB [ 1524.181205] ext4_io_end_vec 7KB 7KB [ 1524.181820] ext4_bio_post_read_ctx 15KB 15KB [ 1524.182495] kioctx 31KB 31KB [ 1524.183101] aio_kiocb 7KB 7KB [ 1524.183716] dnotify_mark 3KB 3KB [ 1524.184314] dnotify_struct 3KB 3KB [ 1524.184934] dio 46KB 46KB [ 1524.185556] bio-2 4KB 4KB [ 1524.186156] fasync_cache 7KB 7KB [ 1524.186784] pid_namespace 7KB 7KB [ 1524.187386] posix_timers_cache 15KB 15KB [ 1524.188004] rpc_buffers 31KB 31KB [ 1524.188625] rpc_tasks 3KB 3KB [ 1524.189224] UNIX 222KB 416KB [ 1524.189846] ip4-frags 7KB 7KB [ 1524.190472] UDP-Lite 63KB 63KB [ 1524.191085] tcp_bind_bucket 8KB 8KB [ 1524.191713] inet_peer_cache 8KB 8KB [ 1524.192322] xfrm_state 32KB 32KB [ 1524.192944] ip_fib_trie 8KB 8KB [ 1524.193576] ip_fib_alias 19KB 19KB [ 1524.194185] ip_dst_cache 56KB 56KB [ 1524.194815] PING 62KB 62KB [ 1524.195436] RAW 93KB 93KB [ 1524.196043] UDP 283KB 346KB [ 1524.196668] request_sock_TCP 7KB 7KB [ 1524.197273] TCP 60KB 60KB [ 1524.197897] hugetlbfs_inode_cache 30KB 30KB [ 1524.198557] bio-1 11KB 11KB [ 1524.199172] eventpoll_pwq 23KB 23KB [ 1524.199793] eventpoll_epi 43KB 43KB [ 1524.200419] inotify_inode_mark 46KB 46KB [ 1524.201034] request_queue 60KB 60KB [ 1524.201657] blkdev_ioc 30KB 30KB [ 1524.202261] bio-0 468KB 468KB [ 1524.202890] biovec-max 1160KB 1160KB [ 1524.203518] biovec-64 382KB 429KB [ 1524.204128] biovec-16 56KB 56KB [ 1524.204748] uid_cache 8KB 8KB [ 1524.205356] dmaengine-unmap-2 4KB 4KB [ 1524.205980] audit_buffer 7KB 7KB [ 1524.206619] skbuff_fclone_cache 127KB 142KB [ 1524.207259] skbuff_head_cache 460KB 558KB [ 1524.207881] file_lock_cache 40KB 63KB [ 1524.208508] file_lock_ctx 7KB 7KB [ 1524.209113] fsnotify_mark_connector 28KB 28KB [ 1524.209790] net_namespace 143KB 143KB [ 1524.210415] task_delay_info 121KB 135KB [ 1524.211025] taskstats 69KB 69KB [ 1524.211644] proc_dir_entry 374KB 390KB [ 1524.212251] pde_opener 39KB 39KB [ 1524.212878] seq_file 52KB 52KB [ 1524.213499] sigqueue 110KB 110KB [ 1524.214104] shmem_inode_cache 1294KB 1383KB [ 1524.214728] kernfs_iattrs_cache 247KB 247KB [ 1524.215366] kernfs_node_cache 5367KB 5453KB [ 1524.215987] mnt_cache 244KB 244KB [ 1524.216613] filp 1210KB 1462KB [ 1524.217224] names_cache 7526KB 7526KB [ 1524.217845] hashtab_node 274KB 274KB [ 1524.218466] ebitmap_node 1149KB 1149KB [ 1524.219077] avtab_node 4976KB 4976KB [ 1524.219701] avc_node 35KB 35KB [ 1524.220324] lsm_inode_cache 2526KB 2945KB [ 1524.220949] lsm_file_cache 141KB 216KB [ 1524.221576] key_jar 39KB 39KB [ 1524.222182] uts_namespace 15KB 15KB [ 1524.222813] nsproxy 11KB 11KB [ 1524.223450] vm_area_struct 1110KB 1276KB [ 1524.224060] fs_cache 77KB 96KB [ 1524.224681] files_cache 269KB 350KB [ 1524.225289] signal_cache 490KB 710KB [ 1524.225917] sighand_cache 249KB 390KB [ 1524.226548] task_struct 1069KB 1627KB [ 1524.227170] cred_jar 150KB 296KB [ 1524.227797] anon_vma_chain 254KB 374KB [ 1524.228419] anon_vma 124KB 179KB [ 1524.229023] pid 104KB 116KB [ 1524.229645] Acpi-Operand 215KB 245KB [ 1524.230253] Acpi-ParseExt 23KB 23KB [ 1524.230885] Acpi-Parse 197KB 213KB [ 1524.231511] Acpi-State 94KB 110KB [ 1524.232114] Acpi-Namespace 24KB 24KB [ 1524.232739] numa_policy 3KB 3KB [ 1524.233342] trace_event_file 176KB 176KB [ 1524.233963] ftrace_event_field 280KB 280KB [ 1524.234597] pool_workqueue 40KB 40KB [ 1524.235209] task_group 16KB 16KB [ 1524.235833] mm_struct 348KB 504KB [ 1524.236461] vmap_area 126KB 126KB [ 1524.237071] page->ptl 189KB 322KB [ 1524.237693] kmemleak_scan_area 67KB 67KB [ 1524.238310] kmemleak_object 1212558KB 1212558KB [ 1524.238944] kmalloc-8k 4464KB 4640KB [ 1524.239572] kmalloc-4k 7432KB 8192KB [ 1524.240187] kmalloc-2k 4372KB 5120KB [ 1524.240811] kmalloc-1k 2638KB 3680KB [ 1524.241434] kmalloc-512 42124KB 42124KB [ 1524.242040] kmalloc-256 1238KB 1280KB [ 1524.242663] kmalloc-192 550KB 552KB [ 1524.243275] kmalloc-128 527KB 648KB [ 1524.243903] kmalloc-96 360KB 592KB [ 1524.244533] kmalloc-64 861KB 1280KB [ 1524.245142] kmalloc-32 158904KB 158904KB [ 1524.245765] kmalloc-16 368KB 368KB [ 1524.246370] kmalloc-8 334KB 334KB [ 1524.246999] kmem_cache_node 47KB 47KB [ 1524.247623] kmem_cache 75KB 75KB [ 1524.248229] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/networking.service,task=dhclient,pid=200,uid=0 [ 1524.250046] Out of memory: Killed process 200 (dhclient) total-vm:99800kB, anon-rss:1316kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1524.405700] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1524.406841] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.237 #1 [ 1524.407532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1524.408482] Call Trace: [ 1524.408787] dump_stack+0x107/0x167 [ 1524.409207] dump_header+0x107/0x689 [ 1524.409635] oom_kill_process.cold+0x10/0x15 [ 1524.410132] out_of_memory+0x358/0x1440 [ 1524.410586] ? oom_killer_disable+0x280/0x280 [ 1524.411097] ? mutex_trylock+0x237/0x2b0 [ 1524.411563] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1524.412231] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1524.412903] ? lock_acquire+0x137/0x470 [ 1524.413357] ? warn_alloc+0x190/0x190 [ 1524.413809] __alloc_pages_nodemask+0x51d/0x600 [ 1524.414340] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1524.415034] ? find_get_entry+0x2c8/0x740 [ 1524.415513] alloc_pages_current+0x187/0x280 [ 1524.416013] __page_cache_alloc+0x2d2/0x360 [ 1524.416501] pagecache_get_page+0x2c7/0xc80 [ 1524.416993] filemap_fault+0x177d/0x2210 [ 1524.417460] ? read_cache_page_gfp+0x30/0x30 [ 1524.417961] ? replace_page_cache_page+0x1200/0x1200 [ 1524.418536] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1524.419140] ext4_filemap_fault+0x87/0xc0 [ 1524.419607] __do_fault+0x113/0x410 [ 1524.420021] handle_mm_fault+0x1e53/0x3500 [ 1524.420502] ? find_held_lock+0x2c/0x110 [ 1524.420964] ? __pmd_alloc+0x5e0/0x5e0 [ 1524.421410] ? vmacache_find+0x55/0x2a0 [ 1524.421862] do_user_addr_fault+0x56e/0xc60 [ 1524.422356] exc_page_fault+0xa2/0x1a0 [ 1524.422803] ? asm_exc_page_fault+0x8/0x30 [ 1524.423280] asm_exc_page_fault+0x1e/0x30 [ 1524.423745] RIP: 0033:0x7f1b0c304edb [ 1524.424164] Code: Unable to access opcode bytes at RIP 0x7f1b0c304eb1. [ 1524.424902] RSP: 002b:00007ffc5921f2b8 EFLAGS: 00010283 [ 1524.425506] RAX: 000056345ef8d4c0 RBX: 00007ffc5921f2e0 RCX: 0000000000000031 [ 1524.426311] RDX: 0000000000000006 RSI: 00007f1b0c6a2a31 RDI: 000056345ef8d4c0 [ 1524.427122] RBP: 00007f1b0c6a2a31 R08: 000056345ef8d4c0 R09: 0000000000000001 [ 1524.427933] R10: d50bf52555a779ac R11: 0000000000000000 R12: 0000000000000044 [ 1524.428739] R13: 000056345ef8d4c0 R14: 00007ffc5921f510 R15: 00007ffc5921f4c0 [ 1524.429578] Mem-Info: [ 1524.429871] active_anon:31 inactive_anon:6104 isolated_anon:0 [ 1524.429871] active_file:0 inactive_file:3 isolated_file:0 [ 1524.429871] unevictable:0 dirty:0 writeback:0 [ 1524.429871] slab_reclaimable:6723 slab_unreclaimable:387539 [ 1524.429871] mapped:8705 shmem:73 pagetables:196 bounce:0 [ 1524.429871] free:3060 free_pcp:399 free_cma:0 [ 1524.433369] Node 0 active_anon:124kB inactive_anon:24416kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:0kB writeback:0kB shmem:292kB writeback_tmp:0kB kernel_stack:2592kB all_unreclaimable? yes [ 1524.435966] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.438948] lowmem_reserve[]: 0 1616 1616 1616 [ 1524.439507] Node 0 DMA32 free:5752kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:124kB inactive_anon:24416kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:784kB bounce:0kB free_pcp:1596kB local_pcp:1392kB free_cma:0kB [ 1524.442753] lowmem_reserve[]: 0 0 0 0 [ 1524.443209] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1524.444750] Node 0 DMA32: 1276*4kB (UME) 28*8kB (UM) 8*16kB (UME) 9*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5872kB [ 1524.446368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1524.447358] 91 total pagecache pages [ 1524.447815] 0 pages in swap cache [ 1524.448214] Swap cache stats: add 0, delete 0, find 0/0 [ 1524.448838] Free swap = 0kB [ 1524.449181] Total swap = 0kB [ 1524.449540] 524158 pages RAM [ 1524.449887] 0 pages HighMem/MovableOnly [ 1524.450334] 105069 pages reserved [ 1524.450749] Unreclaimable slab info: [ 1524.451177] Name Used Total [ 1524.451820] pid_2 67KB 67KB [ 1524.452444] IEEE-802.15.4-MAC 63KB 63KB [ 1524.453054] IEEE-802.15.4-RAW 63KB 63KB [ 1524.453673] p9_req_t 8KB 8KB [ 1524.454279] ip6-frags 15KB 15KB [ 1524.454913] fib6_nodes 36KB 36KB [ 1524.455540] ip6_dst_cache 41KB 41KB [ 1524.456146] RAWv6 252KB 252KB [ 1524.456772] UDPLITEv6 62KB 62KB [ 1524.457377] UDPv6 62KB 62KB [ 1524.458011] tw_sock_TCPv6 7KB 7KB [ 1524.458633] TCPv6 62KB 62KB [ 1524.459250] scsi_sense_cache 8KB 8KB [ 1524.459873] sd_ext_cdb 3KB 3KB [ 1524.460495] virtio_scsi_cmd 16KB 16KB [ 1524.461106] sgpool-128 89KB 89KB [ 1524.461730] sgpool-64 63KB 63KB [ 1524.462336] sgpool-32 290KB 293KB [ 1524.462966] sgpool-16 97KB 97KB [ 1524.463589] sgpool-8 63KB 63KB [ 1524.464202] io_kiocb 302KB 322KB [ 1524.464825] mqueue_inode_cache 62KB 62KB [ 1524.465460] nfs_commit_data 15KB 15KB [ 1524.466067] nfs_write_data 47KB 47KB [ 1524.466690] jbd2_inode 11KB 11KB [ 1524.467302] ext4_system_zone 7KB 7KB [ 1524.467933] ext4_io_end_vec 7KB 7KB [ 1524.468558] ext4_bio_post_read_ctx 15KB 15KB [ 1524.469218] kioctx 31KB 31KB [ 1524.469842] aio_kiocb 7KB 7KB [ 1524.470463] dnotify_mark 3KB 3KB [ 1524.471074] dnotify_struct 3KB 3KB [ 1524.471696] dio 46KB 46KB [ 1524.472301] bio-2 4KB 4KB [ 1524.472921] fasync_cache 7KB 7KB [ 1524.473542] pid_namespace 7KB 7KB [ 1524.474158] posix_timers_cache 15KB 15KB [ 1524.474795] rpc_buffers 31KB 31KB [ 1524.475421] rpc_tasks 3KB 3KB [ 1524.476026] UNIX 222KB 416KB [ 1524.476651] ip4-frags 7KB 7KB [ 1524.477258] UDP-Lite 63KB 63KB [ 1524.477876] tcp_bind_bucket 8KB 8KB [ 1524.478496] inet_peer_cache 8KB 8KB [ 1524.479107] xfrm_state 32KB 32KB [ 1524.479728] ip_fib_trie 8KB 8KB [ 1524.480334] ip_fib_alias 19KB 19KB [ 1524.480958] ip_dst_cache 56KB 56KB [ 1524.481585] PING 62KB 62KB [ 1524.482193] RAW 93KB 93KB [ 1524.482823] UDP 283KB 346KB [ 1524.483449] request_sock_TCP 7KB 7KB [ 1524.484060] TCP 60KB 60KB [ 1524.484686] hugetlbfs_inode_cache 30KB 30KB [ 1524.485332] bio-1 11KB 11KB [ 1524.485957] eventpoll_pwq 23KB 23KB [ 1524.486581] eventpoll_epi 43KB 43KB [ 1524.487198] inotify_inode_mark 46KB 46KB [ 1524.487832] request_queue 60KB 60KB [ 1524.488457] blkdev_ioc 30KB 30KB [ 1524.489063] bio-0 468KB 468KB [ 1524.489684] biovec-max 1160KB 1160KB [ 1524.490289] biovec-64 382KB 429KB [ 1524.490923] biovec-16 56KB 56KB [ 1524.491546] uid_cache 8KB 8KB [ 1524.492151] dmaengine-unmap-2 4KB 4KB [ 1524.492772] audit_buffer 7KB 7KB [ 1524.493379] skbuff_fclone_cache 127KB 142KB [ 1524.494021] skbuff_head_cache 460KB 558KB [ 1524.494645] file_lock_cache 40KB 63KB [ 1524.495259] file_lock_ctx 7KB 7KB [ 1524.495890] fsnotify_mark_connector 28KB 28KB [ 1524.496568] net_namespace 143KB 143KB [ 1524.497179] task_delay_info 121KB 135KB [ 1524.497801] taskstats 69KB 69KB [ 1524.498421] proc_dir_entry 374KB 390KB [ 1524.499037] pde_opener 39KB 39KB [ 1524.499658] seq_file 52KB 52KB [ 1524.500264] sigqueue 110KB 110KB [ 1524.500884] shmem_inode_cache 1294KB 1383KB [ 1524.501508] kernfs_iattrs_cache 247KB 247KB [ 1524.502137] kernfs_node_cache 5344KB 5438KB [ 1524.502763] mnt_cache 244KB 244KB [ 1524.503375] filp 1206KB 1462KB [ 1524.503995] names_cache 7526KB 7526KB [ 1524.504621] hashtab_node 274KB 274KB [ 1524.505234] ebitmap_node 1149KB 1149KB [ 1524.505861] avtab_node 4976KB 4976KB [ 1524.506486] avc_node 35KB 35KB [ 1524.507102] lsm_inode_cache 2523KB 2945KB [ 1524.507734] lsm_file_cache 141KB 216KB [ 1524.508343] key_jar 39KB 39KB [ 1524.508966] uts_namespace 15KB 15KB [ 1524.509589] nsproxy 11KB 11KB [ 1524.510202] vm_area_struct 1110KB 1276KB [ 1524.510834] fs_cache 77KB 96KB [ 1524.511461] files_cache 269KB 350KB [ 1524.512071] signal_cache 490KB 710KB [ 1524.512694] sighand_cache 249KB 390KB [ 1524.513297] task_struct 1069KB 1627KB [ 1524.513919] cred_jar 150KB 296KB [ 1524.514543] anon_vma_chain 254KB 374KB [ 1524.515159] anon_vma 117KB 171KB [ 1524.515781] pid 104KB 116KB [ 1524.516414] Acpi-Operand 215KB 245KB [ 1524.517030] Acpi-ParseExt 23KB 23KB [ 1524.517659] Acpi-Parse 197KB 213KB [ 1524.518277] Acpi-State 94KB 110KB [ 1524.518914] Acpi-Namespace 24KB 24KB [ 1524.519543] numa_policy 3KB 3KB [ 1524.520180] trace_event_file 176KB 176KB [ 1524.520815] ftrace_event_field 280KB 280KB [ 1524.521453] pool_workqueue 40KB 40KB [ 1524.522066] task_group 16KB 16KB [ 1524.522688] mm_struct 348KB 504KB [ 1524.523297] vmap_area 126KB 126KB [ 1524.523939] page->ptl 189KB 322KB [ 1524.524556] kmemleak_scan_area 67KB 67KB [ 1524.525172] kmemleak_object 1212535KB 1212535KB [ 1524.525812] kmalloc-8k 4320KB 4544KB [ 1524.526449] kmalloc-4k 7080KB 8160KB [ 1524.527072] kmalloc-2k 4344KB 5120KB [ 1524.527699] kmalloc-1k 2620KB 3680KB [ 1524.528317] kmalloc-512 42128KB 42128KB [ 1524.528944] kmalloc-256 1231KB 1280KB [ 1524.529570] kmalloc-192 550KB 552KB [ 1524.530182] kmalloc-128 524KB 648KB [ 1524.530814] kmalloc-96 360KB 592KB [ 1524.531443] kmalloc-64 860KB 1280KB [ 1524.532055] kmalloc-32 158948KB 158948KB [ 1524.532678] kmalloc-16 368KB 368KB [ 1524.533287] kmalloc-8 334KB 334KB [ 1524.533917] kmem_cache_node 47KB 47KB [ 1524.534550] kmem_cache 75KB 75KB [ 1524.535164] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-timesyncd.service,task=systemd-timesyn,pid=118,uid=101 [ 1524.537614] Out of memory: Killed process 118 (systemd-timesyn) total-vm:88376kB, anon-rss:688kB, file-rss:0kB, shmem-rss:0kB, UID:101 pgtables:72kB oom_score_adj:0 [ 1524.819840] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1524.820941] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.237 #1 [ 1524.821629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1524.822583] Call Trace: [ 1524.822893] dump_stack+0x107/0x167 [ 1524.823319] dump_header+0x107/0x689 [ 1524.823748] oom_kill_process.cold+0x10/0x15 [ 1524.824252] out_of_memory+0x358/0x1440 [ 1524.824708] ? oom_killer_disable+0x280/0x280 [ 1524.825218] ? mutex_trylock+0x237/0x2b0 [ 1524.825676] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1524.826353] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1524.827039] ? lock_acquire+0x137/0x470 [ 1524.827496] ? warn_alloc+0x190/0x190 [ 1524.827945] __alloc_pages_nodemask+0x51d/0x600 [ 1524.828489] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1524.829178] ? find_get_entry+0x2c8/0x740 [ 1524.829661] alloc_pages_current+0x187/0x280 [ 1524.830162] __page_cache_alloc+0x2d2/0x360 [ 1524.830661] pagecache_get_page+0x2c7/0xc80 [ 1524.831170] filemap_fault+0x177d/0x2210 [ 1524.831646] ? read_cache_page_gfp+0x30/0x30 [ 1524.832150] ? replace_page_cache_page+0x1200/0x1200 [ 1524.832735] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1524.833336] ext4_filemap_fault+0x87/0xc0 [ 1524.833814] __do_fault+0x113/0x410 [ 1524.834235] handle_mm_fault+0x1e53/0x3500 [ 1524.834721] ? find_held_lock+0x2c/0x110 [ 1524.835190] ? __pmd_alloc+0x5e0/0x5e0 [ 1524.835637] ? vmacache_find+0x55/0x2a0 [ 1524.836093] do_user_addr_fault+0x56e/0xc60 [ 1524.836589] exc_page_fault+0xa2/0x1a0 [ 1524.837031] ? asm_exc_page_fault+0x8/0x30 [ 1524.837512] asm_exc_page_fault+0x1e/0x30 [ 1524.837978] RIP: 0033:0x7f1b0c304edb [ 1524.838402] Code: Unable to access opcode bytes at RIP 0x7f1b0c304eb1. [ 1524.839156] RSP: 002b:00007ffc5921f2b8 EFLAGS: 00010283 [ 1524.839757] RAX: 000056345ef8d4c0 RBX: 00007ffc5921f2e0 RCX: 0000000000000031 [ 1524.840570] RDX: 0000000000000006 RSI: 00007f1b0c6a2a31 RDI: 000056345ef8d4c0 [ 1524.841379] RBP: 00007f1b0c6a2a31 R08: 000056345ef8d4c0 R09: 0000000000000001 [ 1524.842190] R10: d50bf52555a779ac R11: 0000000000000000 R12: 0000000000000044 [ 1524.843005] R13: 000056345ef8d4c0 R14: 00007ffc5921f510 R15: 00007ffc5921f4c0 [ 1524.843882] Mem-Info: [ 1524.844177] active_anon:31 inactive_anon:5936 isolated_anon:0 [ 1524.844177] active_file:31 inactive_file:3 isolated_file:0 [ 1524.844177] unevictable:0 dirty:0 writeback:0 [ 1524.844177] slab_reclaimable:6723 slab_unreclaimable:387464 [ 1524.844177] mapped:8705 shmem:73 pagetables:196 bounce:0 [ 1524.844177] free:3162 free_pcp:595 free_cma:0 [ 1524.847684] Node 0 active_anon:124kB inactive_anon:23744kB active_file:124kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:0kB writeback:0kB shmem:292kB writeback_tmp:0kB kernel_stack:2528kB all_unreclaimable? yes [ 1524.850279] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.853291] lowmem_reserve[]: 0 1616 1616 1616 [ 1524.853847] Node 0 DMA32 free:6160kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:124kB inactive_anon:23744kB active_file:124kB inactive_file:12kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:784kB bounce:0kB free_pcp:2380kB local_pcp:1376kB free_cma:0kB [ 1524.857103] lowmem_reserve[]: 0 0 0 0 [ 1524.857575] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1524.859107] Node 0 DMA32: 1276*4kB (UME) 25*8kB (UM) 8*16kB (UME) 19*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6232kB [ 1524.860730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1524.861702] 91 total pagecache pages [ 1524.862119] 0 pages in swap cache [ 1524.862529] Swap cache stats: add 0, delete 0, find 0/0 [ 1524.863137] Free swap = 0kB [ 1524.863496] Total swap = 0kB [ 1524.863836] 524158 pages RAM [ 1524.864177] 0 pages HighMem/MovableOnly [ 1524.864641] 105069 pages reserved [ 1524.865033] Unreclaimable slab info: [ 1524.865467] Name Used Total [ 1524.866094] pid_2 67KB 67KB [ 1524.866710] IEEE-802.15.4-MAC 63KB 63KB [ 1524.867320] IEEE-802.15.4-RAW 63KB 63KB [ 1524.867940] p9_req_t 8KB 8KB [ 1524.868558] ip6-frags 15KB 15KB [ 1524.869164] fib6_nodes 36KB 36KB [ 1524.869784] ip6_dst_cache 41KB 41KB [ 1524.870405] RAWv6 252KB 252KB [ 1524.871009] UDPLITEv6 62KB 62KB [ 1524.871625] UDPv6 62KB 62KB [ 1524.872226] tw_sock_TCPv6 7KB 7KB [ 1524.872844] TCPv6 62KB 62KB [ 1524.873461] scsi_sense_cache 8KB 8KB [ 1524.874063] sd_ext_cdb 3KB 3KB [ 1524.874682] virtio_scsi_cmd 16KB 16KB [ 1524.875298] sgpool-128 89KB 89KB [ 1524.875916] sgpool-64 63KB 63KB [ 1524.876530] sgpool-32 290KB 293KB [ 1524.877139] sgpool-16 97KB 97KB [ 1524.877752] sgpool-8 63KB 63KB [ 1524.878354] io_kiocb 302KB 322KB [ 1524.878983] mqueue_inode_cache 62KB 62KB [ 1524.879614] nfs_commit_data 15KB 15KB [ 1524.880215] nfs_write_data 47KB 47KB [ 1524.880833] jbd2_inode 11KB 11KB [ 1524.881453] ext4_system_zone 7KB 7KB [ 1524.882052] ext4_io_end_vec 7KB 7KB [ 1524.882670] ext4_bio_post_read_ctx 15KB 15KB [ 1524.883332] kioctx 31KB 31KB [ 1524.883954] aio_kiocb 7KB 7KB [ 1524.884576] dnotify_mark 3KB 3KB [ 1524.885176] dnotify_struct 3KB 3KB [ 1524.885793] dio 46KB 46KB [ 1524.886407] bio-2 4KB 4KB [ 1524.887014] fasync_cache 7KB 7KB [ 1524.887634] pid_namespace 7KB 7KB [ 1524.888236] posix_timers_cache 15KB 15KB [ 1524.888860] rpc_buffers 31KB 31KB [ 1524.889480] rpc_tasks 3KB 3KB [ 1524.890083] UNIX 222KB 416KB [ 1524.890697] ip4-frags 7KB 7KB [ 1524.891304] UDP-Lite 63KB 63KB [ 1524.891925] tcp_bind_bucket 8KB 8KB [ 1524.892540] inet_peer_cache 8KB 8KB [ 1524.893141] xfrm_state 32KB 32KB [ 1524.893755] ip_fib_trie 8KB 8KB [ 1524.894355] ip_fib_alias 19KB 19KB [ 1524.894986] ip_dst_cache 56KB 56KB [ 1524.895602] PING 62KB 62KB [ 1524.896202] RAW 93KB 93KB [ 1524.896821] UDP 283KB 346KB [ 1524.897441] request_sock_TCP 7KB 7KB [ 1524.898040] TCP 60KB 60KB [ 1524.898657] hugetlbfs_inode_cache 30KB 30KB [ 1524.899302] bio-1 11KB 11KB [ 1524.899918] eventpoll_pwq 23KB 23KB [ 1524.900534] eventpoll_epi 43KB 43KB [ 1524.901133] inotify_inode_mark 46KB 46KB [ 1524.901760] request_queue 60KB 60KB [ 1524.902359] blkdev_ioc 30KB 30KB [ 1524.902982] bio-0 468KB 468KB [ 1524.903596] biovec-max 1160KB 1160KB [ 1524.904200] biovec-64 382KB 429KB [ 1524.904815] biovec-16 56KB 56KB [ 1524.905436] uid_cache 8KB 8KB [ 1524.906037] dmaengine-unmap-2 4KB 4KB [ 1524.906663] audit_buffer 7KB 7KB [ 1524.907275] skbuff_fclone_cache 127KB 142KB [ 1524.907913] skbuff_head_cache 460KB 558KB [ 1524.908530] file_lock_cache 40KB 63KB [ 1524.909129] file_lock_ctx 7KB 7KB [ 1524.909748] fsnotify_mark_connector 28KB 28KB [ 1524.910423] net_namespace 143KB 143KB [ 1524.911035] task_delay_info 121KB 135KB [ 1524.911648] taskstats 69KB 69KB [ 1524.912253] proc_dir_entry 374KB 390KB [ 1524.912865] pde_opener 39KB 39KB [ 1524.913484] seq_file 52KB 52KB [ 1524.914082] sigqueue 110KB 110KB [ 1524.914702] shmem_inode_cache 1294KB 1383KB [ 1524.915312] kernfs_iattrs_cache 247KB 247KB [ 1524.915949] kernfs_node_cache 5344KB 5438KB [ 1524.916580] mnt_cache 244KB 244KB [ 1524.917192] filp 1175KB 1455KB [ 1524.917814] names_cache 7514KB 7526KB [ 1524.918432] hashtab_node 274KB 274KB [ 1524.919042] ebitmap_node 1149KB 1149KB [ 1524.919663] avtab_node 4976KB 4976KB [ 1524.920264] avc_node 35KB 35KB [ 1524.920886] lsm_inode_cache 2522KB 2945KB [ 1524.921508] lsm_file_cache 140KB 216KB [ 1524.922123] key_jar 39KB 39KB [ 1524.922745] uts_namespace 15KB 15KB [ 1524.923349] nsproxy 11KB 11KB [ 1524.923964] vm_area_struct 1110KB 1276KB [ 1524.924583] fs_cache 77KB 96KB [ 1524.925191] files_cache 269KB 350KB [ 1524.925809] signal_cache 489KB 710KB [ 1524.926420] sighand_cache 249KB 390KB [ 1524.927040] task_struct 1063KB 1627KB [ 1524.927659] cred_jar 101KB 292KB [ 1524.928265] anon_vma_chain 254KB 374KB [ 1524.928882] anon_vma 113KB 167KB [ 1524.929503] pid 104KB 116KB [ 1524.930110] Acpi-Operand 215KB 245KB [ 1524.930732] Acpi-ParseExt 23KB 23KB [ 1524.931364] Acpi-Parse 197KB 213KB [ 1524.931995] Acpi-State 94KB 110KB [ 1524.932634] Acpi-Namespace 24KB 24KB [ 1524.933255] numa_policy 3KB 3KB [ 1524.933880] trace_event_file 176KB 176KB [ 1524.934514] ftrace_event_field 280KB 280KB [ 1524.935156] pool_workqueue 40KB 40KB [ 1524.935791] task_group 16KB 16KB [ 1524.936425] mm_struct 348KB 504KB [ 1524.937043] vmap_area 126KB 126KB [ 1524.937672] page->ptl 189KB 322KB [ 1524.938293] kmemleak_scan_area 67KB 67KB [ 1524.938942] kmemleak_object 1212558KB 1212558KB [ 1524.939585] kmalloc-8k 4144KB 4384KB [ 1524.940206] kmalloc-4k 6856KB 8032KB [ 1524.940838] kmalloc-2k 4288KB 5120KB [ 1524.941475] kmalloc-1k 2604KB 3648KB [ 1524.942098] kmalloc-512 42115KB 42128KB [ 1524.942749] kmalloc-256 1210KB 1280KB [ 1524.943369] kmalloc-192 550KB 552KB [ 1524.944003] kmalloc-128 523KB 648KB [ 1524.944643] kmalloc-96 359KB 592KB [ 1524.945261] kmalloc-64 858KB 1276KB [ 1524.945899] kmalloc-32 158988KB 158988KB [ 1524.946532] kmalloc-16 368KB 368KB [ 1524.947153] kmalloc-8 334KB 334KB [ 1524.947783] kmem_cache_node 47KB 47KB [ 1524.948417] kmem_cache 75KB 75KB [ 1524.949037] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/cron.service,task=cron,pid=169,uid=0 [ 1524.951000] Out of memory: Killed process 169 (cron) total-vm:5576kB, anon-rss:220kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:48kB oom_score_adj:0 [ 1525.125208] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1525.126310] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.237 #1 [ 1525.126998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1525.127952] Call Trace: [ 1525.128258] dump_stack+0x107/0x167 [ 1525.128676] dump_header+0x107/0x689 [ 1525.129113] oom_kill_process.cold+0x10/0x15 [ 1525.129620] out_of_memory+0x358/0x1440 [ 1525.130089] ? oom_killer_disable+0x280/0x280 [ 1525.130604] ? mutex_trylock+0x237/0x2b0 [ 1525.131075] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1525.131753] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1525.132434] ? lock_acquire+0x137/0x470 [ 1525.132903] ? warn_alloc+0x190/0x190 [ 1525.133356] __alloc_pages_nodemask+0x51d/0x600 [ 1525.133894] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1525.134582] ? find_get_entry+0x2c8/0x740 [ 1525.135069] alloc_pages_current+0x187/0x280 [ 1525.135570] __page_cache_alloc+0x2d2/0x360 [ 1525.136061] pagecache_get_page+0x2c7/0xc80 [ 1525.136562] filemap_fault+0x177d/0x2210 [ 1525.137030] ? read_cache_page_gfp+0x30/0x30 [ 1525.137534] ? replace_page_cache_page+0x1200/0x1200 [ 1525.138113] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1525.138715] ext4_filemap_fault+0x87/0xc0 [ 1525.139196] __do_fault+0x113/0x410 [ 1525.139616] handle_mm_fault+0x1e53/0x3500 [ 1525.140102] ? find_held_lock+0x2c/0x110 [ 1525.140567] ? __pmd_alloc+0x5e0/0x5e0 [ 1525.141018] ? vmacache_find+0x55/0x2a0 [ 1525.141479] do_user_addr_fault+0x56e/0xc60 [ 1525.141979] exc_page_fault+0xa2/0x1a0 [ 1525.142424] ? asm_exc_page_fault+0x8/0x30 [ 1525.142915] asm_exc_page_fault+0x1e/0x30 [ 1525.143385] RIP: 0033:0x7f1b0c304edb [ 1525.143809] Code: Unable to access opcode bytes at RIP 0x7f1b0c304eb1. [ 1525.144558] RSP: 002b:00007ffc5921f2b8 EFLAGS: 00010283 [ 1525.145169] RAX: 000056345ef8d4c0 RBX: 00007ffc5921f2e0 RCX: 0000000000000031 [ 1525.145990] RDX: 0000000000000006 RSI: 00007f1b0c6a2a31 RDI: 000056345ef8d4c0 [ 1525.146814] RBP: 00007f1b0c6a2a31 R08: 000056345ef8d4c0 R09: 0000000000000001 [ 1525.147633] R10: d50bf52555a779ac R11: 0000000000000000 R12: 0000000000000044 [ 1525.148453] R13: 000056345ef8d4c0 R14: 00007ffc5921f510 R15: 00007ffc5921f4c0 [ 1525.149312] Mem-Info: [ 1525.149621] active_anon:30 inactive_anon:5863 isolated_anon:0 [ 1525.149621] active_file:0 inactive_file:3 isolated_file:0 [ 1525.149621] unevictable:0 dirty:0 writeback:0 [ 1525.149621] slab_reclaimable:6723 slab_unreclaimable:387465 [ 1525.149621] mapped:8705 shmem:73 pagetables:171 bounce:0 [ 1525.149621] free:3249 free_pcp:613 free_cma:0 [ 1525.153122] Node 0 active_anon:120kB inactive_anon:23452kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:0kB writeback:0kB shmem:292kB writeback_tmp:0kB kernel_stack:2496kB all_unreclaimable? yes [ 1525.155721] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1525.158702] lowmem_reserve[]: 0 1616 1616 1616 [ 1525.159251] Node 0 DMA32 free:6508kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:120kB inactive_anon:23452kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:684kB bounce:0kB free_pcp:2452kB local_pcp:1452kB free_cma:0kB [ 1525.162488] lowmem_reserve[]: 0 0 0 0 [ 1525.162952] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1525.164486] Node 0 DMA32: 1287*4kB (UME) 28*8kB (UM) 10*16kB (UME) 22*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6492kB [ 1525.166128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1525.167111] 91 total pagecache pages [ 1525.167554] 0 pages in swap cache [ 1525.167947] Swap cache stats: add 0, delete 0, find 0/0 [ 1525.168564] Free swap = 0kB [ 1525.168907] Total swap = 0kB [ 1525.169250] 524158 pages RAM [ 1525.169611] 0 pages HighMem/MovableOnly [ 1525.170063] 105069 pages reserved [ 1525.170471] Unreclaimable slab info: [ 1525.170901] Name Used Total [ 1525.171543] pid_2 67KB 67KB [ 1525.172151] IEEE-802.15.4-MAC 63KB 63KB [ 1525.172773] IEEE-802.15.4-RAW 63KB 63KB [ 1525.173376] p9_req_t 8KB 8KB [ 1525.174004] ip6-frags 15KB 15KB [ 1525.174630] fib6_nodes 36KB 36KB [ 1525.175244] ip6_dst_cache 41KB 41KB [ 1525.175868] RAWv6 252KB 252KB [ 1525.176489] UDPLITEv6 62KB 62KB [ 1525.177096] UDPv6 62KB 62KB [ 1525.177723] tw_sock_TCPv6 7KB 7KB [ 1525.178329] TCPv6 62KB 62KB [ 1525.178963] scsi_sense_cache 8KB 8KB [ 1525.179584] sd_ext_cdb 3KB 3KB [ 1525.180186] virtio_scsi_cmd 16KB 16KB [ 1525.180809] sgpool-128 89KB 89KB [ 1525.181434] sgpool-64 63KB 63KB [ 1525.182044] sgpool-32 290KB 293KB [ 1525.182663] sgpool-16 97KB 97KB [ 1525.183282] sgpool-8 63KB 63KB [ 1525.183902] io_kiocb 302KB 322KB [ 1525.184526] mqueue_inode_cache 62KB 62KB [ 1525.185143] nfs_commit_data 15KB 15KB [ 1525.185774] nfs_write_data 47KB 47KB [ 1525.186382] jbd2_inode 11KB 11KB [ 1525.187013] ext4_system_zone 7KB 7KB [ 1525.187632] ext4_io_end_vec 7KB 7KB [ 1525.188237] ext4_bio_post_read_ctx 15KB 15KB [ 1525.188909] kioctx 31KB 31KB [ 1525.189530] aio_kiocb 7KB 7KB [ 1525.190138] dnotify_mark 3KB 3KB [ 1525.190767] dnotify_struct 3KB 3KB [ 1525.191375] dio 46KB 46KB [ 1525.191997] bio-2 4KB 4KB [ 1525.192621] fasync_cache 7KB 7KB [ 1525.193226] pid_namespace 7KB 7KB [ 1525.193846] posix_timers_cache 15KB 15KB [ 1525.194482] rpc_buffers 31KB 31KB [ 1525.195100] rpc_tasks 3KB 3KB [ 1525.195724] UNIX 222KB 416KB [ 1525.196325] ip4-frags 7KB 7KB [ 1525.196946] UDP-Lite 63KB 63KB [ 1525.197559] tcp_bind_bucket 8KB 8KB [ 1525.198161] inet_peer_cache 8KB 8KB [ 1525.198784] xfrm_state 32KB 32KB [ 1525.199390] ip_fib_trie 8KB 8KB [ 1525.200002] ip_fib_alias 19KB 19KB [ 1525.200617] ip_dst_cache 56KB 56KB [ 1525.201214] PING 62KB 62KB [ 1525.201827] RAW 93KB 93KB [ 1525.202447] UDP 283KB 346KB [ 1525.203052] request_sock_TCP 7KB 7KB [ 1525.203666] TCP 60KB 60KB [ 1525.204273] hugetlbfs_inode_cache 30KB 30KB [ 1525.204927] bio-1 11KB 11KB [ 1525.205547] eventpoll_pwq 23KB 23KB [ 1525.206145] eventpoll_epi 43KB 43KB [ 1525.206767] inotify_inode_mark 46KB 46KB [ 1525.207381] request_queue 60KB 60KB [ 1525.208005] blkdev_ioc 30KB 30KB [ 1525.208623] bio-0 468KB 468KB [ 1525.209222] biovec-max 1160KB 1160KB [ 1525.209839] biovec-64 382KB 429KB [ 1525.210457] biovec-16 56KB 56KB [ 1525.211064] uid_cache 8KB 8KB [ 1525.211680] dmaengine-unmap-2 4KB 4KB [ 1525.212279] audit_buffer 7KB 7KB [ 1525.212899] skbuff_fclone_cache 127KB 142KB [ 1525.213536] skbuff_head_cache 460KB 558KB [ 1525.214139] file_lock_cache 40KB 63KB [ 1525.214758] file_lock_ctx 7KB 7KB [ 1525.215359] fsnotify_mark_connector 28KB 28KB [ 1525.216031] net_namespace 143KB 143KB [ 1525.216647] task_delay_info 121KB 135KB [ 1525.217249] taskstats 69KB 69KB [ 1525.217864] proc_dir_entry 374KB 390KB [ 1525.218483] pde_opener 39KB 39KB [ 1525.219092] seq_file 52KB 52KB [ 1525.219709] sigqueue 110KB 110KB [ 1525.220313] shmem_inode_cache 1294KB 1383KB [ 1525.220929] kernfs_iattrs_cache 247KB 247KB [ 1525.221568] kernfs_node_cache 5344KB 5438KB [ 1525.222169] mnt_cache 244KB 244KB [ 1525.222790] filp 1175KB 1455KB [ 1525.223406] names_cache 7514KB 7526KB [ 1525.224006] hashtab_node 274KB 274KB [ 1525.224624] ebitmap_node 1149KB 1149KB [ 1525.225224] avtab_node 4976KB 4976KB [ 1525.225841] avc_node 35KB 35KB [ 1525.226471] lsm_inode_cache 2522KB 2945KB [ 1525.227079] lsm_file_cache 140KB 216KB [ 1525.227692] key_jar 39KB 39KB [ 1525.228291] uts_namespace 15KB 15KB [ 1525.228905] nsproxy 11KB 11KB [ 1525.229521] vm_area_struct 1110KB 1276KB [ 1525.230126] fs_cache 77KB 96KB [ 1525.230740] files_cache 269KB 350KB [ 1525.231350] signal_cache 489KB 710KB [ 1525.231967] sighand_cache 249KB 390KB [ 1525.232586] task_struct 1063KB 1627KB [ 1525.233191] cred_jar 101KB 292KB [ 1525.233807] anon_vma_chain 254KB 374KB [ 1525.234420] anon_vma 113KB 163KB [ 1525.235027] pid 104KB 116KB [ 1525.235642] Acpi-Operand 215KB 245KB [ 1525.236247] Acpi-ParseExt 23KB 23KB [ 1525.236864] Acpi-Parse 197KB 213KB [ 1525.237485] Acpi-State 94KB 110KB [ 1525.238088] Acpi-Namespace 24KB 24KB [ 1525.238702] numa_policy 3KB 3KB [ 1525.239306] trace_event_file 176KB 176KB [ 1525.239922] ftrace_event_field 280KB 280KB [ 1525.240551] pool_workqueue 40KB 40KB [ 1525.241154] task_group 16KB 16KB [ 1525.241774] mm_struct 348KB 504KB [ 1525.242378] vmap_area 126KB 126KB [ 1525.243003] page->ptl 189KB 322KB [ 1525.243629] kmemleak_scan_area 67KB 67KB [ 1525.244242] kmemleak_object 1212581KB 1212581KB [ 1525.244863] kmalloc-8k 4144KB 4384KB [ 1525.245490] kmalloc-4k 6856KB 8032KB [ 1525.246097] kmalloc-2k 4288KB 5120KB [ 1525.246715] kmalloc-1k 2604KB 3648KB [ 1525.247319] kmalloc-512 42115KB 42128KB [ 1525.247936] kmalloc-256 1210KB 1280KB [ 1525.248552] kmalloc-192 550KB 552KB [ 1525.249154] kmalloc-128 523KB 648KB [ 1525.249770] kmalloc-96 359KB 592KB [ 1525.250371] kmalloc-64 858KB 1276KB [ 1525.250993] kmalloc-32 158992KB 158992KB [ 1525.251608] kmalloc-16 368KB 368KB [ 1525.252208] kmalloc-8 334KB 334KB [ 1525.252823] kmem_cache_node 47KB 47KB [ 1525.253440] kmem_cache 75KB 75KB [ 1525.254039] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/system-serial\x2dgetty.slice/serial-getty@ttyS0.service,task=agetty,pid=225,uid=0 [ 1525.256158] Out of memory: Killed process 225 (agetty) total-vm:4336kB, anon-rss:120kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:44kB oom_score_adj:0 [ 1525.496007] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1525.497123] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.237 #1 [ 1525.497812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1525.498762] Call Trace: [ 1525.499062] dump_stack+0x107/0x167 [ 1525.499476] dump_header+0x107/0x689 [ 1525.499897] oom_kill_process.cold+0x10/0x15 [ 1525.500397] out_of_memory+0x358/0x1440 [ 1525.500856] ? oom_killer_disable+0x280/0x280 [ 1525.501364] ? mutex_trylock+0x237/0x2b0 [ 1525.501823] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1525.502491] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1525.503164] ? lock_acquire+0x137/0x470 [ 1525.503616] ? warn_alloc+0x190/0x190 [ 1525.504058] __alloc_pages_nodemask+0x51d/0x600 [ 1525.504583] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1525.505261] ? find_get_entry+0x2c8/0x740 [ 1525.505735] alloc_pages_current+0x187/0x280 [ 1525.506232] __page_cache_alloc+0x2d2/0x360 [ 1525.506721] pagecache_get_page+0x2c7/0xc80 [ 1525.507215] filemap_fault+0x177d/0x2210 [ 1525.507677] ? read_cache_page_gfp+0x30/0x30 [ 1525.508174] ? replace_page_cache_page+0x1200/0x1200 [ 1525.508746] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1525.509338] ext4_filemap_fault+0x87/0xc0 [ 1525.509808] __do_fault+0x113/0x410 [ 1525.510220] handle_mm_fault+0x1e53/0x3500 [ 1525.510703] ? find_held_lock+0x2c/0x110 [ 1525.511166] ? __pmd_alloc+0x5e0/0x5e0 [ 1525.511612] ? vmacache_find+0x55/0x2a0 [ 1525.512066] do_user_addr_fault+0x56e/0xc60 [ 1525.512556] exc_page_fault+0xa2/0x1a0 [ 1525.512994] ? asm_exc_page_fault+0x8/0x30 [ 1525.513470] asm_exc_page_fault+0x1e/0x30 [ 1525.513933] RIP: 0033:0x7f1b0c304edb [ 1525.514350] Code: Unable to access opcode bytes at RIP 0x7f1b0c304eb1. [ 1525.515095] RSP: 002b:00007ffc5921f2b8 EFLAGS: 00010283 [ 1525.515699] RAX: 000056345ef8d4c0 RBX: 00007ffc5921f2e0 RCX: 0000000000000031 [ 1525.516506] RDX: 0000000000000006 RSI: 00007f1b0c6a2a31 RDI: 000056345ef8d4c0 [ 1525.517311] RBP: 00007f1b0c6a2a31 R08: 000056345ef8d4c0 R09: 0000000000000001 [ 1525.518113] R10: d50bf52555a779ac R11: 0000000000000000 R12: 0000000000000044 [ 1525.518923] R13: 000056345ef8d4c0 R14: 00007ffc5921f510 R15: 00007ffc5921f4c0 [ 1525.519810] Mem-Info: [ 1525.520101] active_anon:29 inactive_anon:5826 isolated_anon:0 [ 1525.520101] active_file:2 inactive_file:5 isolated_file:0 [ 1525.520101] unevictable:0 dirty:0 writeback:0 [ 1525.520101] slab_reclaimable:6715 slab_unreclaimable:388138 [ 1525.520101] mapped:8705 shmem:73 pagetables:155 bounce:0 [ 1525.520101] free:3305 free_pcp:45 free_cma:0 [ 1525.523576] Node 0 active_anon:116kB inactive_anon:23304kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:0kB writeback:0kB shmem:292kB writeback_tmp:0kB kernel_stack:2464kB all_unreclaimable? yes [ 1525.526131] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1525.529065] lowmem_reserve[]: 0 1616 1616 1616 [ 1525.529617] Node 0 DMA32 free:6732kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:116kB inactive_anon:23304kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:620kB bounce:0kB free_pcp:180kB local_pcp:52kB free_cma:0kB [ 1525.532804] lowmem_reserve[]: 0 0 0 0 [ 1525.533254] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1525.534788] Node 0 DMA32: 1265*4kB (UME) 71*8kB (UM) 12*16kB (ME) 8*32kB (UM) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6268kB [ 1525.536381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1525.537343] 91 total pagecache pages [ 1525.537778] 0 pages in swap cache [ 1525.538166] Swap cache stats: add 0, delete 0, find 0/0 [ 1525.538786] Free swap = 0kB [ 1525.539124] Total swap = 0kB [ 1525.539478] 524158 pages RAM [ 1525.539816] 0 pages HighMem/MovableOnly [ 1525.540255] 105069 pages reserved [ 1525.540657] Unreclaimable slab info: [ 1525.541071] Name Used Total [ 1525.541705] pid_2 67KB 67KB [ 1525.542318] IEEE-802.15.4-MAC 63KB 63KB [ 1525.542934] IEEE-802.15.4-RAW 63KB 63KB [ 1525.543553] p9_req_t 8KB 8KB [ 1525.544160] ip6-frags 15KB 15KB [ 1525.544775] fib6_nodes 36KB 36KB [ 1525.545372] ip6_dst_cache 41KB 41KB [ 1525.545991] RAWv6 252KB 252KB [ 1525.546603] UDPLITEv6 62KB 62KB [ 1525.547215] UDPv6 62KB 62KB [ 1525.547828] tw_sock_TCPv6 7KB 7KB [ 1525.548444] TCPv6 62KB 62KB [ 1525.549047] scsi_sense_cache 8KB 8KB [ 1525.549660] sd_ext_cdb 3KB 3KB [ 1525.550260] virtio_scsi_cmd 16KB 16KB [ 1525.550883] sgpool-128 89KB 89KB [ 1525.551498] sgpool-64 63KB 63KB [ 1525.552091] sgpool-32 290KB 293KB [ 1525.552709] sgpool-16 97KB 97KB [ 1525.553307] sgpool-8 63KB 63KB [ 1525.553918] io_kiocb 302KB 322KB [ 1525.554533] mqueue_inode_cache 62KB 62KB [ 1525.555151] nfs_commit_data 15KB 15KB [ 1525.555770] nfs_write_data 47KB 47KB [ 1525.556366] jbd2_inode 11KB 11KB [ 1525.556977] ext4_system_zone 7KB 7KB [ 1525.557593] ext4_io_end_vec 7KB 7KB [ 1525.558192] ext4_bio_post_read_ctx 15KB 15KB [ 1525.558856] kioctx 31KB 31KB [ 1525.559472] aio_kiocb 7KB 7KB [ 1525.560068] dnotify_mark 3KB 3KB [ 1525.560681] dnotify_struct 3KB 3KB [ 1525.561275] dio 46KB 46KB [ 1525.561891] bio-2 4KB 4KB [ 1525.562510] fasync_cache 7KB 7KB [ 1525.563117] pid_namespace 7KB 7KB [ 1525.563736] posix_timers_cache 15KB 15KB [ 1525.564344] rpc_buffers 31KB 31KB [ 1525.564956] rpc_tasks 3KB 3KB [ 1525.565573] UNIX 222KB 416KB [ 1525.566168] ip4-frags 7KB 7KB [ 1525.566791] UDP-Lite 63KB 63KB [ 1525.567406] tcp_bind_bucket 8KB 8KB [ 1525.568002] inet_peer_cache 8KB 8KB [ 1525.568616] xfrm_state 32KB 32KB [ 1525.569214] ip_fib_trie 8KB 8KB [ 1525.569829] ip_fib_alias 19KB 19KB [ 1525.570444] ip_dst_cache 56KB 56KB [ 1525.571048] PING 62KB 62KB [ 1525.571663] RAW 93KB 93KB [ 1525.572259] UDP 283KB 346KB [ 1525.572882] request_sock_TCP 7KB 7KB [ 1525.573500] TCP 60KB 60KB [ 1525.574098] hugetlbfs_inode_cache 30KB 30KB [ 1525.574757] bio-1 11KB 11KB [ 1525.575358] eventpoll_pwq 23KB 23KB [ 1525.575972] eventpoll_epi 43KB 43KB [ 1525.576589] inotify_inode_mark 46KB 46KB [ 1525.577196] request_queue 60KB 60KB [ 1525.577813] blkdev_ioc 30KB 30KB [ 1525.578428] bio-0 468KB 468KB [ 1525.579029] biovec-max 1160KB 1160KB [ 1525.579643] biovec-64 382KB 429KB [ 1525.580243] biovec-16 56KB 56KB [ 1525.580862] uid_cache 8KB 8KB [ 1525.581479] dmaengine-unmap-2 4KB 4KB [ 1525.582077] audit_buffer 7KB 7KB [ 1525.582700] skbuff_fclone_cache 127KB 142KB [ 1525.583332] skbuff_head_cache 460KB 558KB [ 1525.583960] file_lock_cache 40KB 63KB [ 1525.584582] file_lock_ctx 7KB 7KB [ 1525.585192] fsnotify_mark_connector 28KB 28KB [ 1525.585868] net_namespace 143KB 143KB [ 1525.586496] task_delay_info 121KB 135KB [ 1525.587108] taskstats 69KB 69KB [ 1525.587726] proc_dir_entry 374KB 390KB [ 1525.588327] pde_opener 39KB 39KB [ 1525.588949] seq_file 52KB 52KB [ 1525.589575] sigqueue 110KB 110KB [ 1525.590177] shmem_inode_cache 1294KB 1383KB [ 1525.590808] kernfs_iattrs_cache 247KB 247KB [ 1525.591445] kernfs_node_cache 5344KB 5438KB [ 1525.592048] mnt_cache 244KB 244KB [ 1525.592663] filp 1175KB 1455KB [ 1525.593271] names_cache 7514KB 7526KB [ 1525.593899] hashtab_node 274KB 274KB [ 1525.594527] ebitmap_node 1149KB 1149KB [ 1525.595144] avtab_node 4976KB 4976KB [ 1525.595775] avc_node 35KB 35KB [ 1525.596382] lsm_inode_cache 2522KB 2945KB [ 1525.597008] lsm_file_cache 140KB 216KB [ 1525.597635] key_jar 39KB 39KB [ 1525.598235] uts_namespace 15KB 15KB [ 1525.598873] nsproxy 11KB 11KB [ 1525.599505] vm_area_struct 1110KB 1276KB [ 1525.600113] fs_cache 77KB 96KB [ 1525.600740] files_cache 269KB 350KB [ 1525.601359] signal_cache 489KB 710KB [ 1525.601978] sighand_cache 249KB 390KB [ 1525.602614] task_struct 1063KB 1627KB [ 1525.603223] cred_jar 101KB 292KB [ 1525.603846] anon_vma_chain 254KB 374KB [ 1525.604469] anon_vma 113KB 159KB [ 1525.605073] pid 104KB 116KB [ 1525.605688] Acpi-Operand 215KB 245KB [ 1525.606287] Acpi-ParseExt 23KB 23KB [ 1525.606916] Acpi-Parse 197KB 213KB [ 1525.607539] Acpi-State 94KB 110KB [ 1525.608150] Acpi-Namespace 24KB 24KB [ 1525.608771] numa_policy 3KB 3KB [ 1525.609374] trace_event_file 176KB 176KB [ 1525.609997] ftrace_event_field 280KB 280KB [ 1525.610620] pool_workqueue 40KB 40KB [ 1525.611238] task_group 16KB 16KB [ 1525.611855] mm_struct 348KB 504KB [ 1525.612474] vmap_area 126KB 126KB [ 1525.613087] page->ptl 189KB 322KB [ 1525.613715] kmemleak_scan_area 67KB 67KB [ 1525.614323] kmemleak_object 1214779KB 1214779KB [ 1525.614956] kmalloc-8k 4144KB 4384KB [ 1525.615585] kmalloc-4k 6856KB 8032KB [ 1525.616197] kmalloc-2k 4288KB 5120KB [ 1525.616906] kmalloc-1k 2604KB 3648KB [ 1525.617601] kmalloc-512 42208KB 42208KB [ 1525.618199] kmalloc-256 1210KB 1280KB [ 1525.618831] kmalloc-192 550KB 552KB [ 1525.619463] kmalloc-128 523KB 648KB [ 1525.620064] kmalloc-96 359KB 592KB [ 1525.620687] kmalloc-64 858KB 1276KB [ 1525.621285] kmalloc-32 159316KB 159316KB [ 1525.621915] kmalloc-16 368KB 368KB [ 1525.622538] kmalloc-8 334KB 334KB [ 1525.623144] kmem_cache_node 47KB 47KB [ 1525.623760] kmem_cache 75KB 75KB [ 1525.624360] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/system-getty.slice/getty@tty2.service,task=agetty,pid=220,uid=0 [ 1525.626348] Out of memory: Killed process 220 (agetty) total-vm:2812kB, anon-rss:116kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:48kB oom_score_adj:0 [ 1525.770053] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1525.771169] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.237 #1 [ 1525.771854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1525.772806] Call Trace: [ 1525.773105] dump_stack+0x107/0x167 [ 1525.773519] dump_header+0x107/0x689 [ 1525.773944] oom_kill_process.cold+0x10/0x15 [ 1525.774454] out_of_memory+0x358/0x1440 [ 1525.774923] ? oom_killer_disable+0x280/0x280 [ 1525.775434] ? mutex_trylock+0x237/0x2b0 [ 1525.775901] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1525.776579] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1525.777248] ? lock_acquire+0x137/0x470 [ 1525.777701] ? warn_alloc+0x190/0x190 [ 1525.778146] __alloc_pages_nodemask+0x51d/0x600 [ 1525.778680] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1525.779371] ? find_get_entry+0x2c8/0x740 [ 1525.779847] alloc_pages_current+0x187/0x280 [ 1525.780347] __page_cache_alloc+0x2d2/0x360 [ 1525.780845] pagecache_get_page+0x2c7/0xc80 [ 1525.781341] filemap_fault+0x177d/0x2210 [ 1525.781809] ? read_cache_page_gfp+0x30/0x30 [ 1525.782311] ? replace_page_cache_page+0x1200/0x1200 [ 1525.782894] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1525.783490] ext4_filemap_fault+0x87/0xc0 [ 1525.783958] __do_fault+0x113/0x410 [ 1525.784373] handle_mm_fault+0x1e53/0x3500 [ 1525.784854] ? find_held_lock+0x2c/0x110 [ 1525.785318] ? __pmd_alloc+0x5e0/0x5e0 VM DIAGNOSIS: 09:22:15 Registers: info registers vcpu 0 RAX=0000000080010050 RBX=0000000000000000 RCX=ffffffff81f485d4 RDX=00000000000003f6 RSI=ffffffff81f485e2 RDI=0000000000000007 RBP=00000000000103f6 RSP=ffff88806ce09da0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000010000 R11=0000000000000001 R12=000000000001c060 R13=ffff88800f3ec338 R14=ffff88800f3e8234 R15=0000000000000001 RIP=ffffffff81f485e6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff437958700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff3ff76648d CR3=0000000048c08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000000000000000000000000 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=25203a646672656d6974206574616572 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffed1009307a00 RCX=000000000000001f RDX=0000000000000000 RSI=0000000000000000 RDI=ffffed1009307908 RBP=0000000000001000 RSP=ffff88802e407a20 R8 =ffffed1009307800 R9 =ffffed1009307800 R10=fffff9400024c1e6 R11=0000000000000001 R12=ffffea0001260f34 R13=0000000000000000 R14=0000000000100cca R15=dffffc0000000000 RIP=ffffffff82035ec4 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5ced4ff008 CR3=000000002dc16000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6c69747579656b62696c2f756e672d78 XMM02=00312e6f732e736c69747579656b6269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00007f5ceda3cf6000007f5ced81ff30 XMM06=00007f5ced81fa2000007f5ced81f510 XMM07=00007f5ced81f00000007f5ceda3da20 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000