0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:18:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:18:55 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 03:18:55 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:18:55 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) [ 2044.816936] FAULT_INJECTION: forcing a failure. [ 2044.816936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2044.820200] CPU: 0 PID: 11025 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2044.821734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2044.823456] Call Trace: [ 2044.824019] dump_stack+0x107/0x167 [ 2044.824776] should_fail.cold+0x5/0xa [ 2044.825584] _copy_from_user+0x2e/0x1b0 [ 2044.826416] move_addr_to_kernel.part.0+0x31/0x110 [ 2044.827448] move_addr_to_kernel+0x4f/0x70 [ 2044.828329] io_connect+0x47a/0x610 [ 2044.829097] ? io_prep_rw+0x1050/0x1050 [ 2044.829982] ? __lock_acquire+0xbb1/0x5b00 [ 2044.830895] io_issue_sqe+0x1611/0x77b0 [ 2044.831753] ? io_dismantle_req+0xdf/0x180 [ 2044.832662] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2044.833800] ? io_connect+0x610/0x610 [ 2044.834621] ? lock_acquire+0x197/0x470 [ 2044.835471] ? find_held_lock+0x2c/0x110 [ 2044.836348] ? __fget_files+0x2cf/0x520 [ 2044.837215] ? lock_downgrade+0x6d0/0x6d0 [ 2044.838104] __io_queue_sqe+0x90/0x9d0 [ 2044.838944] ? io_issue_sqe+0x77b0/0x77b0 [ 2044.839829] ? __fget_files+0x2f8/0x520 [ 2044.840696] io_submit_sqes+0x44aa/0x8610 [ 2044.841629] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2044.842220] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2044.842697] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2044.842726] ? find_held_lock+0x2c/0x110 [ 2044.846607] ? io_submit_sqes+0x8610/0x8610 [ 2044.847545] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2044.848587] ? wait_for_completion_io+0x270/0x270 [ 2044.849641] ? rcu_read_lock_any_held+0x75/0xa0 [ 2044.850635] ? vfs_write+0x354/0xb10 [ 2044.851434] ? fput_many+0x2f/0x1a0 [ 2044.852217] ? ksys_write+0x1a9/0x260 [ 2044.853034] ? __ia32_sys_read+0xb0/0xb0 [ 2044.853914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2044.855042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2044.856149] do_syscall_64+0x33/0x40 [ 2044.856946] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2044.858056] RIP: 0033:0x7f19cdf4db19 [ 2044.858858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2044.860650] FAULT_INJECTION: forcing a failure. [ 2044.860650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2044.862818] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2044.862839] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2044.862850] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2044.862862] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2044.862872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2044.862884] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2044.876630] CPU: 1 PID: 11034 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2044.878251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2044.880173] Call Trace: [ 2044.880785] dump_stack+0x107/0x167 [ 2044.881641] should_fail.cold+0x5/0xa [ 2044.882536] _copy_from_user+0x2e/0x1b0 [ 2044.883471] move_addr_to_kernel.part.0+0x31/0x110 [ 2044.884596] move_addr_to_kernel+0x4f/0x70 [ 2044.885577] io_connect+0x47a/0x610 [ 2044.886403] ? io_prep_rw+0x1050/0x1050 [ 2044.887335] ? __lock_acquire+0xbb1/0x5b00 [ 2044.888310] io_issue_sqe+0x1611/0x77b0 [ 2044.889220] ? io_dismantle_req+0xdf/0x180 [ 2044.890187] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2044.891382] ? io_connect+0x610/0x610 [ 2044.892249] ? lock_acquire+0x197/0x470 [ 2044.893147] ? find_held_lock+0x2c/0x110 [ 2044.894083] ? __fget_files+0x2cf/0x520 [ 2044.894977] ? lock_downgrade+0x6d0/0x6d0 [ 2044.895917] __io_queue_sqe+0x90/0x9d0 [ 2044.896805] ? io_issue_sqe+0x77b0/0x77b0 [ 2044.897741] ? __fget_files+0x2f8/0x520 [ 2044.898649] io_submit_sqes+0x44aa/0x8610 [ 2044.899613] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2044.900733] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2044.901835] ? find_held_lock+0x2c/0x110 [ 2044.902754] ? io_submit_sqes+0x8610/0x8610 [ 2044.903735] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2044.904837] ? wait_for_completion_io+0x270/0x270 [ 2044.905943] ? rcu_read_lock_any_held+0x75/0xa0 [ 2044.907002] ? vfs_write+0x354/0xb10 [ 2044.907966] ? fput_many+0x2f/0x1a0 [ 2044.908942] ? ksys_write+0x1a9/0x260 [ 2044.909824] ? __ia32_sys_read+0xb0/0xb0 [ 2044.910744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2044.911941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2044.913110] do_syscall_64+0x33/0x40 [ 2044.913951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2044.915125] RIP: 0033:0x7fcb93017b19 [ 2044.915990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2044.920258] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2044.922000] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2044.923637] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2044.925277] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2044.926894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2044.928541] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2044.943808] loop6: detected capacity change from 0 to 17408 03:18:55 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) [ 2045.019902] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:18:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:18:55 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x4000, 0x0, 0x0, 0x0) [ 2045.094334] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2045.106367] FAULT_INJECTION: forcing a failure. 03:18:56 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2045.106367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2045.109329] CPU: 0 PID: 11046 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2045.110793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2045.112540] Call Trace: [ 2045.113119] dump_stack+0x107/0x167 [ 2045.113909] should_fail.cold+0x5/0xa [ 2045.114728] _copy_from_user+0x2e/0x1b0 [ 2045.115577] move_addr_to_kernel.part.0+0x31/0x110 [ 2045.116613] move_addr_to_kernel+0x4f/0x70 [ 2045.117531] io_connect+0x47a/0x610 [ 2045.118306] ? io_prep_rw+0x1050/0x1050 [ 2045.119179] ? __lock_acquire+0xbb1/0x5b00 [ 2045.120083] io_issue_sqe+0x1611/0x77b0 [ 2045.120931] ? io_dismantle_req+0xdf/0x180 [ 2045.121840] ? perf_trace_lock+0xac/0x490 [ 2045.122725] ? io_connect+0x610/0x610 [ 2045.123543] ? lock_acquire+0x197/0x470 [ 2045.124387] ? find_held_lock+0x2c/0x110 [ 2045.125272] ? __fget_files+0x2cf/0x520 [ 2045.126113] ? lock_downgrade+0x6d0/0x6d0 [ 2045.127002] __io_queue_sqe+0x90/0x9d0 [ 2045.127837] ? io_issue_sqe+0x77b0/0x77b0 [ 2045.128717] ? __fget_files+0x2f8/0x520 [ 2045.129594] io_submit_sqes+0x44aa/0x8610 [ 2045.130506] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2045.131567] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2045.132597] ? find_held_lock+0x2c/0x110 [ 2045.133478] ? io_submit_sqes+0x8610/0x8610 [ 2045.134408] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2045.135434] ? wait_for_completion_io+0x270/0x270 [ 2045.136476] ? rcu_read_lock_any_held+0x75/0xa0 [ 2045.137482] ? vfs_write+0x354/0xb10 [ 2045.138274] ? fput_many+0x2f/0x1a0 [ 2045.139050] ? ksys_write+0x1a9/0x260 [ 2045.139865] ? __ia32_sys_read+0xb0/0xb0 [ 2045.140736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2045.141863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2045.142972] do_syscall_64+0x33/0x40 [ 2045.143768] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2045.144867] RIP: 0033:0x7f19cdf4db19 [ 2045.145670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2045.149612] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2045.151239] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2045.152765] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2045.154292] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2045.155806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2045.157327] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2045.185691] loop6: detected capacity change from 0 to 17408 03:18:56 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x3be1, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(r3, 0xc) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000100)=""/182) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000002c0)={0x6, 0x7fff, 0x7, {0x0, 0x1}, 0x6, 0x7}) 03:18:56 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 03:18:56 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4200, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:18:56 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f00000003c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x200, 0x10, 0x5}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4000, @fd=r3, 0xffffffff, &(0x7f00000002c0)=""/136, 0x88, 0xa}, 0x3f) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000380)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0, 0x20, 0x0, 0x9, 0x2, 0x0, {0x0, r6}}, 0x10000) 03:18:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, 0x0, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2045.347685] FAULT_INJECTION: forcing a failure. [ 2045.347685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2045.350293] CPU: 1 PID: 11065 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2045.351571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2045.353081] Call Trace: [ 2045.353575] dump_stack+0x107/0x167 [ 2045.354240] should_fail.cold+0x5/0xa [ 2045.354944] _copy_from_user+0x2e/0x1b0 [ 2045.355671] move_addr_to_kernel.part.0+0x31/0x110 [ 2045.356571] move_addr_to_kernel+0x4f/0x70 [ 2045.357348] io_connect+0x47a/0x610 [ 2045.358011] ? io_prep_rw+0x1050/0x1050 [ 2045.358757] ? __lock_acquire+0xbb1/0x5b00 [ 2045.359534] io_issue_sqe+0x1611/0x77b0 [ 2045.360266] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2045.361221] ? lock_chain_count+0x20/0x20 [ 2045.361976] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2045.362923] ? io_connect+0x610/0x610 [ 2045.363620] ? lock_acquire+0x197/0x470 [ 2045.364344] ? find_held_lock+0x2c/0x110 [ 2045.365089] ? __fget_files+0x2cf/0x520 [ 2045.365825] ? lock_downgrade+0x6d0/0x6d0 [ 2045.366592] __io_queue_sqe+0x90/0x9d0 [ 2045.367307] ? io_issue_sqe+0x77b0/0x77b0 [ 2045.368059] ? __fget_files+0x2f8/0x520 [ 2045.368788] io_submit_sqes+0x44aa/0x8610 [ 2045.369579] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2045.369712] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2045.370475] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2045.370494] ? find_held_lock+0x2c/0x110 [ 2045.370514] ? io_submit_sqes+0x8610/0x8610 [ 2045.370536] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2045.370553] ? wait_for_completion_io+0x270/0x270 [ 2045.370572] ? rcu_read_lock_any_held+0x75/0xa0 [ 2045.370587] ? vfs_write+0x354/0xb10 [ 2045.370603] ? fput_many+0x2f/0x1a0 [ 2045.370619] ? ksys_write+0x1a9/0x260 [ 2045.370643] ? __ia32_sys_read+0xb0/0xb0 [ 2045.379917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2045.380863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2045.381809] do_syscall_64+0x33/0x40 [ 2045.382481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2045.383412] RIP: 0033:0x7fcb93017b19 [ 2045.384088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2045.387434] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2045.388815] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2045.390108] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2045.391391] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2045.392688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2045.393975] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:18:56 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 03:18:56 executing program 2: shmctl$IPC_RMID(0x0, 0x0) syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="d8", 0x1, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="30010000100001000a000000000000000e00000005000000000000001100fc80487fecc64b245e2d128b76405f740f3f9be1f0ef9a1ab1aea7e2890bd08465bfbbf06a42cb5fc785b5abcfe5e26b0f19decc4225356abf95c2fc0a01f424a7ace4a5f92d3978cb1bd6c0d1bfc9741e8fd2e827d0824ca34f72af2a46c7a883e323d4d3434cbfae7198f2ae21b65df80094a8035db7492b34dc8868210d029ad2f7aea3898b9fff3e31e48ce34deb0792224e7451212b52f43ea8f6496d9a089af0a2be2946059f9a6bf6edb7e391261aa0"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x8000, 0x40401) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r4, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r4, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x1) syz_genetlink_get_family_id$ipvs(0x0, r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) lseek(r2, 0x1, 0x4) 03:18:56 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x200000, 0x0, 0x0, 0x0) [ 2045.498495] FAULT_INJECTION: forcing a failure. [ 2045.498495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2045.501442] CPU: 1 PID: 11076 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2045.502816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2045.504445] Call Trace: [ 2045.504972] dump_stack+0x107/0x167 [ 2045.505699] should_fail.cold+0x5/0xa [ 2045.506442] _copy_from_user+0x2e/0x1b0 [ 2045.507226] move_addr_to_kernel.part.0+0x31/0x110 [ 2045.508189] move_addr_to_kernel+0x4f/0x70 [ 2045.509020] io_connect+0x47a/0x610 [ 2045.509743] ? io_prep_rw+0x1050/0x1050 [ 2045.510538] ? __lock_acquire+0xbb1/0x5b00 [ 2045.511361] io_issue_sqe+0x1611/0x77b0 [ 2045.512137] ? io_dismantle_req+0xdf/0x180 [ 2045.512967] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2045.513994] ? io_connect+0x610/0x610 [ 2045.514740] ? lock_acquire+0x197/0x470 [ 2045.515519] ? find_held_lock+0x2c/0x110 [ 2045.516301] ? __fget_files+0x2cf/0x520 [ 2045.517083] ? lock_downgrade+0x6d0/0x6d0 [ 2045.517894] __io_queue_sqe+0x90/0x9d0 [ 2045.518640] ? io_issue_sqe+0x77b0/0x77b0 [ 2045.519424] ? __fget_files+0x2f8/0x520 [ 2045.520199] io_submit_sqes+0x44aa/0x8610 [ 2045.521019] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2045.521971] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2045.522892] ? find_held_lock+0x2c/0x110 [ 2045.523687] ? io_submit_sqes+0x8610/0x8610 [ 2045.524521] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2045.525469] ? wait_for_completion_io+0x270/0x270 [ 2045.526394] ? rcu_read_lock_any_held+0x75/0xa0 [ 2045.527319] ? vfs_write+0x354/0xb10 [ 2045.528037] ? fput_many+0x2f/0x1a0 [ 2045.528746] ? ksys_write+0x1a9/0x260 [ 2045.529480] ? __ia32_sys_read+0xb0/0xb0 [ 2045.530280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2045.531297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2045.532299] do_syscall_64+0x33/0x40 [ 2045.533024] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2045.534023] RIP: 0033:0x7f19cdf4db19 [ 2045.534738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2045.538268] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2045.539734] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2045.541037] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2045.542315] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2045.543564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2045.544813] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 03:19:09 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:19:09 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 03:19:09 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4240, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:19:09 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x400000, 0x0, 0x0, 0x0) 03:19:09 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:19:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, 0x0, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:19:09 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x40) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r4, 0x0) io_uring_enter(r0, 0x1c5b, 0x6756, 0x2, 0x0, 0x0) 03:19:09 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) [ 2058.964027] loop6: detected capacity change from 0 to 17408 [ 2058.971723] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2058.976524] FAULT_INJECTION: forcing a failure. [ 2058.976524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2058.979795] CPU: 1 PID: 11095 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2058.981570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2058.983731] Call Trace: [ 2058.984432] dump_stack+0x107/0x167 [ 2058.985412] should_fail.cold+0x5/0xa [ 2058.986436] _copy_from_user+0x2e/0x1b0 [ 2058.987497] move_addr_to_kernel.part.0+0x31/0x110 [ 2058.988790] move_addr_to_kernel+0x4f/0x70 [ 2058.989909] io_connect+0x47a/0x610 [ 2058.990866] ? io_prep_rw+0x1050/0x1050 [ 2058.991951] ? __lock_acquire+0xbb1/0x5b00 [ 2058.993074] io_issue_sqe+0x1611/0x77b0 [ 2058.994136] ? io_dismantle_req+0xdf/0x180 [ 2058.995241] ? perf_trace_lock+0xac/0x490 [ 2058.996336] ? io_connect+0x610/0x610 [ 2058.997339] ? lock_acquire+0x197/0x470 [ 2058.998406] ? find_held_lock+0x2c/0x110 [ 2058.999475] ? __fget_files+0x2cf/0x520 [ 2059.000560] ? lock_downgrade+0x6d0/0x6d0 [ 2059.001702] __io_queue_sqe+0x90/0x9d0 [ 2059.002720] ? io_issue_sqe+0x77b0/0x77b0 [ 2059.003757] ? __fget_files+0x2f8/0x520 [ 2059.004899] io_submit_sqes+0x44aa/0x8610 [ 2059.006011] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2059.007270] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2059.008479] ? find_held_lock+0x2c/0x110 [ 2059.009528] ? io_submit_sqes+0x8610/0x8610 [ 2059.010640] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2059.011835] ? wait_for_completion_io+0x270/0x270 [ 2059.012986] ? rcu_read_lock_any_held+0x75/0xa0 [ 2059.014821] ? vfs_write+0x354/0xb10 [ 2059.015773] ? fput_many+0x2f/0x1a0 [ 2059.016697] ? ksys_write+0x1a9/0x260 [ 2059.017669] ? __ia32_sys_read+0xb0/0xb0 [ 2059.018615] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2059.019689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2059.020749] do_syscall_64+0x33/0x40 [ 2059.021547] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2059.022753] RIP: 0033:0x7f19cdf4db19 [ 2059.023632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2059.029635] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2059.031258] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2059.032764] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2059.034274] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2059.035785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2059.037277] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 03:19:09 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @private}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2059.070408] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2059.097335] FAULT_INJECTION: forcing a failure. [ 2059.097335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2059.100266] CPU: 1 PID: 11102 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2059.101854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2059.103714] Call Trace: [ 2059.104306] dump_stack+0x107/0x167 [ 2059.105245] should_fail.cold+0x5/0xa [ 2059.106139] _copy_from_user+0x2e/0x1b0 [ 2059.107041] move_addr_to_kernel.part.0+0x31/0x110 [ 2059.108142] move_addr_to_kernel+0x4f/0x70 [ 2059.109094] io_connect+0x47a/0x610 [ 2059.109932] ? io_prep_rw+0x1050/0x1050 [ 2059.110842] ? __lock_acquire+0xbb1/0x5b00 [ 2059.111773] io_issue_sqe+0x1611/0x77b0 [ 2059.112669] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2059.113835] ? lock_chain_count+0x20/0x20 [ 2059.114692] ? __is_insn_slot_addr+0x14c/0x290 [ 2059.115638] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2059.116734] ? io_connect+0x610/0x610 [ 2059.117594] ? lock_acquire+0x197/0x470 [ 2059.118486] ? find_held_lock+0x2c/0x110 [ 2059.119456] ? __fget_files+0x2cf/0x520 [ 2059.120375] ? lock_downgrade+0x6d0/0x6d0 [ 2059.121232] __io_queue_sqe+0x90/0x9d0 [ 2059.122197] ? io_issue_sqe+0x77b0/0x77b0 [ 2059.123240] ? __fget_files+0x2f8/0x520 [ 2059.124222] io_submit_sqes+0x44aa/0x8610 [ 2059.125269] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2059.126523] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2059.127672] ? find_held_lock+0x2c/0x110 [ 2059.128539] ? io_submit_sqes+0x8610/0x8610 [ 2059.129484] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2059.130489] ? wait_for_completion_io+0x270/0x270 [ 2059.131644] ? rcu_read_lock_any_held+0x75/0xa0 [ 2059.132764] ? vfs_write+0x354/0xb10 [ 2059.133676] ? fput_many+0x2f/0x1a0 [ 2059.134574] ? ksys_write+0x1a9/0x260 [ 2059.135509] ? __ia32_sys_read+0xb0/0xb0 [ 2059.136517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2059.137795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2059.139039] do_syscall_64+0x33/0x40 [ 2059.139933] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2059.141160] RIP: 0033:0x7fcb93017b19 [ 2059.142067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2059.146511] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2059.148437] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2059.150171] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2059.151858] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2059.153560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2059.155220] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2059.174700] loop6: detected capacity change from 0 to 17408 03:19:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, 0x0, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:19:10 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2059.246207] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2059.312781] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:19:10 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4280, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:19:10 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x20000000, 0x0, 0x0, 0x0) 03:19:10 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 03:19:10 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 03:19:10 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x2180, &(0x7f00000002c0)={0x0, 0x8b9d, 0x0, 0x0, 0x175, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r5, r2, &(0x7f00000015c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x2004, @fd_index, 0x100000001, &(0x7f0000000200)=[{&(0x7f0000000340)="53287aa7ff1da7006b2e94f916e0ad46232c3e3170d36131ba7ee9b2c194bd4fcec50dc938452d1be91e43606de8ec158f313fa233836f06b2e46ae3ecba1f5314adc2ee42305273a1703a6d1af9b2191b07805e37cf7d355b71b0f94c298b5a4a52cfaa5b0c70503020b1f571ff65e7c6d7424180d65891e817a8ee85ad49b6837ee8a204e0387f08d9012bbaa483c5361b8c6fa5c603b22082032fddead3252517a3193ead6cf330b62a1a6ca82990bd494f8bfd7dfd6199f6a7d3fa74a55118485cff635085ff6c892872dc273fef4c2fb60fd6e5b7796cdd6eaed989d7eac71e02483df03dc81cff12515ccbec06a8ccb981b9ddd68a6a6026948dc78b64332275db74c062aec87752f2f668842124910cdbfa362280cf756569ff87a9709029df9dfaa6c80c10b85a72463cfb66e2cd5eef389d0b8024449fd61bad90243c64ef3bfac62d62640558dc83a0801ced7843c2af4f08db4b9a6aadf001d30cb0732a7017b4d40819285e87964545c64d5d789729c166efc10d1e287e88ccc460d6060beff0b6539f9908a3653d9aea7d20a1ec43e220d9f76bd896c6682f982e6011c6a9cc3203dbd71e23bc2bb7056b9fc1d6cb5ed0894fb88eca9b5dc18cddd9dfa92eb3ed5b2bb49798db045db92ed68806d090c560de5b7eef3412ce4b16a7881d687761a68f873373d39cf15d29443a0eaed5bbb3179427f0862238892b0460cb0d1812aa8ae833f99a80eec8a8efe54a764addbfa0b3406d1ced29c7b1861115cc89b9d1e61d6bacea6cfba699393386679bddfc0ae2b8b8e375bf602ebc551b246026834c58931d689d61ce02b7895a18fd1956e70cac82a49fabd444671f42df574f7309df94818d9d47f738efa49b4379e58f8702da1f1b5395148b5b27b1dc57dd4f0e056e8b106b9e5bf6a078398e5ef769370a7cf45e8591ae97400fe31c9555c14931d9f29078824aa0afbe499626028d758bd06a4d488602583b491ce23bae00aa00ae00c901458863201a60808645d573d3a21c4625bbe03816788de60810cd39e0873894b7d80467a3162ee46b29822993b7115da6c21674cd5e78bc1bc8ec6942af9499afb2f6d27b905d480a79aba131bb2d6d40d2061104ef489afb4a4949c9261d955bdc76f66796e8fb840325ae55cb4436c156c2c59c827176a464f9fb1d331484cf7c682de73d0ef8fbeb91e372ec20e4f40195f17792fd1b7aabe2cd3affa3ea28c0cf6551431a7802d71ee96e499408370ed821178c9f420b86f648e174215b16b978e2ea4b5f4ee7d80193aedb8939a08fdac0e5dc7200bcc05b6e8fe6ff94dfa17e26db02be322571a15cb3dfc9f4638432becb1fd6fd6a2f1bb5d41267b0930ed460d1d273dd492b700ec8292d8996c5a55e692b095136d9e56f7b77085ae00f3801d903bc6f07e2073912764da1c35007647869c0fa166f045a47b7743d15ab2db535a329d68da518a4f80d4af25a3c90cfb224be113666a46039ca9731cbf900dd9a0bbfd9605c29a5c7b95a3063a7f31d7f85fe5f5c2a93ade2c89ee0271e800700aa314631577c8e220dba36bc58a86d8db34a270ba67579166b87a0d2bcaa85d6c10948f83a4b950ea81b9113f07156776710a432d3be3b541b330004dea712549ef33b1f0791d8009a57971b77e83437056fc0756a245a27cb44279b6f91914940f4701912a8681b118b9e3fb3e6e6461de21682987a81f1346c663c5bbc2162676250e3fab61e90f42dba45a79a2f8782aecbba9839757c54399827f2bb45d7a3ba68489f11efeb70d58eeb8ea77910bd2052c5c82b39120406c5230ef1b623c1ffe7fca3e48f2ab204bcc3170468ff528665858d4f1852f8d74c37e2a0b0ea12a444560cd977025610bcecab32175627f2c8e92d96092c004d1208670e9634ad696a89df532765f32545a23d934d6578674c0e1dc1be3db6a76ae9b32a23fdeafc55a0b647a73544d9c773d9ceae741f5c0493428415bc2c3d776e8ae6d8ec5f6294a8588214079951f557c7a34394c515989f1902ae0c151e271484a4cf7245fd6bac074e974647b0382930600924475b6f1bfbe0e367befbb35f0f1838296196e4eea182e9ca853da474147cd4ad02a96dd6d9429892b2504474bd89847ae7d196a4bc2ce751068dda2802b2a1214aa37629a30ea0d6eb04b4306ab5827ccff045c46625df18dbf96a4955ccbcd5fabf6a161759b9a2916298ca9778d53b7330cf90f59c18417f826d11dd410adcf463db1e3b7b55ef0bb0f0cc25ad0c1a1396f9aaf066a87f79a210620fcc86fff4a77fd98e399aded9313af1cff3c9f08e4ff4f226c2b9cc88a801a77a83dd47bbfc32bc45168071cc75a4c173b768ba33f8bc61bce74bce175ca01e61a7665eebbfbfbf3b0665dca6797814d7cea3eec50b47ef1ba725bcc74cdb7fbcf23183bd6c081121806402cde883f5d3b537cb2d8f53a96791ee8b82500fa4d0668f9f3a06c8b8acdcd705fd8541821c26d172a13dc87567b24332ea4a6cbc5cf2c189eaa84701c81654b3952e2849b994fce116babc88d10b29b2618944671751fca05ee672de3fe71614854235c506772f23384aa265cd35eaadd04ca83f65c7ff58e93feb68ca6b186c7b18a95fcd2218ad965dac7b2f2b66c5c4999b7f739fbec93a655bc2d52a79ad863fc51f53c6ef48ffdba323be1e644ce396f452f538f31b76f3d582423f15b2a3d4e0e4472b6defec00523f96bd19d681886250f38b0d90acfbe1eaf7c5134c1b2964082cf8dc13c755489e12626b5802eb1bb6a724331c55121a65b1dae4db6332358eaadfef1c7f120dbf58c8b5a9dc955b5dc3822a56283222962e7c4e1bc9fabe998ba952ef01ceae203bc1e47056f3dd08265fbb968839dde17716bf5851125ef0602c64078755544e4f5f5d9b63cd5759aac3b8433c85d6b869b573e8ae15e954804f7b5d3643d4136029b19c5129b74a41da2532cda6217ba765c89dfd14c066c9e942e72a80e3a895b2bc1ffa5540ab126e4462500c864f89d00151ca78ca0634f61b8eb97f2ac2e7b54254a6f0881beb109bea0769f2bb7d77c0f5af7b618ccacb73674c4584cb1e5a81953410e6bd2551086253c81f8ebaebac2587715488feffa52127a5a5d251a0458dee2c8b74d4b3f8d0bb472fd6d8ad41458a3ddceba97014c26c4a0541276ba66d8465d9b0128727ab19b2cf53d6d939821e8156ce142c3c5d4fe594df7d794a65776a182041f1073eaec18dea26a09e8ae9cf07b4d6ca4e81a2cf29f8899dd286a42d921ae392af2174906776cfb3622b83e6c22a0fe18fe6d3902f3d495741f538beb9b9ba10eeb563fefc81f0372eaf2193acd371124dc670961b882eeb98b3e769d11d598b722c8f7181acbee965514d239efa400e505b1c0d95585bb38363db0fe0e15731977a742b5d69a9fec9c897dcb58f931b34d434a9cebff06824904258bbc653ca235da637ae4e3637c7fdadde70b3e03eff9ebfff444eb921b171bf23f0c827bcc9e08783687bfcca4dcbccb44bdf3ac4fbf8ac5e6beef43cfa24dc7e90d1249d8c8bb641cc47813d1e4941644a21db807714ac6bf16511f0b0ba0a81d2495a22bce85930cf8ca491c6668edc7245181d05cf94f660a04c92f8a1750586aed90ae6a493bc34dad36d7836b8dabc3cfad3af2f34814fbf3e855d3fc0df4386ac3938b719f6265db997730af0f65845630dfff083121f3742d4a785a2ff9bd3332ca9d6ff4d78929fed43eac5465a314abd92f982e4c0d00c1c84c91fa47d49bdf9528de0f2c5fe0dce9b3179c4636030d28fcdbe483fbe925b9a1bf24e27f76ab84d017a56257625b90522a503bf85af95b14ddd8adf4301f256c252ed8a822224a050ab454ece1fba737bea892925bf424b8260b1454f303f1ff4bc55d037efd6ae02629f1ae965b432aaa03d0b5a9c9704d8d13a0ceaa102d2535a28217073e4e2caddcbf9ab50be15372c5f09d049ff43e38eff03202cea1eb4921a5046f811eec017c3cd384e8ed883de52f12f1eeecc53ee98fd5c4679dbfd9c928acec4217fc8e104d5269978077cc116ae58b2e997879cadd5a4d704fdea74081799366b4badb211fc46d7e05e9155a9b3729d81ae4ba52946012f7273e81757603ec4fadf0689e95a8f846e4708afe2cf8c2a4ddf261e0f300f564fc4d4f0337e1e711f87f2ccbac92ff5c00abcae9e21980ab87ebd9795de5361be6ced8c7621181022c241bf5f369e2c6644a3e5f1e7ca917380bd5d419eaa81a21e4f8aca6a815756bdbfaebe1aee4efa08b6d171e5635223aae3ab305f0a518a4574035b035f25c0f5aa107f89422169007f31cadb01ae7282a1c9211ab2cd012fd55a1d28308d12e0ca67f67b00eb7ab6eb69ddfa8b0bf4099b1f83b1c27448b2b4016e2315cdaa798394badf7f9a64c31d62e6b3664e3c362b33d269e616493312fd9360087a6fd1f1b86b397a359d6a8bc6e74e30b73b3adfa412b249d9d081d496db578c7d84254108da03196fa8a82cc2d4945b1173291488d9a99915e1ae07e8f3687cc66304f91c446deaa7c959b4cb4878e12b70100b05ebf10b049d46adbb4a7154c5b38e7e0b0f287e40a5a83133e7a76bd6a21c4425802f42bab12f6348623aa5c4e40060b02340ab781dd49714ee2b9b53e6247b07ed7cac4ae915fa05f8694f1ba0252439d1a784c357acea77c2e1b3f5d70ed334efc28a35782b526dbc4dfe264fc22ee718ef396d407d195e8443e773d894417bac46ab400a6f72413915ea61b9f66b3a396c1776a6f353f20dc9c0add1834abda0a581826cb71d458357264a310613f72d7ebaa42c8160720664a908be5360f0bb8c66645452fda6172e4741a6fc52a3724a00d7b1536026880b767a4ad714da063749934aa645be4da2597d903b0b185d0042111c5d6f1e964b1b655deaa0a7f1e944efa4b4cebde2e2af4c771ec21d0132c8ec632f9b566fbd0fd673ff34a7511158f0b48dc08993256b66b6a9a62e800fb4b102badf4517ef65f2a30a1e70e13297fa3df1c4ca920c9cbadbd9f035d11d726d54a5c499269073089a5ebcb9182409423044396099dbf2d6b718ce326b8eeef1791b11445586de71a60c206f85c371dc8c9008e4c9059a3e309843ff969b94a648c140e4269c670d0b9da29c9a44bda1bc1bf6aff66cee81a37c93c947e3c6ea82ece9e821850599cdd3d03511e04cbbd401db7d9a37f2bbe888ba566bbc78e11a40bbdaa0a2393b4b421bd55534be498a6655cf4a9ed821f4cd6cceb985d1ae5667082c72b4f195b3bc6fde8144168c452f5b037e9ec68a374ea30ce16c1ee259307bb60b1299ea8757c2d4cf4a0b996e37c676aefc3a93fcb5070eab6b800199e14f941def36df90ca3180d71925965f0aa2d2ae94b5c8f79d2763ddcbd96054f1bd0d4374380dcae7dedc27dd2110b301610f0b7b5627961869cce29665aeeb6277200704b295f2fc3e4e62ad49a020dd64737ffa4bc37207bd43b0313b8fb123a4f71064598062ac9f307c42e57dbb43c6384d76b8083330d673441e07144ea693b990a961c68f76b1838cd1193e16d559a5351fac555bfcbae9244b4e8c39ed6060c182aacb502904679d17fc83508c81f5ef8a04f231b67d54416dab653cdd5962980b4ba9a43e8b0d733b073e6574ac8c8398ff229bc7b39d5c3be9430ea5a1626828a684de973f5f9947d0733456d692e4525440e7d9fb351ecf22bdecce5e4e822576846b108f0d46f4ffcaa7dea09d37776cc61b", 0x1000}, {&(0x7f0000001340)="801a2b41f3cf28381ec9f912b39844194c22ba7e1523af9feff2c1af2b8d04e00ef0c9843f4f58d0cc1a52ca27cabfbbdd3a871a3cabeb0b45736b683e982abe5e165e4b5a00237c62e4edeece91789e76472c788175ee3603ac1f345953e2714defb03a2380dcedc9c17e5266f0eaee984d61385988062c95827f19de5da81c117bc2925a2719af2c149153627c6c", 0x8f}, {&(0x7f0000001400)="27da1c41d229655bc0db6393299b0232bd45449070a89257980f90d4531799ff0f6780338c4fcf878cee263708d2f03a26892a4e5ccd118931cdf56cfcc47ea8f7bd45ea223b995ae48f0d99eeab1b1128ebb3f03176341d8e9f8202af5169dd19ac23419ea9ec5a466b51d7df499218a35532af0a1251280c1f828b7964d397a770704fd2a7d7e454306156a426856b0414ae90d9bb", 0x96}, {&(0x7f00000014c0)="4906ee61d42b1a8938bc05c506cc07ae4e7f2ed96a275d3c20fb8c3f09fa7c53fb326f1802d883adbe56fcd2d11018ade48cf5f5556a4fa8816a3e8231ab3cbae91c3830094e6fff633b848fe8691fe9146acfbccc85fdfc4d9ad0a80e31471772151dab0bc95b1be370bf9b98a977d7035a1fbf1c72e825d9fdc038e28ebedc238803c4a5dde8af79880bc8be1e4a5fcb4066479736a0145e0d13ed1cf9314d1c65d7ba95a409793c5e84f491edbede8dc9b0552110cc3530aaa54ae3bd442634b911008bc31794797835e521013810bf560057f1be144256897da437", 0xdd}], 0x4, 0x1a, 0x0, {0x1}}, 0x9) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:19:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2059.548658] FAULT_INJECTION: forcing a failure. [ 2059.548658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2059.551216] CPU: 1 PID: 11128 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2059.552560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2059.554180] Call Trace: [ 2059.554692] dump_stack+0x107/0x167 [ 2059.555394] should_fail.cold+0x5/0xa [ 2059.556142] _copy_from_user+0x2e/0x1b0 [ 2059.556240] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2059.556916] move_addr_to_kernel.part.0+0x31/0x110 [ 2059.556945] move_addr_to_kernel+0x4f/0x70 [ 2059.560505] io_connect+0x47a/0x610 [ 2059.561199] ? io_prep_rw+0x1050/0x1050 [ 2059.561988] ? __lock_acquire+0xbb1/0x5b00 [ 2059.562798] io_issue_sqe+0x1611/0x77b0 [ 2059.563553] ? io_dismantle_req+0xdf/0x180 [ 2059.564356] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2059.565363] ? io_connect+0x610/0x610 [ 2059.566106] ? lock_acquire+0x197/0x470 [ 2059.566862] ? find_held_lock+0x2c/0x110 [ 2059.567653] ? __fget_files+0x2cf/0x520 [ 2059.568415] ? lock_downgrade+0x6d0/0x6d0 [ 2059.569209] __io_queue_sqe+0x90/0x9d0 [ 2059.569960] ? io_issue_sqe+0x77b0/0x77b0 [ 2059.570749] ? __fget_files+0x2f8/0x520 [ 2059.571530] io_submit_sqes+0x44aa/0x8610 [ 2059.572352] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2059.573314] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2059.574242] ? find_held_lock+0x2c/0x110 [ 2059.575018] ? io_submit_sqes+0x8610/0x8610 [ 2059.575854] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2059.576774] ? wait_for_completion_io+0x270/0x270 [ 2059.577711] ? rcu_read_lock_any_held+0x75/0xa0 [ 2059.578599] ? vfs_write+0x354/0xb10 [ 2059.579308] ? fput_many+0x2f/0x1a0 [ 2059.580006] ? ksys_write+0x1a9/0x260 [ 2059.580734] ? __ia32_sys_read+0xb0/0xb0 [ 2059.581527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2059.582515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2059.583492] do_syscall_64+0x33/0x40 [ 2059.584191] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2059.585164] RIP: 0033:0x7f19cdf4db19 [ 2059.585880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2059.589350] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2059.590796] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2059.592143] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2059.593498] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2059.594843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2059.596190] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2059.605208] FAULT_INJECTION: forcing a failure. [ 2059.605208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2059.607517] CPU: 1 PID: 11133 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2059.608826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2059.610401] Call Trace: [ 2059.610885] dump_stack+0x107/0x167 [ 2059.611565] should_fail.cold+0x5/0xa [ 2059.612286] _copy_from_user+0x2e/0x1b0 [ 2059.613034] move_addr_to_kernel.part.0+0x31/0x110 [ 2059.613968] move_addr_to_kernel+0x4f/0x70 [ 2059.614760] io_connect+0x47a/0x610 [ 2059.615445] ? io_prep_rw+0x1050/0x1050 [ 2059.616207] ? __lock_acquire+0xbb1/0x5b00 [ 2059.617003] io_issue_sqe+0x1611/0x77b0 [ 2059.617757] ? io_dismantle_req+0xdf/0x180 [ 2059.618559] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2059.619560] ? io_connect+0x610/0x610 [ 2059.620281] ? lock_acquire+0x197/0x470 [ 2059.621031] ? find_held_lock+0x2c/0x110 [ 2059.621811] ? __fget_files+0x2cf/0x520 [ 2059.622566] ? lock_downgrade+0x6d0/0x6d0 [ 2059.623355] __io_queue_sqe+0x90/0x9d0 [ 2059.624080] ? io_issue_sqe+0x77b0/0x77b0 [ 2059.624843] ? __fget_files+0x2f8/0x520 [ 2059.625610] io_submit_sqes+0x44aa/0x8610 [ 2059.626400] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2059.627320] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2059.628219] ? find_held_lock+0x2c/0x110 [ 2059.628976] ? io_submit_sqes+0x8610/0x8610 [ 2059.629784] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2059.630677] ? wait_for_completion_io+0x270/0x270 [ 2059.631572] ? rcu_read_lock_any_held+0x75/0xa0 [ 2059.632432] ? vfs_write+0x354/0xb10 [ 2059.633126] ? fput_many+0x2f/0x1a0 [ 2059.633809] ? ksys_write+0x1a9/0x260 [ 2059.634514] ? __ia32_sys_read+0xb0/0xb0 [ 2059.635270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2059.636243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2059.637212] do_syscall_64+0x33/0x40 [ 2059.637909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2059.638860] RIP: 0033:0x7fcb93017b19 [ 2059.639550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2059.642985] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2059.644397] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2059.645719] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2059.647028] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2059.648344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2059.649667] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:19:25 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:19:25 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 03:19:25 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:19:25 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x2000, 0x0, 0x0) 03:19:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:19:25 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3, @any, 0x9}, 0xe) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:19:25 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:19:25 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) [ 2074.383762] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2074.398694] FAULT_INJECTION: forcing a failure. [ 2074.398694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2074.401793] CPU: 1 PID: 11146 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2074.403391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2074.405255] Call Trace: [ 2074.405932] dump_stack+0x107/0x167 [ 2074.406854] should_fail.cold+0x5/0xa [ 2074.407819] _copy_from_user+0x2e/0x1b0 [ 2074.408818] move_addr_to_kernel.part.0+0x31/0x110 [ 2074.410063] move_addr_to_kernel+0x4f/0x70 [ 2074.411123] io_connect+0x47a/0x610 [ 2074.412040] ? io_prep_rw+0x1050/0x1050 [ 2074.413079] ? __lock_acquire+0xbb1/0x5b00 [ 2074.414165] io_issue_sqe+0x1611/0x77b0 [ 2074.415161] ? io_dismantle_req+0xdf/0x180 [ 2074.416257] ? perf_trace_lock+0xac/0x490 [ 2074.417301] ? io_connect+0x610/0x610 [ 2074.418311] ? lock_acquire+0x197/0x470 [ 2074.419303] ? find_held_lock+0x2c/0x110 [ 2074.420381] ? __fget_files+0x2cf/0x520 [ 2074.421383] ? lock_downgrade+0x6d0/0x6d0 [ 2074.422474] __io_queue_sqe+0x90/0x9d0 [ 2074.423502] ? io_issue_sqe+0x77b0/0x77b0 [ 2074.424549] ? __fget_files+0x2f8/0x520 [ 2074.425588] io_submit_sqes+0x44aa/0x8610 [ 2074.426724] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2074.428000] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2074.429213] ? find_held_lock+0x2c/0x110 [ 2074.430258] ? io_submit_sqes+0x8610/0x8610 [ 2074.431356] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2074.432575] ? wait_for_completion_io+0x270/0x270 [ 2074.433830] ? rcu_read_lock_any_held+0x75/0xa0 [ 2074.434995] ? vfs_write+0x354/0xb10 [ 2074.435929] ? fput_many+0x2f/0x1a0 [ 2074.436841] ? ksys_write+0x1a9/0x260 [ 2074.437809] ? __ia32_sys_read+0xb0/0xb0 [ 2074.438838] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2074.440162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2074.441471] do_syscall_64+0x33/0x40 [ 2074.442432] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2074.443725] RIP: 0033:0x7fcb93017b19 [ 2074.444669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2074.449306] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2074.451264] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2074.453047] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2074.454873] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2074.456688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2074.458526] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2074.468475] loop6: detected capacity change from 0 to 17408 [ 2074.480190] FAULT_INJECTION: forcing a failure. [ 2074.480190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2074.482800] CPU: 0 PID: 11161 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2074.484236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2074.486108] Call Trace: [ 2074.486669] dump_stack+0x107/0x167 [ 2074.487439] should_fail.cold+0x5/0xa [ 2074.488240] _copy_from_user+0x2e/0x1b0 [ 2074.489089] move_addr_to_kernel.part.0+0x31/0x110 [ 2074.490146] move_addr_to_kernel+0x4f/0x70 [ 2074.491035] io_connect+0x47a/0x610 [ 2074.491798] ? io_prep_rw+0x1050/0x1050 [ 2074.492660] ? __lock_acquire+0xbb1/0x5b00 [ 2074.493546] io_issue_sqe+0x1611/0x77b0 [ 2074.494407] ? perf_trace_lock+0xac/0x490 [ 2074.495286] ? lock_chain_count+0x20/0x20 [ 2074.496162] ? io_connect+0x610/0x610 [ 2074.496963] ? lock_acquire+0x197/0x470 [ 2074.497797] ? find_held_lock+0x2c/0x110 [ 2074.498663] ? __fget_files+0x2cf/0x520 [ 2074.499496] ? lock_downgrade+0x6d0/0x6d0 [ 2074.500368] __io_queue_sqe+0x90/0x9d0 [ 2074.501183] ? io_issue_sqe+0x77b0/0x77b0 [ 2074.502070] ? __fget_files+0x2f8/0x520 [ 2074.502913] io_submit_sqes+0x44aa/0x8610 [ 2074.503813] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2074.504855] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2074.505885] ? find_held_lock+0x2c/0x110 [ 2074.506735] ? io_submit_sqes+0x8610/0x8610 [ 2074.507651] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2074.508662] ? wait_for_completion_io+0x270/0x270 [ 2074.509696] ? rcu_read_lock_any_held+0x75/0xa0 [ 2074.510666] ? vfs_write+0x354/0xb10 [ 2074.511446] ? fput_many+0x2f/0x1a0 [ 2074.512202] ? ksys_write+0x1a9/0x260 [ 2074.512993] ? __ia32_sys_read+0xb0/0xb0 [ 2074.513864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2074.514968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2074.516045] do_syscall_64+0x33/0x40 [ 2074.516821] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2074.517916] RIP: 0033:0x7f19cdf4db19 [ 2074.518689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2074.522551] RSP: 002b:00007f19cb4a2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2074.524141] RAX: ffffffffffffffda RBX: 00007f19ce061020 RCX: 00007f19cdf4db19 [ 2074.525640] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2074.527146] RBP: 00007f19cb4a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2074.528630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2074.530133] R13: 00007ffed12c037f R14: 00007f19cb4a2300 R15: 0000000000022000 [ 2074.539241] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:19:25 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x4000, 0x0, 0x0) 03:19:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:19:25 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:19:25 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 03:19:25 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) [ 2074.750308] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2074.784289] loop6: detected capacity change from 0 to 17408 [ 2074.798161] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2074.805528] FAULT_INJECTION: forcing a failure. [ 2074.805528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2074.808293] CPU: 0 PID: 11178 Comm: syz-executor.3 Not tainted 5.10.236 #1 03:19:25 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x8133, 0x20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f00000000c0)={0x0, 0x3938700}, 0x1, 0xb01f798edbc8c8ee, 0x1}, 0x8000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) r5 = open_tree(r4, &(0x7f00000002c0)='./file0\x00', 0x1101) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = dup(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000080)={@local, 0x0, r9}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r9}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'tunl0\x00', r9, 0x8000, 0x700, 0x7, 0x101, {{0x23, 0x4, 0x2, 0x15, 0x8c, 0x66, 0x0, 0xff, 0x0, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x14, 0x18, 0x1, 0x9, [{@broadcast, 0x10000}, {@local, 0x7}]}, @timestamp_addr={0x44, 0x34, 0x77, 0x1, 0x3, [{@loopback, 0x5}, {@multicast1, 0x7be2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}, {@multicast2, 0x800}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xb409}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x2b, 0xd8, [@broadcast, @broadcast, @rand_addr=0x64010102, @private=0x8, @private=0xa010102, @loopback, @rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}]}}}}}) [ 2074.809772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2074.811785] Call Trace: [ 2074.812461] dump_stack+0x107/0x167 [ 2074.813249] should_fail.cold+0x5/0xa [ 2074.814245] _copy_from_user+0x2e/0x1b0 [ 2074.815199] move_addr_to_kernel.part.0+0x31/0x110 [ 2074.816482] move_addr_to_kernel+0x4f/0x70 [ 2074.817380] io_connect+0x47a/0x610 [ 2074.818164] ? io_prep_rw+0x1050/0x1050 [ 2074.819030] ? __lock_acquire+0xbb1/0x5b00 [ 2074.819915] io_issue_sqe+0x1611/0x77b0 [ 2074.820750] ? io_dismantle_req+0xdf/0x180 [ 2074.821651] ? perf_trace_lock+0xac/0x490 [ 2074.822528] ? io_connect+0x610/0x610 [ 2074.823345] ? lock_acquire+0x197/0x470 [ 2074.824233] ? find_held_lock+0x2c/0x110 [ 2074.825094] ? __fget_files+0x2cf/0x520 [ 2074.825941] ? lock_downgrade+0x6d0/0x6d0 [ 2074.826812] __io_queue_sqe+0x90/0x9d0 [ 2074.827688] ? io_issue_sqe+0x77b0/0x77b0 [ 2074.828603] ? __fget_files+0x2f8/0x520 [ 2074.829448] io_submit_sqes+0x44aa/0x8610 [ 2074.830343] ? percpu_ref_tryget_many+0x21c/0x2d0 [ 2074.831369] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2074.832407] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2074.833449] ? io_submit_sqes+0x8610/0x8610 [ 2074.834565] ? recalibrate_cpu_khz+0x10/0x10 [ 2074.835639] ? ktime_get+0x158/0x1f0 [ 2074.836565] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2074.837672] ? clockevents_program_event+0x131/0x360 [ 2074.838936] ? tick_program_event+0xa8/0x140 [ 2074.840053] ? hrtimer_interrupt+0x771/0x9b0 [ 2074.841204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 03:19:25 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r11 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x2022, 0x1, {0x0, r12}}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2074.842522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2074.843878] do_syscall_64+0x33/0x40 [ 2074.844814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2074.846110] RIP: 0033:0x7fcb93017b19 [ 2074.847093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2074.851658] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2074.853442] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2074.855137] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2074.856797] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2074.858490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2074.860132] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:19:25 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r5 = syz_io_uring_setup(0x802a7b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x48}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000340)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x81) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2074.925249] FAULT_INJECTION: forcing a failure. [ 2074.925249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2074.928859] CPU: 1 PID: 11177 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2074.930368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2074.932145] Call Trace: [ 2074.932729] dump_stack+0x107/0x167 [ 2074.933503] should_fail.cold+0x5/0xa [ 2074.934353] _copy_from_user+0x2e/0x1b0 [ 2074.935219] move_addr_to_kernel.part.0+0x31/0x110 [ 2074.936308] move_addr_to_kernel+0x4f/0x70 [ 2074.937355] io_connect+0x47a/0x610 [ 2074.938332] ? io_prep_rw+0x1050/0x1050 [ 2074.939403] ? __lock_acquire+0xbb1/0x5b00 [ 2074.940501] io_issue_sqe+0x1611/0x77b0 [ 2074.941515] ? io_dismantle_req+0xdf/0x180 [ 2074.942562] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2074.943875] ? io_connect+0x610/0x610 [ 2074.944856] ? lock_acquire+0x197/0x470 [ 2074.945906] ? find_held_lock+0x2c/0x110 [ 2074.946763] ? __fget_files+0x2cf/0x520 [ 2074.947621] ? lock_downgrade+0x6d0/0x6d0 [ 2074.948620] __io_queue_sqe+0x90/0x9d0 [ 2074.949631] ? io_issue_sqe+0x77b0/0x77b0 [ 2074.950576] ? __fget_files+0x2f8/0x520 [ 2074.951453] io_submit_sqes+0x44aa/0x8610 [ 2074.952365] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2074.953417] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2074.954490] ? find_held_lock+0x2c/0x110 [ 2074.955357] ? io_submit_sqes+0x8610/0x8610 [ 2074.956275] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2074.957324] ? wait_for_completion_io+0x270/0x270 [ 2074.958402] ? rcu_read_lock_any_held+0x75/0xa0 [ 2074.959403] ? vfs_write+0x354/0xb10 [ 2074.960213] ? fput_many+0x2f/0x1a0 [ 2074.961003] ? ksys_write+0x1a9/0x260 [ 2074.961845] ? __ia32_sys_read+0xb0/0xb0 [ 2074.962725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2074.963880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2074.964996] do_syscall_64+0x33/0x40 [ 2074.965818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2074.966926] RIP: 0033:0x7f19cdf4db19 [ 2074.967740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2074.971720] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2074.973376] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2074.974947] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2074.976474] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2074.978057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2074.979613] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 03:19:38 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4340, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:19:38 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 03:19:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:19:38 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) io_uring_enter(r4, 0x1a4f, 0xbfef, 0x0, &(0x7f00000000c0)={[0x6d5b]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3212, &(0x7f00000002c0)={0x0, 0x40b1, 0x20, 0x1, 0x382}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000340)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:19:38 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x43ab, &(0x7f00000002c0)={0x0, 0x74ae, 0x10, 0x7fff, 0x231}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r8, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x7fffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r4, 0x10000000) syz_io_uring_submit(0x0, r11, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17}, 0x7) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:19:38 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 03:19:38 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgid(0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @pid=r5}]}, 0x1c}}, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = dup2(r6, r6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ptrace$setopts(0x4200, r8, 0xe3fa, 0x20) perf_event_open(&(0x7f00000002c0)={0x33ed363a824f1a44, 0x80, 0x6, 0x9, 0x7, 0x2, 0x0, 0x8, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x4, @perf_config_ext={0x6, 0x1}, 0x1d04, 0xe, 0x0, 0x2, 0x480000, 0x4, 0x100, 0x0, 0xfffffff8}, r5, 0x4, r6, 0x3) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendfile(0xffffffffffffffff, r9, 0x0, 0x2) 03:19:38 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x200000, 0x0, 0x0) [ 2087.616264] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2087.621639] loop6: detected capacity change from 0 to 17408 [ 2087.631072] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2087.641850] FAULT_INJECTION: forcing a failure. [ 2087.641850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2087.643646] CPU: 0 PID: 11214 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2087.644619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2087.645769] Call Trace: [ 2087.646162] dump_stack+0x107/0x167 [ 2087.646672] should_fail.cold+0x5/0xa [ 2087.647232] _copy_from_user+0x2e/0x1b0 [ 2087.647808] move_addr_to_kernel.part.0+0x31/0x110 [ 2087.648516] move_addr_to_kernel+0x4f/0x70 [ 2087.649130] io_connect+0x47a/0x610 [ 2087.649666] ? io_prep_rw+0x1050/0x1050 [ 2087.650271] ? __lock_acquire+0xbb1/0x5b00 [ 2087.650888] io_issue_sqe+0x1611/0x77b0 [ 2087.651466] ? io_dismantle_req+0xdf/0x180 [ 2087.652083] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2087.652849] ? io_connect+0x610/0x610 [ 2087.653402] ? lock_acquire+0x197/0x470 [ 2087.653981] ? find_held_lock+0x2c/0x110 [ 2087.654560] ? __fget_files+0x2cf/0x520 [ 2087.655135] ? lock_downgrade+0x6d0/0x6d0 [ 2087.655723] __io_queue_sqe+0x90/0x9d0 [ 2087.656184] ? io_issue_sqe+0x77b0/0x77b0 [ 2087.656668] ? __fget_files+0x2f8/0x520 [ 2087.657141] io_submit_sqes+0x44aa/0x8610 [ 2087.657638] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2087.658241] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2087.658805] ? find_held_lock+0x2c/0x110 [ 2087.659290] ? io_submit_sqes+0x8610/0x8610 [ 2087.659797] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2087.660373] ? wait_for_completion_io+0x270/0x270 [ 2087.660935] ? rcu_read_lock_any_held+0x75/0xa0 [ 2087.661484] ? vfs_write+0x354/0xb10 [ 2087.661932] ? fput_many+0x2f/0x1a0 [ 2087.662367] ? ksys_write+0x1a9/0x260 [ 2087.662809] ? __ia32_sys_read+0xb0/0xb0 [ 2087.663282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2087.663889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2087.664496] do_syscall_64+0x33/0x40 [ 2087.664927] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2087.665525] RIP: 0033:0x7f19cdf4db19 [ 2087.665972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2087.668122] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2087.669004] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2087.669844] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2087.670670] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2087.671506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2087.672332] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2087.678296] FAULT_INJECTION: forcing a failure. [ 2087.678296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2087.680072] CPU: 0 PID: 11215 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2087.680895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2087.681819] loop6: detected capacity change from 0 to 17408 [ 2087.681895] Call Trace: [ 2087.681918] dump_stack+0x107/0x167 [ 2087.684004] should_fail.cold+0x5/0xa [ 2087.684472] _copy_from_user+0x2e/0x1b0 [ 2087.684951] move_addr_to_kernel.part.0+0x31/0x110 [ 2087.685541] move_addr_to_kernel+0x4f/0x70 [ 2087.686062] io_connect+0x47a/0x610 [ 2087.686499] ? io_prep_rw+0x1050/0x1050 [ 2087.686983] ? __lock_acquire+0xbb1/0x5b00 [ 2087.687494] io_issue_sqe+0x1611/0x77b0 [ 2087.687967] ? io_dismantle_req+0xdf/0x180 [ 2087.688474] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2087.689102] ? io_connect+0x610/0x610 [ 2087.689563] ? lock_acquire+0x197/0x470 [ 2087.690045] ? find_held_lock+0x2c/0x110 [ 2087.690535] ? __fget_files+0x2cf/0x520 [ 2087.691007] ? lock_downgrade+0x6d0/0x6d0 [ 2087.691503] __io_queue_sqe+0x90/0x9d0 [ 2087.691973] ? io_issue_sqe+0x77b0/0x77b0 [ 2087.692467] ? __fget_files+0x2f8/0x520 [ 2087.692950] io_submit_sqes+0x44aa/0x8610 [ 2087.693459] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2087.694060] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2087.694637] ? find_held_lock+0x2c/0x110 [ 2087.695119] ? io_submit_sqes+0x8610/0x8610 [ 2087.695639] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2087.696210] ? wait_for_completion_io+0x270/0x270 [ 2087.696782] ? rcu_read_lock_any_held+0x75/0xa0 [ 2087.697341] ? vfs_write+0x354/0xb10 [ 2087.697792] ? fput_many+0x2f/0x1a0 [ 2087.698223] ? ksys_write+0x1a9/0x260 [ 2087.698677] ? __ia32_sys_read+0xb0/0xb0 [ 2087.699157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2087.699787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2087.700403] do_syscall_64+0x33/0x40 [ 2087.700845] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2087.701455] RIP: 0033:0x7fcb93017b19 [ 2087.701911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2087.704087] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2087.704991] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2087.705844] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2087.706691] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2087.707534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2087.708379] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2087.748394] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:19:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2087.785137] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:19:38 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x400000, 0x0, 0x0) 03:19:38 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x3) 03:19:38 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4380, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:19:38 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000006c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e21, 0x401, @remote, 0x9}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)="0cb53c06", 0x4}, {&(0x7f0000000340)="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", 0xfe}], 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x248}, 0x0, 0x4010, 0x0, {0x0, r7}}, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2087.873811] loop6: detected capacity change from 0 to 17408 [ 2087.890230] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:19:55 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x20000000, 0x0, 0x0) 03:19:55 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:19:55 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x2ae}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:19:55 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 03:19:55 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) 03:19:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:19:55 executing program 4: r0 = syz_io_uring_setup(0x58c8, &(0x7f0000000380)={0x0, 0x4c20d, 0x1, 0x0, 0x1ffffd}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x4, 0x1000, 0x0, 0x3, 0x0, 0x1}, 0x7bf) r9 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x400, 0x1af}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x2a5f4, {0x0, r10}}, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:19:55 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x0, r7}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@mcast1, r7}, 0x14) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2104.491533] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2104.501800] loop6: detected capacity change from 0 to 17408 [ 2104.506291] FAULT_INJECTION: forcing a failure. [ 2104.506291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2104.509526] CPU: 1 PID: 11262 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2104.511248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2104.513275] Call Trace: [ 2104.513943] dump_stack+0x107/0x167 [ 2104.514762] should_fail.cold+0x5/0xa [ 2104.515585] _copy_from_user+0x2e/0x1b0 [ 2104.516437] move_addr_to_kernel.part.0+0x31/0x110 [ 2104.517482] move_addr_to_kernel+0x4f/0x70 [ 2104.518508] io_connect+0x47a/0x610 [ 2104.519469] ? io_prep_rw+0x1050/0x1050 [ 2104.520554] ? __lock_acquire+0xbb1/0x5b00 [ 2104.521671] io_issue_sqe+0x1611/0x77b0 [ 2104.522816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2104.524317] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2104.525868] ? perf_trace_lock+0xac/0x490 [ 2104.527062] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2104.528643] ? io_connect+0x610/0x610 [ 2104.529777] ? lock_acquire+0x197/0x470 [ 2104.530958] ? find_held_lock+0x2c/0x110 [ 2104.532156] ? __fget_files+0x2cf/0x520 [ 2104.533319] ? lock_downgrade+0x6d0/0x6d0 [ 2104.534567] __io_queue_sqe+0x90/0x9d0 [ 2104.535700] ? io_issue_sqe+0x77b0/0x77b0 [ 2104.536901] ? __fget_files+0x2f8/0x520 [ 2104.538090] io_submit_sqes+0x44aa/0x8610 [ 2104.539351] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2104.540699] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2104.541975] ? io_submit_sqes+0x8610/0x8610 [ 2104.543105] ? recalibrate_cpu_khz+0x10/0x10 [ 2104.544214] ? ktime_get+0x158/0x1f0 [ 2104.545183] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2104.546313] ? clockevents_program_event+0x131/0x360 [ 2104.547625] ? tick_program_event+0xa8/0x140 [ 2104.548743] ? hrtimer_interrupt+0x771/0x9b0 [ 2104.549915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2104.551293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2104.552619] do_syscall_64+0x33/0x40 [ 2104.553581] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2104.554903] RIP: 0033:0x7f19cdf4db19 [ 2104.555847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2104.560552] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2104.562508] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2104.564277] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2104.566070] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2104.567830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2104.569591] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2104.591902] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2104.610756] FAULT_INJECTION: forcing a failure. [ 2104.610756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2104.614032] CPU: 0 PID: 11260 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2104.615765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2104.617830] Call Trace: [ 2104.618511] dump_stack+0x107/0x167 [ 2104.619421] should_fail.cold+0x5/0xa [ 2104.620391] _copy_from_user+0x2e/0x1b0 [ 2104.621404] move_addr_to_kernel.part.0+0x31/0x110 [ 2104.622671] move_addr_to_kernel+0x4f/0x70 [ 2104.623746] io_connect+0x47a/0x610 [ 2104.624694] ? io_prep_rw+0x1050/0x1050 [ 2104.625738] ? __lock_acquire+0xbb1/0x5b00 [ 2104.626818] io_issue_sqe+0x1611/0x77b0 [ 2104.627732] ? io_dismantle_req+0xdf/0x180 [ 2104.628698] ? perf_trace_lock+0xac/0x490 [ 2104.629649] ? io_connect+0x610/0x610 [ 2104.630550] ? lock_acquire+0x197/0x470 [ 2104.631455] ? find_held_lock+0x2c/0x110 [ 2104.632390] ? __fget_files+0x2cf/0x520 [ 2104.633298] ? lock_downgrade+0x6d0/0x6d0 [ 2104.634262] __io_queue_sqe+0x90/0x9d0 [ 2104.635162] ? io_issue_sqe+0x77b0/0x77b0 [ 2104.636108] ? __fget_files+0x2f8/0x520 [ 2104.637037] io_submit_sqes+0x44aa/0x8610 [ 2104.638037] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2104.639178] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2104.640290] ? find_held_lock+0x2c/0x110 [ 2104.641229] ? io_submit_sqes+0x8610/0x8610 [ 2104.642236] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2104.643341] ? wait_for_completion_io+0x270/0x270 [ 2104.644453] ? rcu_read_lock_any_held+0x75/0xa0 [ 2104.645516] ? vfs_write+0x354/0xb10 [ 2104.646420] ? fput_many+0x2f/0x1a0 [ 2104.647257] ? ksys_write+0x1a9/0x260 [ 2104.648129] ? __ia32_sys_read+0xb0/0xb0 [ 2104.649065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2104.650284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2104.651473] do_syscall_64+0x33/0x40 [ 2104.652326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2104.653502] RIP: 0033:0x7fcb93017b19 [ 2104.654372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2104.658600] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2104.660350] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2104.661982] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2104.663629] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2104.665276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2104.666962] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:19:55 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x20000000000000, 0x0, 0x0) 03:19:55 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 03:19:55 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2104.759569] FAULT_INJECTION: forcing a failure. [ 2104.759569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2104.762537] CPU: 0 PID: 11276 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2104.764095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2104.765949] Call Trace: [ 2104.766571] dump_stack+0x107/0x167 [ 2104.767390] should_fail.cold+0x5/0xa [ 2104.768260] _copy_from_user+0x2e/0x1b0 [ 2104.769161] move_addr_to_kernel.part.0+0x31/0x110 [ 2104.770288] move_addr_to_kernel+0x4f/0x70 [ 2104.771238] io_connect+0x47a/0x610 [ 2104.772058] ? io_prep_rw+0x1050/0x1050 [ 2104.772975] ? __lock_acquire+0xbb1/0x5b00 [ 2104.773927] io_issue_sqe+0x1611/0x77b0 [ 2104.774833] ? io_dismantle_req+0xdf/0x180 [ 2104.775786] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2104.776967] ? io_connect+0x610/0x610 [ 2104.777833] ? lock_acquire+0x197/0x470 [ 2104.778735] ? find_held_lock+0x2c/0x110 [ 2104.779655] ? __fget_files+0x2cf/0x520 [ 2104.780550] ? lock_downgrade+0x6d0/0x6d0 [ 2104.781482] __io_queue_sqe+0x90/0x9d0 [ 2104.782373] ? io_issue_sqe+0x77b0/0x77b0 [ 2104.783304] ? __fget_files+0x2f8/0x520 [ 2104.784218] io_submit_sqes+0x44aa/0x8610 [ 2104.785185] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2104.786314] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2104.787409] ? find_held_lock+0x2c/0x110 [ 2104.788325] ? io_submit_sqes+0x8610/0x8610 [ 2104.789304] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2104.790398] ? wait_for_completion_io+0x270/0x270 [ 2104.791488] ? rcu_read_lock_any_held+0x75/0xa0 [ 2104.792533] ? vfs_write+0x354/0xb10 [ 2104.793370] ? fput_many+0x2f/0x1a0 [ 2104.794201] ? ksys_write+0x1a9/0x260 [ 2104.795052] ? __ia32_sys_read+0xb0/0xb0 [ 2104.795965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2104.797146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2104.798319] do_syscall_64+0x33/0x40 [ 2104.799154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2104.800310] RIP: 0033:0x7f19cdf4db19 [ 2104.801154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2104.805282] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2104.807006] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2104.808610] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2104.810216] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2104.811815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2104.813409] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 03:19:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:19:55 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x40000000000000, 0x0, 0x0) 03:19:55 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4400, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:19:55 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_complete(r4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2104.888451] loop6: detected capacity change from 0 to 17408 03:19:55 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f00000006c0)={0x0, 0x0, 0x10, 0x40000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680)=0x0, &(0x7f0000000240)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000480)=""/113) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r4, &(0x7f00000002c0)=""/225, 0xe1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = signalfd(r5, &(0x7f00000003c0), 0x8) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r4) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r8, 0x0, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xc0f]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7fff, 0x0, 0x7]}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20008810) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="ed0053a53ad295e97fcb041faa14a53bd45a800c0000800500020018000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x50, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "9eea54bb5b771a4c4c24961ad569507c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1adaac52b4a24de4c082194f654afafa"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4005}, 0xc0011) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:19:55 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) [ 2104.911223] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2104.976783] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2104.993216] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2104.993694] FAULT_INJECTION: forcing a failure. [ 2104.993694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2104.997802] CPU: 1 PID: 11293 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2104.999096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2105.000636] Call Trace: [ 2105.001094] dump_stack+0x107/0x167 [ 2105.001702] should_fail.cold+0x5/0xa [ 2105.002391] _copy_from_user+0x2e/0x1b0 [ 2105.003065] move_addr_to_kernel.part.0+0x31/0x110 [ 2105.003880] move_addr_to_kernel+0x4f/0x70 [ 2105.004587] io_connect+0x47a/0x610 [ 2105.005187] ? io_prep_rw+0x1050/0x1050 [ 2105.005895] ? __lock_acquire+0xbb1/0x5b00 [ 2105.006648] io_issue_sqe+0x1611/0x77b0 [ 2105.007347] ? io_dismantle_req+0xdf/0x180 [ 2105.008115] ? perf_trace_lock+0xac/0x490 [ 2105.008892] ? io_connect+0x610/0x610 [ 2105.009594] ? lock_acquire+0x197/0x470 [ 2105.010324] ? find_held_lock+0x2c/0x110 [ 2105.011068] ? __fget_files+0x2cf/0x520 [ 2105.011794] ? lock_downgrade+0x6d0/0x6d0 [ 2105.012560] __io_queue_sqe+0x90/0x9d0 [ 2105.013271] ? io_issue_sqe+0x77b0/0x77b0 [ 2105.014038] ? __fget_files+0x2f8/0x520 [ 2105.014788] io_submit_sqes+0x44aa/0x8610 [ 2105.015571] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2105.016474] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2105.017362] ? find_held_lock+0x2c/0x110 [ 2105.018128] ? io_submit_sqes+0x8610/0x8610 [ 2105.018924] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2105.019808] ? wait_for_completion_io+0x270/0x270 [ 2105.020685] ? rcu_read_lock_any_held+0x75/0xa0 [ 2105.021526] ? vfs_write+0x354/0xb10 [ 2105.022210] ? fput_many+0x2f/0x1a0 [ 2105.022867] ? ksys_write+0x1a9/0x260 [ 2105.023560] ? __ia32_sys_read+0xb0/0xb0 [ 2105.024319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2105.025266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2105.026219] do_syscall_64+0x33/0x40 [ 2105.026894] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2105.027819] RIP: 0033:0x7fcb93017b19 [ 2105.028502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2105.031821] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2105.033189] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2105.034483] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2105.035779] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2105.037074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2105.038370] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2105.178565] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 03:20:11 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23457}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00'}) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20) dup(r10) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:20:11 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x2000000000000000, 0x0, 0x0) 03:20:11 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 03:20:11 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) 03:20:11 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4440, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:20:11 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000040)={0x3, 'ip6erspan0\x00', {0x6405}, 0x7}) 03:20:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:20:11 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r5 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r5, 0xb) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000001e00)=""/102400) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000001e00)=""/102400) shmctl$SHM_LOCK(r4, 0xb) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2120.204513] FAULT_INJECTION: forcing a failure. [ 2120.204513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2120.204694] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2120.210639] CPU: 0 PID: 11310 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2120.212765] FAULT_INJECTION: forcing a failure. [ 2120.212765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2120.213825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2120.213833] Call Trace: [ 2120.213866] dump_stack+0x107/0x167 [ 2120.213895] should_fail.cold+0x5/0xa [ 2120.213924] _copy_from_user+0x2e/0x1b0 [ 2120.213951] move_addr_to_kernel.part.0+0x31/0x110 [ 2120.213975] move_addr_to_kernel+0x4f/0x70 [ 2120.213999] io_connect+0x47a/0x610 [ 2120.224559] ? io_prep_rw+0x1050/0x1050 [ 2120.225492] ? __lock_acquire+0xbb1/0x5b00 [ 2120.226510] io_issue_sqe+0x1611/0x77b0 [ 2120.227437] ? io_dismantle_req+0xdf/0x180 [ 2120.228410] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2120.229702] ? io_connect+0x610/0x610 [ 2120.230677] ? lock_acquire+0x197/0x470 [ 2120.231639] ? find_held_lock+0x2c/0x110 [ 2120.232627] ? __fget_files+0x2cf/0x520 [ 2120.233579] ? lock_downgrade+0x6d0/0x6d0 [ 2120.234636] __io_queue_sqe+0x90/0x9d0 [ 2120.235616] ? io_issue_sqe+0x77b0/0x77b0 [ 2120.236641] ? __fget_files+0x2f8/0x520 [ 2120.237632] io_submit_sqes+0x44aa/0x8610 [ 2120.238707] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2120.240022] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2120.241197] ? find_held_lock+0x2c/0x110 [ 2120.242151] ? io_submit_sqes+0x8610/0x8610 [ 2120.243498] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2120.244671] ? wait_for_completion_io+0x270/0x270 [ 2120.245846] ? rcu_read_lock_any_held+0x75/0xa0 [ 2120.246988] ? vfs_write+0x354/0xb10 [ 2120.247914] ? fput_many+0x2f/0x1a0 [ 2120.248936] ? ksys_write+0x1a9/0x260 [ 2120.249865] ? __ia32_sys_read+0xb0/0xb0 [ 2120.250872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2120.252177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2120.253425] do_syscall_64+0x33/0x40 [ 2120.254347] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2120.255626] RIP: 0033:0x7f19cdf4db19 [ 2120.256525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2120.261043] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2120.262886] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2120.264605] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2120.266331] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2120.268044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2120.269752] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2120.271526] CPU: 1 PID: 11316 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2120.272963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2120.274607] Call Trace: [ 2120.275141] dump_stack+0x107/0x167 [ 2120.275867] should_fail.cold+0x5/0xa [ 2120.276599] _copy_from_user+0x2e/0x1b0 [ 2120.277358] move_addr_to_kernel.part.0+0x31/0x110 [ 2120.278358] move_addr_to_kernel+0x4f/0x70 [ 2120.279237] io_connect+0x47a/0x610 [ 2120.279998] ? io_prep_rw+0x1050/0x1050 [ 2120.280848] ? __lock_acquire+0xbb1/0x5b00 [ 2120.281731] io_issue_sqe+0x1611/0x77b0 [ 2120.282575] ? io_dismantle_req+0xdf/0x180 [ 2120.283432] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2120.284491] ? io_connect+0x610/0x610 [ 2120.285214] ? lock_acquire+0x197/0x470 [ 2120.285966] ? find_held_lock+0x2c/0x110 [ 2120.286759] ? __fget_files+0x2cf/0x520 [ 2120.287499] ? lock_downgrade+0x6d0/0x6d0 [ 2120.288191] __io_queue_sqe+0x90/0x9d0 [ 2120.289168] ? io_issue_sqe+0x77b0/0x77b0 [ 2120.289952] ? __fget_files+0x2f8/0x520 [ 2120.290688] io_submit_sqes+0x44aa/0x8610 [ 2120.291419] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2120.292250] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2120.293054] ? find_held_lock+0x2c/0x110 [ 2120.293807] ? io_submit_sqes+0x8610/0x8610 [ 2120.294583] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2120.295495] ? wait_for_completion_io+0x270/0x270 [ 2120.296370] ? rcu_read_lock_any_held+0x75/0xa0 [ 2120.297219] ? vfs_write+0x354/0xb10 [ 2120.297905] ? fput_many+0x2f/0x1a0 [ 2120.298574] ? ksys_write+0x1a9/0x260 [ 2120.299243] ? __ia32_sys_read+0xb0/0xb0 [ 2120.299972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2120.300926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2120.301863] do_syscall_64+0x33/0x40 [ 2120.302539] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2120.303486] RIP: 0033:0x7fcb93017b19 [ 2120.304152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2120.307374] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2120.308644] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2120.309892] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2120.311280] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2120.312651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2120.314023] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2120.380543] loop6: detected capacity change from 0 to 17408 [ 2120.413093] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:20:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:20:11 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x1288, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2120.500801] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:20:11 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4480, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:20:11 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c030000", @ANYRES16=0x0, @ANYBLOB="643261207040fbdbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x35c}, 0x1, 0x0, 0x0, 0x4040854}, 0x20004010) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:20:11 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) 03:20:11 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0xffffffff00000000, 0x0, 0x0) 03:20:11 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 03:20:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:20:11 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) signalfd4(r0, &(0x7f00000000c0)={[0x80]}, 0x8, 0x40800) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="a80100001a00010000000000fffffff1ac1414bb0200000000000000000000007f00"/60, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414000000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000801000000000000034d39f653c40d78d5cf0eac0082d506cb40c7140ab97aa5dfb101608e8ec5f747000000"], 0x1a8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@newae={0x124, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, {{@in=@remote, 0x4d3, 0x2}, @in=@multicast1, 0x7, 0x3502}, [@algo_comp={0xe3, 0x3, {{'deflate\x00'}, 0x4d8, "6a2cd2b53b7f702421b43e15e2562ae37f2071ab2a731fbdff558814341dc653d3821b51d1e83bde37dd0a4ab0141ae41adff35eb7a22abbd908fe015ec23a70e2b95f037a279b7f4fc25f07e795f0db6023ed9cd9b09772273a9ba3457f29ad5e0d8a6bda94fc0916209d105aa04035d8d1f73fd08460ff35e8e8823f60f25fe60961ef46e388bffd22478f5ec258870f397e1676f61b9304e3dd"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c004}, 0x4084) [ 2120.645071] loop6: detected capacity change from 0 to 17408 03:20:11 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x968a, 0x10, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r0, 0x0) r5 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x10001, 0x1, &(0x7f00000002c0)="ca5723025a9d7cd3e70d40cf55405120aeb7435ee1741c1396715fa152b8d024879546934024cf27b417c507bace1ae9fdca6b00952756025b01fe5c3a0d59520a4cdfc34f7401260dc3d4ac4a17dbf8daf5af824b49a363bbb4c8edb5889a8e7c859ffb7457566d2efafe4c0a5d63235b2c307f4404d470b08ed61108f6696fec8591fcaf9e425a68a077d48c32ca65afe6dcb6d68d9b1588e9726ede0d62a1174d2d380b71773ed13e538645fa73578b80012a05efd11776bda946c5c51b1aa6f0d79a1ab86fd3a0764bec41196773de4159fc36bd292da6cbbce803ec79c84de6f74a28f495b8674541551c72", 0x80000001, 0x0, 0x0, {0x1, r6}}, 0x200000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2120.649475] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2120.659222] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:20:11 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x2000) [ 2120.684653] FAULT_INJECTION: forcing a failure. [ 2120.684653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2120.687172] CPU: 0 PID: 11354 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2120.688503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2120.690077] Call Trace: [ 2120.690600] dump_stack+0x107/0x167 [ 2120.691293] should_fail.cold+0x5/0xa [ 2120.692039] _copy_from_user+0x2e/0x1b0 [ 2120.692802] move_addr_to_kernel.part.0+0x31/0x110 [ 2120.693745] move_addr_to_kernel+0x4f/0x70 [ 2120.694583] io_connect+0x47a/0x610 [ 2120.695293] ? io_prep_rw+0x1050/0x1050 [ 2120.696089] ? __lock_acquire+0xbb1/0x5b00 [ 2120.696915] io_issue_sqe+0x1611/0x77b0 [ 2120.697692] ? io_dismantle_req+0xdf/0x180 [ 2120.698530] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2120.699555] ? io_connect+0x610/0x610 [ 2120.700301] ? lock_acquire+0x197/0x470 [ 2120.701078] ? find_held_lock+0x2c/0x110 [ 2120.701744] FAULT_INJECTION: forcing a failure. [ 2120.701744] name failslab, interval 1, probability 0, space 0, times 0 [ 2120.701874] ? __fget_files+0x2cf/0x520 [ 2120.703901] ? lock_downgrade+0x6d0/0x6d0 [ 2120.704707] __io_queue_sqe+0x90/0x9d0 [ 2120.705464] ? io_issue_sqe+0x77b0/0x77b0 [ 2120.706265] ? __fget_files+0x2f8/0x520 [ 2120.707041] io_submit_sqes+0x44aa/0x8610 [ 2120.707861] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2120.708837] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2120.709790] ? find_held_lock+0x2c/0x110 [ 2120.710586] ? io_submit_sqes+0x8610/0x8610 [ 2120.711414] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2120.712343] ? wait_for_completion_io+0x270/0x270 [ 2120.713272] ? rcu_read_lock_any_held+0x75/0xa0 [ 2120.714160] ? vfs_write+0x354/0xb10 [ 2120.714881] ? fput_many+0x2f/0x1a0 [ 2120.715578] ? ksys_write+0x1a9/0x260 [ 2120.716309] ? __ia32_sys_read+0xb0/0xb0 [ 2120.717088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2120.718084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2120.719080] do_syscall_64+0x33/0x40 [ 2120.719793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2120.720774] RIP: 0033:0x7fcb93017b19 [ 2120.721486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2120.725025] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2120.726476] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2120.727830] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2120.729183] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2120.730541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2120.731896] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2120.733274] CPU: 1 PID: 11345 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2120.734109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2120.735044] Call Trace: [ 2120.735347] dump_stack+0x107/0x167 [ 2120.735762] should_fail.cold+0x5/0xa [ 2120.736208] ? create_object.isra.0+0x3a/0xa20 [ 2120.736774] should_failslab+0x5/0x20 [ 2120.737233] kmem_cache_alloc+0x5b/0x310 [ 2120.737707] create_object.isra.0+0x3a/0xa20 [ 2120.738231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2120.738825] kmem_cache_alloc_bulk+0x168/0x320 [ 2120.739391] io_submit_sqes+0x6fe6/0x8610 [ 2120.739871] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2120.740473] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2120.741023] ? find_held_lock+0x2c/0x110 [ 2120.741486] ? io_submit_sqes+0x8610/0x8610 [ 2120.741859] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2120.741999] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2120.742010] ? wait_for_completion_io+0x270/0x270 [ 2120.742024] ? rcu_read_lock_any_held+0x75/0xa0 [ 2120.742033] ? vfs_write+0x354/0xb10 [ 2120.742043] ? fput_many+0x2f/0x1a0 [ 2120.742061] ? ksys_write+0x1a9/0x260 [ 2120.746502] ? __ia32_sys_read+0xb0/0xb0 [ 2120.746960] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2120.747551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2120.748181] do_syscall_64+0x33/0x40 [ 2120.748681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2120.749386] RIP: 0033:0x7f19cdf4db19 [ 2120.749816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2120.751910] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2120.752768] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2120.753583] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2120.754401] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2120.755212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2120.756033] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2120.756405] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. 03:20:11 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x4000) 03:20:11 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:20:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2120.861326] loop6: detected capacity change from 0 to 17408 [ 2120.871756] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2120.879513] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:20:26 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93) 03:20:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:20:26 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x6000, @fd_index=0xa, 0x4, 0x0, 0x0, 0x4, 0x1, {0x3, r5}}, 0x1f) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x3}]}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="000829bd7000ff0625200000002b743df1d388f3a9dc2fde03c32964493657f86d2ba691065e7f7b618ef66001d5e860b603cd1607967f8f0aa4e2691dc9fcad96119675f63887c855dffe649e66e8f53fc21922a716cc84040d2fdefe0d19471017c0c5b47c64f1aae7b8fc95aeb5925aca71efff4f81941fca42870790fbb3fb9381f3aa623a587d3610d37fd5b13205b45a410437e67059a79858f238bdcd84b16d168b03b7c961537070b30330dabfac1fd2dd18a631a94b4d214060b2aa1ed78ab6d70e419c3d1277f6374b484e1ebef3dde102af9915e3ca40be871a2df3427961d17733defb353d8ee9f0daf860f6537f3c153838e8e3e5e84b89ed1564964b11b135c7ba889a748cf2190118dd033efb11ef227b61b66fa37fd15e06828db05102d339e1f3"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2136.077766] FAULT_INJECTION: forcing a failure. [ 2136.077766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.079185] CPU: 0 PID: 11388 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2136.079972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2136.080898] Call Trace: [ 2136.081204] dump_stack+0x107/0x167 [ 2136.081626] should_fail.cold+0x5/0xa [ 2136.082053] _copy_from_user+0x2e/0x1b0 [ 2136.082518] move_addr_to_kernel.part.0+0x31/0x110 [ 2136.083067] move_addr_to_kernel+0x4f/0x70 [ 2136.083546] io_connect+0x47a/0x610 [ 2136.083960] ? io_prep_rw+0x1050/0x1050 [ 2136.084413] ? __lock_acquire+0xbb1/0x5b00 [ 2136.084886] io_issue_sqe+0x1611/0x77b0 [ 2136.085333] ? io_dismantle_req+0xdf/0x180 [ 2136.085804] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2136.086396] ? io_connect+0x610/0x610 [ 2136.086836] ? lock_acquire+0x197/0x470 [ 2136.087279] ? find_held_lock+0x2c/0x110 [ 2136.087744] ? __fget_files+0x2cf/0x520 [ 2136.088186] ? lock_downgrade+0x6d0/0x6d0 [ 2136.088653] __io_queue_sqe+0x90/0x9d0 [ 2136.089091] ? io_issue_sqe+0x77b0/0x77b0 [ 2136.089552] ? __fget_files+0x2f8/0x520 [ 2136.090002] io_submit_sqes+0x44aa/0x8610 [ 2136.090496] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2136.091050] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2136.091597] ? find_held_lock+0x2c/0x110 [ 2136.092051] ? io_submit_sqes+0x8610/0x8610 [ 2136.092535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2136.093070] ? wait_for_completion_io+0x270/0x270 [ 2136.093624] ? rcu_read_lock_any_held+0x75/0xa0 [ 2136.094140] ? vfs_write+0x354/0xb10 [ 2136.094579] ? fput_many+0x2f/0x1a0 [ 2136.094992] ? ksys_write+0x1a9/0x260 [ 2136.095416] ? __ia32_sys_read+0xb0/0xb0 [ 2136.095871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2136.096454] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2136.097029] do_syscall_64+0x33/0x40 [ 2136.097444] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2136.098025] RIP: 0033:0x7f19cdf4db19 [ 2136.098447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2136.100486] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2136.101335] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2136.102130] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2136.102930] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2136.103742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2136.104532] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2136.113150] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:20:26 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(r4, 0xc) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/182) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001840)=""/146) shmctl$SHM_INFO(r4, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000100)=""/182) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000001740)=""/202) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="441400002600000026bd7000fcdbdf2501000000cb002c805109c3d051aa35f76ad5af4eb3bc915dd772c9475acfb8dd8431d53d5ed02606cca7c268d825a47270c737548410858c5f26e76294fd8f1d59a56aba30a33166136fad6c7d9e3aa45583cb37a60c3cdea5b3fd4b9ffa914ac5ef14006c00fc000000000000000000000000000000ada385f33f9d480def34c7b9f3650eef8b4dc0404a421d383588f950cb10a0a1c7364df8c1b65071e396dd44194815d9c1b2169de26a563059ec5fd31ed81ca85af919bb66c3160e7316764375048b0f3987104036d7ff9db90008001a00", @ANYRES32=0x0, @ANYBLOB="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"], 0x1444}, 0x1, 0x0, 0x0, 0x4000844}, 0x4008000) 03:20:26 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r4, &(0x7f00000002c0)=""/225, 0xe1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r4, 0x1) 03:20:26 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x200000) 03:20:26 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:20:27 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) [ 2136.131235] loop6: detected capacity change from 0 to 17408 [ 2136.139481] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2136.151477] FAULT_INJECTION: forcing a failure. [ 2136.151477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.154408] CPU: 1 PID: 11399 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2136.156006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2136.157871] Call Trace: [ 2136.158484] dump_stack+0x107/0x167 [ 2136.159321] should_fail.cold+0x5/0xa [ 2136.160200] _copy_from_user+0x2e/0x1b0 [ 2136.161093] move_addr_to_kernel.part.0+0x31/0x110 [ 2136.162194] move_addr_to_kernel+0x4f/0x70 [ 2136.163172] io_connect+0x47a/0x610 [ 2136.163978] ? io_prep_rw+0x1050/0x1050 [ 2136.164904] ? __lock_acquire+0xbb1/0x5b00 [ 2136.165864] io_issue_sqe+0x1611/0x77b0 [ 2136.166779] ? io_dismantle_req+0xdf/0x180 [ 2136.167742] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2136.169026] ? io_connect+0x610/0x610 [ 2136.169876] ? lock_acquire+0x197/0x470 [ 2136.170762] ? find_held_lock+0x2c/0x110 [ 2136.171666] ? __fget_files+0x2cf/0x520 [ 2136.172549] ? lock_downgrade+0x6d0/0x6d0 [ 2136.173467] __io_queue_sqe+0x90/0x9d0 [ 2136.174340] ? io_issue_sqe+0x77b0/0x77b0 [ 2136.175277] ? __fget_files+0x2f8/0x520 [ 2136.176170] io_submit_sqes+0x44aa/0x8610 [ 2136.177116] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2136.178207] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2136.179303] ? find_held_lock+0x2c/0x110 [ 2136.180204] ? io_submit_sqes+0x8610/0x8610 [ 2136.181169] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2136.182243] ? wait_for_completion_io+0x270/0x270 [ 2136.183336] ? rcu_read_lock_any_held+0x75/0xa0 [ 2136.184374] ? vfs_write+0x354/0xb10 [ 2136.185212] ? fput_many+0x2f/0x1a0 [ 2136.186027] ? ksys_write+0x1a9/0x260 [ 2136.186889] ? __ia32_sys_read+0xb0/0xb0 [ 2136.187809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2136.188965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2136.190133] do_syscall_64+0x33/0x40 [ 2136.190978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2136.192130] RIP: 0033:0x7fcb93017b19 [ 2136.192971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2136.197082] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2136.198800] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2136.200397] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2136.201996] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2136.203613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2136.205219] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:20:40 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) [ 2150.077601] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2150.092924] FAULT_INJECTION: forcing a failure. [ 2150.092924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2150.095786] CPU: 1 PID: 11427 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2150.097236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.098971] Call Trace: [ 2150.099522] dump_stack+0x107/0x167 [ 2150.100274] should_fail.cold+0x5/0xa [ 2150.101063] _copy_from_user+0x2e/0x1b0 [ 2150.101895] move_addr_to_kernel.part.0+0x31/0x110 [ 2150.102927] move_addr_to_kernel+0x4f/0x70 [ 2150.103804] io_connect+0x47a/0x610 [ 2150.104559] ? io_prep_rw+0x1050/0x1050 [ 2150.105402] ? __lock_acquire+0xbb1/0x5b00 [ 2150.106288] io_issue_sqe+0x1611/0x77b0 [ 2150.107125] ? io_dismantle_req+0xdf/0x180 [ 2150.108002] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2150.109096] ? io_connect+0x610/0x610 [ 2150.109892] ? lock_acquire+0x197/0x470 [ 2150.110714] ? find_held_lock+0x2c/0x110 [ 2150.111558] ? __fget_files+0x2cf/0x520 [ 2150.112378] ? lock_downgrade+0x6d0/0x6d0 [ 2150.113242] __io_queue_sqe+0x90/0x9d0 [ 2150.114061] ? io_issue_sqe+0x77b0/0x77b0 [ 2150.114934] ? __fget_files+0x2f8/0x520 [ 2150.115776] io_submit_sqes+0x44aa/0x8610 [ 2150.116662] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2150.117694] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2150.118714] ? find_held_lock+0x2c/0x110 [ 2150.119568] ? io_submit_sqes+0x8610/0x8610 [ 2150.120483] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2150.121485] ? wait_for_completion_io+0x270/0x270 [ 2150.122487] ? rcu_read_lock_any_held+0x75/0xa0 [ 2150.123452] ? vfs_write+0x354/0xb10 [ 2150.124217] ? fput_many+0x2f/0x1a0 [ 2150.124968] ? ksys_write+0x1a9/0x260 [ 2150.125752] ? __ia32_sys_read+0xb0/0xb0 [ 2150.126592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2150.127680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2150.128739] do_syscall_64+0x33/0x40 [ 2150.129504] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2150.130558] RIP: 0033:0x7f19cdf4db19 [ 2150.131333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.135133] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2150.136705] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2150.138181] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2150.139670] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.141142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2150.142608] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2150.152628] FAULT_INJECTION: forcing a failure. [ 2150.152628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2150.155552] CPU: 0 PID: 11422 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2150.157138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.159053] Call Trace: [ 2150.159664] dump_stack+0x107/0x167 [ 2150.160514] should_fail.cold+0x5/0xa [ 2150.161400] _copy_from_user+0x2e/0x1b0 [ 2150.162327] move_addr_to_kernel.part.0+0x31/0x110 [ 2150.163462] move_addr_to_kernel+0x4f/0x70 [ 2150.164432] io_connect+0x47a/0x610 [ 2150.165270] ? io_prep_rw+0x1050/0x1050 [ 2150.166215] ? __lock_acquire+0xbb1/0x5b00 [ 2150.167197] io_issue_sqe+0x1611/0x77b0 [ 2150.168126] ? io_dismantle_req+0xdf/0x180 [ 2150.169092] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2150.170321] ? io_connect+0x610/0x610 [ 2150.171208] ? lock_acquire+0x197/0x470 [ 2150.172114] ? find_held_lock+0x2c/0x110 [ 2150.173060] ? __fget_files+0x2cf/0x520 [ 2150.173973] ? lock_downgrade+0x6d0/0x6d0 [ 2150.174945] __io_queue_sqe+0x90/0x9d0 [ 2150.175851] ? io_issue_sqe+0x77b0/0x77b0 [ 2150.176783] ? __fget_files+0x2f8/0x520 [ 2150.177712] io_submit_sqes+0x44aa/0x8610 [ 2150.178709] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2150.179852] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2150.180960] ? find_held_lock+0x2c/0x110 [ 2150.181888] ? io_submit_sqes+0x8610/0x8610 [ 2150.182895] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2150.184002] ? wait_for_completion_io+0x270/0x270 [ 2150.185125] ? rcu_read_lock_any_held+0x75/0xa0 [ 2150.186186] ? vfs_write+0x354/0xb10 [ 2150.187051] ? fput_many+0x2f/0x1a0 [ 2150.187884] ? ksys_write+0x1a9/0x260 [ 2150.188767] ? __ia32_sys_read+0xb0/0xb0 [ 2150.189701] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2150.190930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2150.192114] do_syscall_64+0x33/0x40 [ 2150.192996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2150.194174] RIP: 0033:0x7fcb93017b19 [ 2150.195051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.199261] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2150.201029] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2150.202712] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2150.204375] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.206037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2150.207688] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:20:40 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r4, 0x0) io_uring_enter(r4, 0x4c32, 0x371, 0x1, &(0x7f0000000040)={[0x18f]}, 0x8) 03:20:40 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x400000) 03:20:40 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000002c0)=""/83) r1 = syz_io_uring_setup(0x12a8, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:20:40 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4540, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:20:40 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94) 03:20:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:20:40 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x1, @any, 0x4, 0x2}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:20:41 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/firmware_class', 0x200, 0x61) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x37}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80001}, 0x200048c0) r2 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r0) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r8, 0x20, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040}, 0x4000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf37, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r2, 0x595f, 0x911a, 0x1, &(0x7f0000000040)={[0xe625]}, 0x8) io_uring_enter(r2, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:20:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2150.230091] loop6: detected capacity change from 0 to 17408 [ 2150.250554] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2150.283331] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:20:41 executing program 2: rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x110, r0, 0x10000000) syz_io_uring_submit(r4, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r3, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=""/166, 0xa6}], 0x1}, 0x0, 0x10000, 0x1, {0x2}}, 0x9) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000480)={@remote, @dev}, &(0x7f00000004c0)=0xc) [ 2150.317773] loop6: detected capacity change from 0 to 17408 03:20:41 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 03:20:41 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) 03:20:41 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4580, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:20:41 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x20000000) [ 2150.522256] FAULT_INJECTION: forcing a failure. 03:20:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2150.522256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2150.525513] CPU: 0 PID: 11459 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2150.526989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.528835] Call Trace: [ 2150.529392] dump_stack+0x107/0x167 [ 2150.530144] should_fail.cold+0x5/0xa [ 2150.530954] _copy_from_user+0x2e/0x1b0 [ 2150.531153] loop6: detected capacity change from 0 to 17408 [ 2150.531794] move_addr_to_kernel.part.0+0x31/0x110 [ 2150.533728] move_addr_to_kernel+0x4f/0x70 [ 2150.534665] io_connect+0x47a/0x610 [ 2150.535425] ? io_prep_rw+0x1050/0x1050 [ 2150.536263] ? __lock_acquire+0xbb1/0x5b00 [ 2150.537160] io_issue_sqe+0x1611/0x77b0 [ 2150.537981] ? io_dismantle_req+0xdf/0x180 [ 2150.538885] ? perf_trace_lock+0xac/0x490 [ 2150.539755] ? io_connect+0x610/0x610 [ 2150.540566] ? lock_acquire+0x197/0x470 [ 2150.541388] ? find_held_lock+0x2c/0x110 [ 2150.542260] ? __fget_files+0x2cf/0x520 [ 2150.543106] ? lock_downgrade+0x6d0/0x6d0 [ 2150.543984] __io_queue_sqe+0x90/0x9d0 [ 2150.544801] ? io_issue_sqe+0x77b0/0x77b0 [ 2150.545650] ? __fget_files+0x2f8/0x520 [ 2150.546487] io_submit_sqes+0x44aa/0x8610 [ 2150.547384] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2150.548423] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2150.549431] ? find_held_lock+0x2c/0x110 [ 2150.550273] ? io_submit_sqes+0x8610/0x8610 [ 2150.551185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2150.552187] ? wait_for_completion_io+0x270/0x270 [ 2150.553226] ? rcu_read_lock_any_held+0x75/0xa0 [ 2150.554186] ? vfs_write+0x354/0xb10 [ 2150.554977] ? fput_many+0x2f/0x1a0 [ 2150.555723] ? ksys_write+0x1a9/0x260 [ 2150.556547] ? __ia32_sys_read+0xb0/0xb0 [ 2150.557418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2150.558516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2150.559606] do_syscall_64+0x33/0x40 [ 2150.560412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2150.561490] RIP: 0033:0x7fcb93017b19 [ 2150.562269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.566158] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2150.567761] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2150.569300] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2150.570802] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.572324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2150.573844] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:20:41 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgid(0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @pid=r5}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x7, 0xa0, 0x9, 0x0, 0x3e2c, 0x20100, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x12, 0xffff, 0xfff, 0x4, 0x1, 0x6f0, 0xfc00, 0x0, 0x6, 0x0, 0x7fff}, r5, 0xe, 0xffffffffffffffff, 0x8) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2150.579705] FAULT_INJECTION: forcing a failure. [ 2150.579705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2150.582497] CPU: 0 PID: 11460 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2150.584025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.585957] Call Trace: [ 2150.586682] dump_stack+0x107/0x167 [ 2150.587622] should_fail.cold+0x5/0xa [ 2150.588642] _copy_from_user+0x2e/0x1b0 [ 2150.589687] move_addr_to_kernel.part.0+0x31/0x110 [ 2150.590812] move_addr_to_kernel+0x4f/0x70 [ 2150.591734] io_connect+0x47a/0x610 [ 2150.592528] ? io_prep_rw+0x1050/0x1050 [ 2150.593367] ? trace_hardirqs_on+0x5b/0x180 [ 2150.594318] ? __lock_acquire+0xbb1/0x5b00 [ 2150.595231] io_issue_sqe+0x1611/0x77b0 [ 2150.596080] ? io_dismantle_req+0xdf/0x180 [ 2150.596975] ? perf_trace_lock+0xac/0x490 [ 2150.597857] ? io_connect+0x610/0x610 [ 2150.598691] ? lock_acquire+0x197/0x470 [ 2150.599544] ? find_held_lock+0x2c/0x110 [ 2150.600418] ? __fget_files+0x2cf/0x520 [ 2150.601264] ? lock_downgrade+0x6d0/0x6d0 [ 2150.602153] __io_queue_sqe+0x90/0x9d0 [ 2150.602994] ? io_issue_sqe+0x77b0/0x77b0 [ 2150.603869] ? __fget_files+0x2f8/0x520 [ 2150.604913] io_submit_sqes+0x44aa/0x8610 [ 2150.605824] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2150.606889] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2150.607916] ? find_held_lock+0x2c/0x110 [ 2150.608782] ? io_submit_sqes+0x8610/0x8610 [ 2150.609706] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2150.610739] ? wait_for_completion_io+0x270/0x270 [ 2150.611759] ? rcu_read_lock_any_held+0x75/0xa0 [ 2150.612756] ? vfs_write+0x354/0xb10 [ 2150.613529] ? fput_many+0x2f/0x1a0 [ 2150.614372] ? ksys_write+0x1a9/0x260 [ 2150.615188] ? __ia32_sys_read+0xb0/0xb0 [ 2150.616046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2150.617141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2150.618219] do_syscall_64+0x33/0x40 [ 2150.619039] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2150.620128] RIP: 0033:0x7f19cdf4db19 [ 2150.620917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.624822] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2150.626429] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2150.627933] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2150.629442] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.630966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2150.632474] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2150.639747] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:20:41 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x6f0b, &(0x7f0000000740)={0x0, 0xffffffff, 0x20, 0x100000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000700)=0x0, &(0x7f00000007c0)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r8, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r9 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x4004, @fd_index=0xa, 0x9c, &(0x7f0000000040)=[{&(0x7f00000002c0)="cf943a3418668c1550ea7742a6d590b51a3334bd32f3528e2e9b7f04fc001d7827a37232e7fec10b360ef1a9ec9000e9c1c284f40ff72db79233f674aa0814749887f41e014386035dd29ad8c0474eb2fecef582ab7446d34fda318b5dfa4e4072d31f58606e593d2987510932c0670a6a6f8f705ef26a5ef1bd171f84b1e08f324003e8cd88ca0018b4da8aa11cdb7c7241ff8aee7416b6f0b80e11c0e616f2fd206c98c0eb688648cb889f953ad8246006633c7dbed9b176f331efd97e4845f827c7ebd52e48bd1ce5325eda282e54be6d660edd7b233ff96e47ba3f2553889562c89c4bb50e951b", 0xe9}, {&(0x7f00000003c0)="64685d19e9e3cc59795efc8a08c7ecf0fe2795380770df6f3b8476a57b1560eb4d57e7d01d2e531240a2ef2c8f0b74753e1ba862ec6a838b3389ed830ff086b9c826299c2b70fc7c8c9cc5b56ca825a8fd53c3af724f5cbf0c0abbd84b8c0d0ae4ed2606d1c07bde9c3b39085569574d4fd2eba08ee5b2f6be4800d549085e0ffbecc93c9049a82bb8d24991f6d2e31f9d4d4993665e47cb4edfff4eee4a3b63597718bd38", 0xa5}, {&(0x7f0000000480)="e135539b7de9de8d2e049c4c0c77a179db0c5cc26d520cffefc97c1de336eabc8eb76a31f4b9d2756f3306de14cc0e0b8f0bf610f8ddc66e846b7d2c8ae9e8698f408f6f1831336726376a0b16715b746c71ab4c44ab83008d12e2d61f5e55184a386edc9548cedea758f055050e9519b567123e469b4bc402eed9a84c7af68bb2fab9259f54c4add4bd1a8bde6104cf2cde4283f203f760565346c9a0b10f039d5f46cc1099bd117ab1dc135ae914978da30b0e6ea92ad33a8afd5c616e8b0d76737ce87e20b84dacd9d7f5", 0xcc}, {&(0x7f0000000580)="9345285089f3cdacfd22e08806d3c3a3e5e910d62e71c90d5a101964f0e0027c8f2a79de809fe87bd0b09e360b56ea5356c27b969182e4bee66b6eebb1442d9dde106738b16e18c29fd47cb79b1b02fa4ced22e0ab9c9fde6afa3e0aeff1028f4b2be8f494b946c30536d63d714da43c6dfdfa69e8cd10fc4b2064faaf6c8ed1b6f15941a723f3bbd58302b3dc4c16fc49e983279b0452bd43e7a305dff68cf61503b3bfb7a81de763187f7d505b684b12d88e198832778a24434b33d1d01466cbb9fbb7d50ad1b39ed50312d8f94570e14b501e3cf23abe3685a9dbdb2b694d5bb9acf5626d8b3f217ad7cac6f626428df68a2d14", 0xf5}], 0x4, 0x0, 0x1, {0x1, r10}}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r8, 0x0, &(0x7f0000000680)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x100000000, 0x0, 0x3ff, 0x4, 0x1, {0x0, r7}}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2150.667877] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:20:41 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) r7 = syz_io_uring_complete(0x0) openat(r7, &(0x7f0000000440)='./file0\x00', 0x80002, 0x110) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r7, 0x0, r4, 0x2, 0x0, 0x0, {0x0, r9}}, 0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x8, 0x0, 0x0, {0x0, r5, r6}}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2155.754987] Bluetooth: hci5: command 0x0409 tx timeout [ 2157.803073] Bluetooth: hci5: command 0x041b tx timeout [ 2159.851060] Bluetooth: hci5: command 0x040f tx timeout [ 2161.110506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2161.112043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2161.114217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2161.176626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2161.178626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2161.181308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2161.900472] Bluetooth: hci5: command 0x0419 tx timeout 03:21:07 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x20000000000000) 03:21:07 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x45c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:21:07 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96) 03:21:07 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ftruncate(r4, 0x2c69) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) dup2(r5, r4) 03:21:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:21:07 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) process_vm_readv(0x0, &(0x7f0000000040), 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/211, 0xd3}, {&(0x7f0000001440)=""/15, 0xf}, {&(0x7f0000001480)=""/181, 0xb5}], 0x7, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:07 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) 03:21:07 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x81, 0xfffffffa, 0x20, @private1, @private1, 0x7800, 0x7800, 0x6, 0x9}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000580)={0x3f, 0x2, 0x3, 0x0, 0x0, [{{r6}, 0x100}, {{}, 0x8}, {{r5}, 0x100000000}]}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x0, r8}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, r8}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r8, 0x2f, 0x9, 0x6, 0xe217, 0x11, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x26, 0x8, 0x3f}}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@xdp={0x2c, 0x8, r4, 0x8}}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ftruncate(0xffffffffffffffff, 0xffffffffffffff63) io_uring_enter(r0, 0x35eb, 0xa036, 0x0, &(0x7f0000000040)={[0x101]}, 0x8) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2240, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x3, 0x4004, @fd=r10, 0x8, &(0x7f00000002c0)="6afe4fc65e6a3cf7dcbe7191cf2e7632c16807e4d5eadc2f6969ff84f56265a804e35b1a97ec3cb2ed082c517cbc7050e20c7ec4b8853ae65d96e6ac1d055dcd629d2f8c066fcb6afc", 0x49, 0x2, 0x1}, 0xfff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r10, 0x894c, &(0x7f0000000480)=0x413d) [ 2176.860408] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2176.896249] FAULT_INJECTION: forcing a failure. [ 2176.896249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2176.898932] FAULT_INJECTION: forcing a failure. [ 2176.898932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2176.899074] CPU: 1 PID: 11963 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2176.899082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2176.899088] Call Trace: [ 2176.899111] dump_stack+0x107/0x167 [ 2176.899130] should_fail.cold+0x5/0xa [ 2176.899152] _copy_from_user+0x2e/0x1b0 [ 2176.899174] move_addr_to_kernel.part.0+0x31/0x110 [ 2176.899193] move_addr_to_kernel+0x4f/0x70 [ 2176.899210] io_connect+0x47a/0x610 [ 2176.899228] ? io_prep_rw+0x1050/0x1050 [ 2176.899273] ? __lock_acquire+0xbb1/0x5b00 [ 2176.899298] io_issue_sqe+0x1611/0x77b0 [ 2176.899318] ? io_dismantle_req+0xdf/0x180 [ 2176.899338] ? perf_trace_lock+0xac/0x490 [ 2176.899364] ? io_connect+0x610/0x610 [ 2176.899388] ? lock_acquire+0x197/0x470 [ 2176.899416] ? find_held_lock+0x2c/0x110 [ 2176.918091] ? __fget_files+0x2cf/0x520 [ 2176.918950] ? lock_downgrade+0x6d0/0x6d0 [ 2176.919865] __io_queue_sqe+0x90/0x9d0 [ 2176.920716] ? io_issue_sqe+0x77b0/0x77b0 [ 2176.921578] ? __fget_files+0x2f8/0x520 [ 2176.922423] io_submit_sqes+0x44aa/0x8610 [ 2176.923331] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2176.924380] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2176.925401] ? find_held_lock+0x2c/0x110 [ 2176.926248] ? io_submit_sqes+0x8610/0x8610 [ 2176.927202] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2176.928256] ? wait_for_completion_io+0x270/0x270 [ 2176.929291] ? rcu_read_lock_any_held+0x75/0xa0 [ 2176.930272] ? vfs_write+0x354/0xb10 [ 2176.931051] ? fput_many+0x2f/0x1a0 [ 2176.931845] ? ksys_write+0x1a9/0x260 [ 2176.932679] ? __ia32_sys_read+0xb0/0xb0 [ 2176.933541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2176.934628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2176.935712] do_syscall_64+0x33/0x40 [ 2176.936493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2176.937570] RIP: 0033:0x7fcb93017b19 [ 2176.938342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2176.942328] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2176.943994] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2176.945514] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2176.947054] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2176.948400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2176.949730] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2176.951165] CPU: 0 PID: 11956 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2176.952992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2176.954958] Call Trace: [ 2176.955655] dump_stack+0x107/0x167 [ 2176.956425] should_fail.cold+0x5/0xa [ 2176.957239] _copy_from_user+0x2e/0x1b0 [ 2176.958073] move_addr_to_kernel.part.0+0x31/0x110 [ 2176.959119] move_addr_to_kernel+0x4f/0x70 [ 2176.960008] io_connect+0x47a/0x610 [ 2176.960773] ? io_prep_rw+0x1050/0x1050 [ 2176.961648] ? __lock_acquire+0xbb1/0x5b00 [ 2176.962555] io_issue_sqe+0x1611/0x77b0 [ 2176.963410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2176.964542] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2176.965934] ? perf_trace_lock+0xac/0x490 [ 2176.967008] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2176.968306] ? io_connect+0x610/0x610 [ 2176.969126] ? lock_acquire+0x197/0x470 [ 2176.969953] ? find_held_lock+0x2c/0x110 [ 2176.970890] ? __fget_files+0x2cf/0x520 [ 2176.971957] ? lock_downgrade+0x6d0/0x6d0 [ 2176.973070] __io_queue_sqe+0x90/0x9d0 [ 2176.974101] ? io_issue_sqe+0x77b0/0x77b0 [ 2176.975195] ? __fget_files+0x2f8/0x520 [ 2176.976280] io_submit_sqes+0x44aa/0x8610 [ 2176.977389] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2176.978699] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2176.979962] ? find_held_lock+0x2c/0x110 [ 2176.981039] ? io_submit_sqes+0x8610/0x8610 [ 2176.982171] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2176.983426] ? wait_for_completion_io+0x270/0x270 [ 2176.984696] ? rcu_read_lock_any_held+0x75/0xa0 [ 2176.985915] ? vfs_write+0x354/0xb10 [ 2176.986884] ? fput_many+0x2f/0x1a0 [ 2176.987847] ? ksys_write+0x1a9/0x260 03:21:07 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r9}}, 0x194) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2176.988841] ? __ia32_sys_read+0xb0/0xb0 [ 2176.990118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2176.991468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2176.992776] do_syscall_64+0x33/0x40 [ 2176.993721] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2176.995028] RIP: 0033:0x7f19cdf4db19 [ 2176.995971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2177.000704] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2177.002661] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2177.004520] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2177.006358] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2177.008231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2177.010091] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2177.024724] loop6: detected capacity change from 0 to 17408 [ 2177.040795] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:21:08 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0x9) 03:21:08 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:21:08 executing program 5: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0xb9, &(0x7f00000000c0)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x80000000}, 0x21010, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xa, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:08 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x40000000000000) 03:21:08 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 03:21:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2177.231651] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:08 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2177.256630] loop6: detected capacity change from 0 to 17920 [ 2177.268610] FAULT_INJECTION: forcing a failure. [ 2177.268610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2177.271404] CPU: 0 PID: 11988 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2177.272968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2177.273735] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2177.274836] Call Trace: [ 2177.274864] dump_stack+0x107/0x167 [ 2177.274891] should_fail.cold+0x5/0xa [ 2177.278287] _copy_from_user+0x2e/0x1b0 [ 2177.279221] move_addr_to_kernel.part.0+0x31/0x110 [ 2177.280331] move_addr_to_kernel+0x4f/0x70 [ 2177.281271] io_connect+0x47a/0x610 [ 2177.282098] ? io_prep_rw+0x1050/0x1050 [ 2177.283012] ? __lock_acquire+0xbb1/0x5b00 [ 2177.283978] io_issue_sqe+0x1611/0x77b0 [ 2177.284888] ? io_dismantle_req+0xdf/0x180 [ 2177.285831] ? perf_trace_lock+0xac/0x490 [ 2177.286773] ? io_connect+0x610/0x610 [ 2177.287627] ? lock_acquire+0x197/0x470 [ 2177.288438] ? find_held_lock+0x2c/0x110 [ 2177.289196] ? __fget_files+0x2cf/0x520 [ 2177.289924] ? lock_downgrade+0x6d0/0x6d0 [ 2177.290679] __io_queue_sqe+0x90/0x9d0 [ 2177.291405] ? io_issue_sqe+0x77b0/0x77b0 [ 2177.292159] ? __fget_files+0x2f8/0x520 [ 2177.292907] io_submit_sqes+0x44aa/0x8610 [ 2177.293687] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2177.294582] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2177.295472] ? find_held_lock+0x2c/0x110 [ 2177.296211] ? io_submit_sqes+0x8610/0x8610 [ 2177.297004] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2177.297866] ? wait_for_completion_io+0x270/0x270 [ 2177.298744] ? rcu_read_lock_any_held+0x75/0xa0 [ 2177.299604] ? vfs_write+0x354/0xb10 [ 2177.300285] ? fput_many+0x2f/0x1a0 [ 2177.300944] ? ksys_write+0x1a9/0x260 [ 2177.301641] ? __ia32_sys_read+0xb0/0xb0 [ 2177.302371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 03:21:08 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97) [ 2177.303327] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2177.304411] do_syscall_64+0x33/0x40 [ 2177.305079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2177.305997] RIP: 0033:0x7fcb93017b19 [ 2177.306663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2177.309957] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2177.311317] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2177.312602] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2177.313889] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2177.315178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2177.316473] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2177.345819] loop6: detected capacity change from 0 to 17920 [ 2177.350069] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:21:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2177.382881] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2177.446427] FAULT_INJECTION: forcing a failure. [ 2177.446427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2177.448920] CPU: 0 PID: 12005 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2177.450076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2177.451451] Call Trace: [ 2177.451892] dump_stack+0x107/0x167 [ 2177.452509] should_fail.cold+0x5/0xa [ 2177.453149] _copy_from_user+0x2e/0x1b0 [ 2177.453819] move_addr_to_kernel.part.0+0x31/0x110 [ 2177.454652] move_addr_to_kernel+0x4f/0x70 [ 2177.455374] io_connect+0x47a/0x610 [ 2177.455989] ? io_prep_rw+0x1050/0x1050 [ 2177.456687] ? __lock_acquire+0xbb1/0x5b00 [ 2177.457394] io_issue_sqe+0x1611/0x77b0 [ 2177.458060] ? io_dismantle_req+0xdf/0x180 [ 2177.458763] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2177.459648] ? io_connect+0x610/0x610 [ 2177.460282] ? lock_acquire+0x197/0x470 [ 2177.460948] ? find_held_lock+0x2c/0x110 [ 2177.461621] ? __fget_files+0x2cf/0x520 [ 2177.462282] ? lock_downgrade+0x6d0/0x6d0 [ 2177.462983] __io_queue_sqe+0x90/0x9d0 [ 2177.463628] ? io_issue_sqe+0x77b0/0x77b0 [ 2177.464290] ? __fget_files+0x2f8/0x520 [ 2177.464948] io_submit_sqes+0x44aa/0x8610 [ 2177.465651] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2177.466471] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2177.467287] ? find_held_lock+0x2c/0x110 [ 2177.467968] ? io_submit_sqes+0x8610/0x8610 [ 2177.468686] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2177.469499] ? wait_for_completion_io+0x270/0x270 [ 2177.470306] ? rcu_read_lock_any_held+0x75/0xa0 [ 2177.471084] ? vfs_write+0x354/0xb10 [ 2177.471697] ? fput_many+0x2f/0x1a0 [ 2177.472305] ? ksys_write+0x1a9/0x260 [ 2177.472918] ? __ia32_sys_read+0xb0/0xb0 [ 2177.473583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2177.474447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2177.475302] do_syscall_64+0x33/0x40 [ 2177.475912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2177.476743] RIP: 0033:0x7f19cdf4db19 [ 2177.477351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2177.480417] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2177.481672] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2177.482818] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2177.484012] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2177.485191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2177.486361] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 03:21:20 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xb) sendmsg$FOU_CMD_GET(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x40000) 03:21:20 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4640, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:21:20 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98) 03:21:20 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:20 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x2000000000000000) 03:21:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a000600"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:21:20 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) 03:21:20 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2189.998554] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2190.009173] loop6: detected capacity change from 0 to 17920 [ 2190.015731] FAULT_INJECTION: forcing a failure. [ 2190.015731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.018261] CPU: 1 PID: 12025 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2190.019713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.021844] Call Trace: [ 2190.022477] dump_stack+0x107/0x167 [ 2190.023295] should_fail.cold+0x5/0xa [ 2190.024134] _copy_from_user+0x2e/0x1b0 [ 2190.024998] move_addr_to_kernel.part.0+0x31/0x110 [ 2190.026106] move_addr_to_kernel+0x4f/0x70 [ 2190.026999] io_connect+0x47a/0x610 [ 2190.027772] ? io_prep_rw+0x1050/0x1050 [ 2190.028612] ? lock_chain_count+0x20/0x20 [ 2190.029506] ? __lock_acquire+0xbb1/0x5b00 [ 2190.030411] io_issue_sqe+0x1611/0x77b0 [ 2190.031265] ? io_dismantle_req+0xdf/0x180 [ 2190.032165] ? perf_trace_lock+0xac/0x490 [ 2190.033040] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.034147] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2190.035289] ? trace_hardirqs_on+0x5b/0x180 [ 2190.036207] ? io_connect+0x610/0x610 [ 2190.037026] ? lock_acquire+0x197/0x470 [ 2190.037867] ? find_held_lock+0x2c/0x110 [ 2190.038737] ? __fget_files+0x2cf/0x520 [ 2190.039583] ? lock_downgrade+0x6d0/0x6d0 [ 2190.040472] __io_queue_sqe+0x90/0x9d0 [ 2190.041300] ? io_issue_sqe+0x77b0/0x77b0 [ 2190.042204] ? __fget_files+0x2f8/0x520 [ 2190.043078] io_submit_sqes+0x44aa/0x8610 [ 2190.044014] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.045089] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.046150] ? find_held_lock+0x2c/0x110 [ 2190.047038] ? io_submit_sqes+0x8610/0x8610 [ 2190.047986] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2190.049021] ? wait_for_completion_io+0x270/0x270 [ 2190.050078] ? rcu_read_lock_any_held+0x75/0xa0 [ 2190.051053] ? vfs_write+0x354/0xb10 [ 2190.052222] ? fput_many+0x2f/0x1a0 [ 2190.053147] ? ksys_write+0x1a9/0x260 [ 2190.054137] ? __ia32_sys_read+0xb0/0xb0 [ 2190.055223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.056595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.057688] do_syscall_64+0x33/0x40 [ 2190.058477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.059598] RIP: 0033:0x7f19cdf4db19 [ 2190.060380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.065237] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2190.067077] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2190.067281] FAULT_INJECTION: forcing a failure. [ 2190.067281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.068840] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2190.068854] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.068867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.068880] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 [ 2190.076382] CPU: 0 PID: 12022 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2190.077577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.079003] Call Trace: [ 2190.079477] dump_stack+0x107/0x167 [ 2190.080106] should_fail.cold+0x5/0xa [ 2190.080768] _copy_from_user+0x2e/0x1b0 [ 2190.081476] move_addr_to_kernel.part.0+0x31/0x110 [ 2190.082328] move_addr_to_kernel+0x4f/0x70 [ 2190.083059] io_connect+0x47a/0x610 [ 2190.083702] ? io_prep_rw+0x1050/0x1050 [ 2190.084411] ? __lock_acquire+0xbb1/0x5b00 [ 2190.085138] io_issue_sqe+0x1611/0x77b0 [ 2190.085825] ? io_dismantle_req+0xdf/0x180 [ 2190.086546] ? perf_trace_lock+0xac/0x490 [ 2190.087279] ? io_connect+0x610/0x610 [ 2190.087937] ? lock_acquire+0x197/0x470 [ 2190.088623] ? find_held_lock+0x2c/0x110 [ 2190.089323] ? __fget_files+0x2cf/0x520 [ 2190.089999] ? lock_downgrade+0x6d0/0x6d0 [ 2190.090708] __io_queue_sqe+0x90/0x9d0 [ 2190.091389] ? io_issue_sqe+0x77b0/0x77b0 [ 2190.092097] ? __fget_files+0x2f8/0x520 [ 2190.092784] io_submit_sqes+0x44aa/0x8610 [ 2190.093515] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.094398] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.095275] ? find_held_lock+0x2c/0x110 [ 2190.096008] ? io_submit_sqes+0x8610/0x8610 [ 2190.096776] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2190.097628] ? wait_for_completion_io+0x270/0x270 [ 2190.098478] ? rcu_read_lock_any_held+0x75/0xa0 [ 2190.099289] ? vfs_write+0x354/0xb10 [ 2190.099922] ? fput_many+0x2f/0x1a0 [ 2190.100544] ? ksys_write+0x1a9/0x260 [ 2190.101184] ? __ia32_sys_read+0xb0/0xb0 [ 2190.101880] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.102759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.103653] do_syscall_64+0x33/0x40 [ 2190.104301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.105165] RIP: 0033:0x7fcb93017b19 [ 2190.105786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.108921] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2190.110215] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2190.111443] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2190.112650] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.113860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.115066] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2190.145019] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2190.174808] loop6: detected capacity change from 0 to 17920 [ 2190.188451] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:21:21 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0xffffffff00000000) 03:21:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a000600"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:21:21 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:21 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x600000000, 0x40000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4680, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:21:21 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99) [ 2190.271348] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:21 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r4 = pidfd_open(0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x82a60000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2190.327464] FAULT_INJECTION: forcing a failure. [ 2190.327464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.329375] CPU: 0 PID: 12047 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2190.330357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.331561] Call Trace: 03:21:21 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) [ 2190.331969] dump_stack+0x107/0x167 [ 2190.332598] should_fail.cold+0x5/0xa [ 2190.333187] _copy_from_user+0x2e/0x1b0 [ 2190.333774] move_addr_to_kernel.part.0+0x31/0x110 [ 2190.334510] move_addr_to_kernel+0x4f/0x70 [ 2190.335133] io_connect+0x47a/0x610 [ 2190.335685] ? io_prep_rw+0x1050/0x1050 [ 2190.336276] ? __lock_acquire+0xbb1/0x5b00 [ 2190.336871] io_issue_sqe+0x1611/0x77b0 [ 2190.337429] ? io_dismantle_req+0xdf/0x180 [ 2190.338016] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2190.338768] ? io_connect+0x610/0x610 [ 2190.339318] ? lock_acquire+0x197/0x470 [ 2190.339867] ? find_held_lock+0x2c/0x110 [ 2190.340438] ? __fget_files+0x2cf/0x520 [ 2190.340996] ? lock_downgrade+0x6d0/0x6d0 [ 2190.341585] __io_queue_sqe+0x90/0x9d0 [ 2190.342135] ? io_issue_sqe+0x77b0/0x77b0 [ 2190.342716] ? __fget_files+0x2f8/0x520 [ 2190.343288] io_submit_sqes+0x44aa/0x8610 [ 2190.343884] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.344578] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.345248] ? find_held_lock+0x2c/0x110 [ 2190.345810] ? io_submit_sqes+0x8610/0x8610 [ 2190.346418] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2190.347085] ? wait_for_completion_io+0x270/0x270 [ 2190.347768] ? rcu_read_lock_any_held+0x75/0xa0 [ 2190.348410] ? vfs_write+0x354/0xb10 [ 2190.348934] ? fput_many+0x2f/0x1a0 [ 2190.349435] ? ksys_write+0x1a9/0x260 [ 2190.349959] ? __ia32_sys_read+0xb0/0xb0 [ 2190.350525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.351260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.351972] do_syscall_64+0x33/0x40 [ 2190.352485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.353197] RIP: 0033:0x7f19cdf4db19 [ 2190.353709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.356269] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2190.357360] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2190.358398] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2190.359440] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.360447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.361491] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 03:21:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x46c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:21:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a000600"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2190.428715] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:21 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f00000000c0)={r4, r5+60000000}, 0x1, 0x1}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:21 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000040)) 03:21:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d0600000000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2190.465615] FAULT_INJECTION: forcing a failure. [ 2190.465615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.468494] CPU: 1 PID: 12057 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2190.469992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.471798] Call Trace: [ 2190.472380] dump_stack+0x107/0x167 [ 2190.473174] should_fail.cold+0x5/0xa [ 2190.473997] _copy_from_user+0x2e/0x1b0 [ 2190.474952] move_addr_to_kernel.part.0+0x31/0x110 [ 2190.476174] move_addr_to_kernel+0x4f/0x70 [ 2190.477179] io_connect+0x47a/0x610 [ 2190.477752] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2190.478042] ? io_prep_rw+0x1050/0x1050 [ 2190.478093] ? __lock_acquire+0xbb1/0x5b00 [ 2190.481048] io_issue_sqe+0x1611/0x77b0 [ 2190.481885] ? io_dismantle_req+0xdf/0x180 [ 2190.482771] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2190.483892] ? io_connect+0x610/0x610 [ 2190.484707] ? lock_acquire+0x197/0x470 [ 2190.485545] ? find_held_lock+0x2c/0x110 [ 2190.486414] ? __fget_files+0x2cf/0x520 [ 2190.487262] ? lock_downgrade+0x6d0/0x6d0 [ 2190.488144] __io_queue_sqe+0x90/0x9d0 [ 2190.488981] ? io_issue_sqe+0x77b0/0x77b0 [ 2190.489850] ? __fget_files+0x2f8/0x520 [ 2190.490714] io_submit_sqes+0x44aa/0x8610 [ 2190.491615] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.492673] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.493686] ? find_held_lock+0x2c/0x110 [ 2190.494559] ? io_submit_sqes+0x8610/0x8610 [ 2190.495479] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2190.496510] ? wait_for_completion_io+0x270/0x270 [ 2190.497522] ? rcu_read_lock_any_held+0x75/0xa0 [ 2190.498506] ? vfs_write+0x354/0xb10 [ 2190.499290] ? fput_many+0x2f/0x1a0 [ 2190.500065] ? ksys_write+0x1a9/0x260 [ 2190.500858] ? __ia32_sys_read+0xb0/0xb0 [ 2190.501733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.502831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.503935] do_syscall_64+0x33/0x40 [ 2190.504728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.505829] RIP: 0033:0x7fcb93017b19 [ 2190.506637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.510568] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2190.512195] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2190.513714] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2190.515257] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.516784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.518328] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:21:21 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100) 03:21:21 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) syz_io_uring_submit(r11, r9, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r9, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x3, &(0x7f00000002c0)="4f1106d315a910c1afac76806d5b3c6ba72887d04147cb7e22ae37846cfb96c8bbc33d2cc56fd7000f91c590cc3005de7b7dbbfdd150c2b18436eaab8781dea14195eebb1b8d68ace97ae29a301432e58863b305763f0a4528f0bd9cb0395ef225c11b2325ed91636087702aa3a62192d2203daf7e153ba4468c833b44abd4901ac2185702c7ad73cb1599012013f1ed09a64404f435a1e3b9be969b56df6128a3e63547865081a46a1d3ed1a10c889e444ca472e04b10d52f86c78f2d4ecfcb7c72a573100cf295ea14f2f817e7bfa60066eb7b02820e8da352a588dd3e0b9c4d5429b3a4643532fb67b7f38a4580f867d5ab2f1db616e7f8cc", 0x7ff}, 0x6) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000040)=0x1, 0x0, 0x4) 03:21:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d0600000000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2190.593112] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2190.600914] FAULT_INJECTION: forcing a failure. [ 2190.600914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.602534] CPU: 0 PID: 12077 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 2190.603353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.604329] Call Trace: [ 2190.604639] dump_stack+0x107/0x167 [ 2190.605059] should_fail.cold+0x5/0xa [ 2190.605527] _copy_from_user+0x2e/0x1b0 [ 2190.606090] move_addr_to_kernel.part.0+0x31/0x110 [ 2190.606796] move_addr_to_kernel+0x4f/0x70 [ 2190.607407] io_connect+0x47a/0x610 [ 2190.607894] ? io_prep_rw+0x1050/0x1050 [ 2190.608444] ? __lock_acquire+0xbb1/0x5b00 [ 2190.608984] io_issue_sqe+0x1611/0x77b0 [ 2190.609499] ? io_dismantle_req+0xdf/0x180 [ 2190.610051] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2190.610767] ? io_connect+0x610/0x610 [ 2190.611313] ? lock_acquire+0x197/0x470 [ 2190.611806] ? find_held_lock+0x2c/0x110 [ 2190.612319] ? __fget_files+0x2cf/0x520 [ 2190.612851] ? lock_downgrade+0x6d0/0x6d0 [ 2190.613361] __io_queue_sqe+0x90/0x9d0 [ 2190.613829] ? io_issue_sqe+0x77b0/0x77b0 [ 2190.614334] ? __fget_files+0x2f8/0x520 [ 2190.614835] io_submit_sqes+0x44aa/0x8610 [ 2190.615357] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.615949] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.616524] ? find_held_lock+0x2c/0x110 [ 2190.617009] ? io_submit_sqes+0x8610/0x8610 [ 2190.617532] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2190.618111] ? wait_for_completion_io+0x270/0x270 [ 2190.618714] ? rcu_read_lock_any_held+0x75/0xa0 [ 2190.619272] ? vfs_write+0x354/0xb10 [ 2190.619709] ? fput_many+0x2f/0x1a0 [ 2190.620137] ? ksys_write+0x1a9/0x260 [ 2190.620592] ? __ia32_sys_read+0xb0/0xb0 [ 2190.621071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.621685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.622299] do_syscall_64+0x33/0x40 [ 2190.622735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.623358] RIP: 0033:0x7f19cdf4db19 [ 2190.623797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.625953] RSP: 002b:00007f19cb4c3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2190.626857] RAX: ffffffffffffffda RBX: 00007f19ce060f60 RCX: 00007f19cdf4db19 [ 2190.627708] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2190.628543] RBP: 00007f19cb4c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.629374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2190.630219] R13: 00007ffed12c037f R14: 00007f19cb4c3300 R15: 0000000000022000 03:21:37 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:21:37 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93) 03:21:37 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xe3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f, 0x2}, 0xe) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x80000000}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) openat(r6, &(0x7f0000000040)='./file0\x00', 0xf0842, 0x6) bind$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0xfc01, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x2}, 0xe) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:37 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:37 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0xa1130, r0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2800) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4011, &(0x7f00000002c0)={0x0, 0x2ec0, 0x8, 0x0, 0x176, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d0600000000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:21:37 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2206.770327] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2206.782819] loop6: detected capacity change from 0 to 17920 [ 2206.804849] FAULT_INJECTION: forcing a failure. [ 2206.804849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2206.807587] CPU: 1 PID: 12095 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2206.809055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2206.810794] Call Trace: [ 2206.811348] dump_stack+0x107/0x167 [ 2206.812130] should_fail.cold+0x5/0xa [ 2206.812966] _copy_from_user+0x2e/0x1b0 [ 2206.813833] move_addr_to_kernel.part.0+0x31/0x110 [ 2206.814892] move_addr_to_kernel+0x4f/0x70 [ 2206.815842] io_connect+0x47a/0x610 [ 2206.816680] ? io_prep_rw+0x1050/0x1050 [ 2206.817551] ? __lock_acquire+0xbb1/0x5b00 [ 2206.818453] io_issue_sqe+0x1611/0x77b0 [ 2206.819302] ? io_dismantle_req+0xdf/0x180 [ 2206.820238] ? perf_trace_lock+0xac/0x490 [ 2206.821147] ? io_connect+0x610/0x610 [ 2206.821952] ? lock_acquire+0x197/0x470 [ 2206.822798] ? find_held_lock+0x2c/0x110 [ 2206.823673] ? __fget_files+0x2cf/0x520 [ 2206.824517] ? lock_downgrade+0x6d0/0x6d0 [ 2206.825396] __io_queue_sqe+0x90/0x9d0 [ 2206.826226] ? io_issue_sqe+0x77b0/0x77b0 [ 2206.827101] ? __fget_files+0x2f8/0x520 [ 2206.827971] io_submit_sqes+0x44aa/0x8610 [ 2206.828898] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2206.829995] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2206.831005] ? find_held_lock+0x2c/0x110 [ 2206.831903] ? io_submit_sqes+0x8610/0x8610 [ 2206.832823] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2206.833848] ? wait_for_completion_io+0x270/0x270 [ 2206.834876] ? rcu_read_lock_any_held+0x75/0xa0 [ 2206.835882] ? vfs_write+0x354/0xb10 [ 2206.836650] ? fput_many+0x2f/0x1a0 [ 2206.837425] ? ksys_write+0x1a9/0x260 [ 2206.838235] ? __ia32_sys_read+0xb0/0xb0 [ 2206.839114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2206.840222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2206.841307] do_syscall_64+0x33/0x40 [ 2206.842110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2206.843187] RIP: 0033:0x7fcb93017b19 [ 2206.843989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2206.847815] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2206.849381] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2206.850877] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2206.852625] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2206.854370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2206.855907] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:21:37 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94) 03:21:37 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r4 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x8, 0x8, 0x0, 0x1, 0x4, 0x0, {0x0, r5}}, 0x6) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000000c0)=0x9, 0x2, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c0000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:21:37 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xbe}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000e, 0x8010, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000001340)=""/153) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000012c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0)="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", 0x1000, r4}, 0x68) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:37 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2207.019289] FAULT_INJECTION: forcing a failure. [ 2207.019289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2207.022271] CPU: 1 PID: 12109 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2207.023758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.025494] Call Trace: [ 2207.026072] dump_stack+0x107/0x167 [ 2207.026858] should_fail.cold+0x5/0xa [ 2207.027713] _copy_from_user+0x2e/0x1b0 [ 2207.028549] move_addr_to_kernel.part.0+0x31/0x110 [ 2207.029575] move_addr_to_kernel+0x4f/0x70 [ 2207.030468] io_connect+0x47a/0x610 [ 2207.031249] ? io_prep_rw+0x1050/0x1050 [ 2207.032140] ? __lock_acquire+0xbb1/0x5b00 [ 2207.033026] io_issue_sqe+0x1611/0x77b0 [ 2207.033874] ? io_dismantle_req+0xdf/0x180 [ 2207.034756] ? perf_trace_lock+0xac/0x490 [ 2207.035625] ? io_connect+0x610/0x610 [ 2207.036449] ? lock_acquire+0x197/0x470 [ 2207.037287] ? find_held_lock+0x2c/0x110 [ 2207.038155] ? __fget_files+0x2cf/0x520 [ 2207.038989] ? lock_downgrade+0x6d0/0x6d0 [ 2207.039894] __io_queue_sqe+0x90/0x9d0 [ 2207.040732] ? io_issue_sqe+0x77b0/0x77b0 [ 2207.041590] ? __fget_files+0x2f8/0x520 [ 2207.042446] io_submit_sqes+0x44aa/0x8610 [ 2207.043410] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2207.044552] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2207.045592] ? find_held_lock+0x2c/0x110 [ 2207.046454] ? io_submit_sqes+0x8610/0x8610 [ 2207.047409] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2207.048436] ? wait_for_completion_io+0x270/0x270 [ 2207.049467] ? rcu_read_lock_any_held+0x75/0xa0 [ 2207.050459] ? vfs_write+0x354/0xb10 [ 2207.051245] ? fput_many+0x2f/0x1a0 [ 2207.052073] ? ksys_write+0x1a9/0x260 [ 2207.052945] ? __ia32_sys_read+0xb0/0xb0 [ 2207.053864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.054983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.056094] do_syscall_64+0x33/0x40 [ 2207.057055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.058353] RIP: 0033:0x7fcb93017b19 [ 2207.059300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2207.063382] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2207.064961] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2207.066436] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2207.067978] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2207.069454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2207.070942] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2207.081375] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2207.105477] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:38 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(0xffffffffffffffff, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:38 executing program 4: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x161000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:53 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4740, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:21:53 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d0600000000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:21:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c0000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:21:53 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12ac, &(0x7f0000000240)={0x0, 0xfffffffc, 0x20, 0x0, 0x37b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x8b9c835c603e2f8e) 03:21:53 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x2000, 0x0, 0x0, 0x0) 03:21:53 executing program 7: sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x40}, @NL80211_ATTR_SSID={0xf, 0x34, @random="6917d504d7b18c5162bd61"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9b34354ff0d6c4f39102222bd142c481"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000001) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2007, @fd_index=0x3, 0xf0, 0xd27, 0x6, 0x2, 0x1, {0x0, r5}}, 0x8) 03:21:53 executing program 5: r0 = syz_io_uring_setup(0x62dc, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000001600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000000)=0x80) syz_io_uring_submit(r1, r2, &(0x7f0000001680)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x8258}, 0x1}, 0xcb) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000001400)={'sit0\x00', 0x0, 0x4, 0x80, 0x1f, 0x9, 0x7, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x700, 0x5, 0x100000}}) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000016c0)={@dev, 0x0}, &(0x7f0000001700)=0x14) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@ll={0x11, 0x19, r6, 0x1, 0x4}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f00000017c0)={'sit0\x00', &(0x7f0000001740)={'syztnl0\x00', r5, 0x29, 0x4f, 0x81, 0x9, 0x38, @dev={0xfe, 0x80, '\x00', 0x23}, @local, 0x40, 0x7800, 0x3, 0x1}}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000001480)="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", 0xfc, r4}, 0x68) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/85, 0x55}], 0x3) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:21:53 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) [ 2222.528107] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2222.532146] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2222.556717] loop6: detected capacity change from 0 to 17920 [ 2222.565578] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2222.602453] loop6: detected capacity change from 0 to 17920 [ 2222.605687] FAULT_INJECTION: forcing a failure. [ 2222.605687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2222.607876] CPU: 1 PID: 12150 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2222.609062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2222.610494] Call Trace: [ 2222.610955] dump_stack+0x107/0x167 [ 2222.611597] should_fail.cold+0x5/0xa [ 2222.612258] _copy_from_user+0x2e/0x1b0 [ 2222.612959] move_addr_to_kernel.part.0+0x31/0x110 [ 2222.613796] move_addr_to_kernel+0x4f/0x70 [ 2222.614523] io_connect+0x47a/0x610 [ 2222.615154] ? io_prep_rw+0x1050/0x1050 [ 2222.615847] ? __lock_acquire+0xbb1/0x5b00 [ 2222.616567] io_issue_sqe+0x1611/0x77b0 [ 2222.617241] ? io_dismantle_req+0xdf/0x180 [ 2222.617957] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2222.618843] ? io_connect+0x610/0x610 [ 2222.619487] ? lock_acquire+0x197/0x470 [ 2222.620171] ? find_held_lock+0x2c/0x110 [ 2222.620871] ? __fget_files+0x2cf/0x520 [ 2222.621546] ? lock_downgrade+0x6d0/0x6d0 [ 2222.622252] __io_queue_sqe+0x90/0x9d0 [ 2222.622915] ? io_issue_sqe+0x77b0/0x77b0 [ 2222.623621] ? __fget_files+0x2f8/0x520 [ 2222.624307] io_submit_sqes+0x44aa/0x8610 [ 2222.625030] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2222.625870] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2222.626684] ? find_held_lock+0x2c/0x110 [ 2222.627377] ? io_submit_sqes+0x8610/0x8610 [ 2222.628111] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2222.628928] ? wait_for_completion_io+0x270/0x270 [ 2222.629755] ? rcu_read_lock_any_held+0x75/0xa0 [ 2222.630539] ? vfs_write+0x354/0xb10 [ 2222.631166] ? fput_many+0x2f/0x1a0 [ 2222.631795] ? ksys_write+0x1a9/0x260 [ 2222.632408] ? __ia32_sys_read+0xb0/0xb0 [ 2222.633091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2222.633942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2222.634805] do_syscall_64+0x33/0x40 [ 2222.635407] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2222.636296] RIP: 0033:0x7fcb93017b19 [ 2222.636936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2222.640039] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2222.641307] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2222.642533] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2222.643752] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2222.644946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2222.646131] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2222.652184] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2233.067115] kworker/dying (6549) used greatest stack depth: 23504 bytes left 03:22:07 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x5, 0x3, &(0x7f00000002c0)="b4cc6d2da78272c872227d5b89684d030cfdb42b934bfeb6af0b0bd95c2ff1a3533b0b15ac7ca0561177866e88b7c3a42d860f0d3f5400df0c0c0c402219012c43b5a626d48edb0b672b2c1f9239e27b0ac401417c1dcbf8f2385a5bd82827047960a971afbbfbd2806e0451bcd59897851c483e43ad6069067d14bab18f2f1b6ab8c8c9f702ecc0920fa821d4d4a5f729ea8001f5605d83a6ebded0751ac57f68a54b8781e330f32f9bbd2d0c788a9e5b8173762ca54baa9e9c45e6dbaf80602d849251813ac86f317c8f4428bd1c3fcb84e86dcd73cc74256ebba757f0e7c4fd4d3bf59660ff86f9358600ff15878a91b576", 0x8000, 0x0, 0x1, {0x2}}, 0xfffffffd) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_ifreq(r3, 0x0, &(0x7f0000000040)={'geneve1\x00', @ifru_addrs=@sco={0x1f, @none}}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:07 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c0000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:22:07 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x738c, &(0x7f0000000340)={0x0, 0x0, 0x12, 0xffffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r3, 0x0) syz_io_uring_setup(0x7de1, &(0x7f00000002c0)={0x0, 0xbd98, 0x1, 0x2, 0x382, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r6 = shmget(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) clock_gettime(0x0, &(0x7f000000abc0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a980)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001480)=""/173, 0xad}, {&(0x7f0000001540)=""/107, 0x6b}, {&(0x7f00000015c0)=""/168, 0xa8}, {&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000001680)=""/240, 0xf0}], 0x8, &(0x7f0000001800)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/249, 0xf9}], 0x1, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/249, 0xf9}, {&(0x7f0000002e00)=""/137, 0x89}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/175, 0xaf}], 0x4, &(0x7f0000003f80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f00000040c0), 0x6e, &(0x7f0000004140), 0x0, &(0x7f0000004180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000004200), 0x6e, &(0x7f0000004600)=[{&(0x7f0000004280)=""/110, 0x6e}, {&(0x7f0000004300)=""/166, 0xa6}, {&(0x7f00000043c0)=""/43, 0x2b}, {&(0x7f0000004400)=""/187, 0xbb}, {&(0x7f00000044c0)=""/127, 0x7f}, {&(0x7f0000004540)=""/134, 0x86}], 0x6, &(0x7f0000004680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000fffffffb00000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x108}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000006900)=[{&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/192, 0xc0}, {&(0x7f0000005900)=""/4096, 0x1000}], 0x3, &(0x7f0000006940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000069c0), 0x6e, &(0x7f0000006cc0)=[{&(0x7f0000006a40)=""/100, 0x64}, {&(0x7f0000006ac0)=""/172, 0xac}, {&(0x7f0000006b80)=""/47, 0x2f}, {&(0x7f0000006bc0)=""/49, 0x31}, {&(0x7f0000006c00)=""/175, 0xaf}], 0x5, &(0x7f0000006d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000006dc0), 0x6e, &(0x7f0000008340)=[{&(0x7f0000006e40)=""/216, 0xd8}, {&(0x7f0000006f40)=""/198, 0xc6}, {&(0x7f0000007040)=""/237, 0xed}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/51, 0x33}, {&(0x7f0000008180)=""/138, 0x8a}, {&(0x7f0000008240)=""/251, 0xfb}], 0x7, &(0x7f00000083c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000008400), 0x6e, &(0x7f000000a800)=[{&(0x7f0000008480)=""/105, 0x69}, {&(0x7f0000008500)=""/216, 0xd8}, {&(0x7f0000008600)=""/4096, 0x1000}, {&(0x7f0000009600)=""/28, 0x1c}, {&(0x7f0000009640)=""/2, 0x2}, {&(0x7f0000009680)=""/231, 0xe7}, {&(0x7f0000009780)=""/41, 0x29}, {&(0x7f00000097c0)=""/45, 0x2d}, {&(0x7f0000009800)=""/4096, 0x1000}], 0x9, &(0x7f000000a8c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x9, 0x2, &(0x7f000000ac00)={r7, r8+60000000}) syz_io_uring_setup(0x7631, &(0x7f000000ac40)={0x0, 0xfcf0, 0x8, 0x1, 0x94, 0x0, r9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000acc0), &(0x7f000000ad00)) shmat(r6, &(0x7f0000ffe000/0x2000)=nil, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0x5306, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f000000af00)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f000000ae40)="90f5a52995f9d6d34442c30b391ff843bdde9e6e9460ca840dd31463af42664fa1cf1f89a8dbbd80189d04ccf28df37a9b53f17420394f0e8055bb803155f52614280aaf3d31fc2a3d3f399d3fe370a2107a2982c34816443f7a705311ada085dec4b7049adfe0bfe4da7570524c4c0bfe69223b7eb12e45a50e08b0e4ce5558946e31c66d7a3f5c098234b6518f9ec5bfff78b1809fde99cc918b179424683076285dfcfd105aa9f241c02d5f55467eba6c96d17c81d748648985", 0xbb, 0x0, 0x0, {0x0, r4}}, 0x1) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:07 executing program 4: shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x50dc00, 0x104) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) ioctl$sock_proto_private(r3, 0x89e1, &(0x7f0000000340)="b31d05384ad18495200d2e25d7be4173d075b8348d1c5ca64e930c53a71ef4e1048d8ae915ba7ca35a271d88b1df32c3f4f3e042b1e32a4bb6313f5c80d3c4a27252e40d0f7e6748eff73f1c1fafc7be9c00bf71358f38a9f65b827680edf9f0399bf7d08175577bcda55e76c6fdd5756fe37d14d3cad57e304e05430347f6111ba206cf301960336f21426d934dd5318ac4f3c98849") r5 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) 03:22:07 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96) 03:22:07 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4780, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:22:07 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x4000, 0x0, 0x0, 0x0) [ 2236.485013] loop6: detected capacity change from 0 to 17920 [ 2236.503540] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2236.522416] FAULT_INJECTION: forcing a failure. [ 2236.522416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2236.525078] CPU: 1 PID: 12170 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2236.526534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2236.528369] Call Trace: [ 2236.528990] dump_stack+0x107/0x167 [ 2236.534900] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2236.536439] should_fail.cold+0x5/0xa [ 2236.536471] _copy_from_user+0x2e/0x1b0 [ 2236.536501] move_addr_to_kernel.part.0+0x31/0x110 [ 2236.536528] move_addr_to_kernel+0x4f/0x70 [ 2236.536552] io_connect+0x47a/0x610 [ 2236.536577] ? io_prep_rw+0x1050/0x1050 [ 2236.536624] ? __lock_acquire+0xbb1/0x5b00 [ 2236.536652] io_issue_sqe+0x1611/0x77b0 [ 2236.536681] ? io_dismantle_req+0xdf/0x180 [ 2236.548708] ? perf_trace_lock+0xac/0x490 [ 2236.549707] ? io_connect+0x610/0x610 [ 2236.550507] ? lock_acquire+0x197/0x470 [ 2236.551328] ? find_held_lock+0x2c/0x110 [ 2236.552339] ? __fget_files+0x2cf/0x520 [ 2236.553309] ? lock_downgrade+0x6d0/0x6d0 [ 2236.554278] __io_queue_sqe+0x90/0x9d0 [ 2236.555207] ? io_issue_sqe+0x77b0/0x77b0 [ 2236.556216] ? __fget_files+0x2f8/0x520 [ 2236.557190] io_submit_sqes+0x44aa/0x8610 [ 2236.558240] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2236.559450] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2236.560643] ? find_held_lock+0x2c/0x110 [ 2236.561668] ? io_submit_sqes+0x8610/0x8610 [ 2236.562707] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2236.563936] ? wait_for_completion_io+0x270/0x270 [ 2236.565089] ? rcu_read_lock_any_held+0x75/0xa0 [ 2236.566199] ? vfs_write+0x354/0xb10 [ 2236.567085] ? fput_many+0x2f/0x1a0 [ 2236.567977] ? ksys_write+0x1a9/0x260 [ 2236.568932] ? __ia32_sys_read+0xb0/0xb0 [ 2236.569920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2236.571179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2236.572439] do_syscall_64+0x33/0x40 [ 2236.573349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2236.574590] RIP: 0033:0x7fcb93017b19 [ 2236.575479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2236.579890] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2236.581691] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2236.583382] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2236.585077] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2236.586754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2236.588459] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:22:07 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x47c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:22:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2236.730353] loop6: detected capacity change from 0 to 17920 03:22:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c00000006000100"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2236.752526] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 03:22:07 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) sendto(r3, &(0x7f00000002c0)="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", 0x1000, 0x800, &(0x7f00000012c0)=@qipcrtr={0x2a, 0x2, 0xfffffffe}, 0x80) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) tee(r5, r0, 0x37c, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0x40, 0x0, 0x2, 0x5, 0x0, 0xaef, 0x4404, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x27, 0x8000}, 0x201, 0x7, 0x4, 0x7, 0x1, 0x401, 0x40, 0x0, 0x200, 0x0, 0x4}, 0xffffffffffffffff, 0x3, r6, 0x8) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:07 executing program 2: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:07 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x200000, 0x0, 0x0, 0x0) [ 2236.791842] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 03:22:07 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r4, 0x0, r4) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x51) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:07 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4800, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2236.873690] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:22:07 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4840, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:22:07 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97) [ 2236.991057] loop6: detected capacity change from 0 to 18432 [ 2237.021671] FAULT_INJECTION: forcing a failure. [ 2237.021671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2237.023629] CPU: 0 PID: 12221 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2237.024672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.025076] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2237.025949] Call Trace: [ 2237.025969] dump_stack+0x107/0x167 [ 2237.025986] should_fail.cold+0x5/0xa [ 2237.026005] _copy_from_user+0x2e/0x1b0 [ 2237.026036] move_addr_to_kernel.part.0+0x31/0x110 [ 2237.030991] move_addr_to_kernel+0x4f/0x70 [ 2237.031643] io_connect+0x47a/0x610 [ 2237.032223] ? io_prep_rw+0x1050/0x1050 [ 2237.032853] ? __lock_acquire+0xbb1/0x5b00 [ 2237.033511] io_issue_sqe+0x1611/0x77b0 [ 2237.034129] ? io_dismantle_req+0xdf/0x180 [ 2237.034782] ? perf_trace_lock+0xac/0x490 [ 2237.035428] ? io_connect+0x610/0x610 [ 2237.036031] ? lock_acquire+0x197/0x470 [ 2237.036645] ? find_held_lock+0x2c/0x110 [ 2237.037275] ? __fget_files+0x2cf/0x520 [ 2237.037881] ? lock_downgrade+0x6d0/0x6d0 [ 2237.038520] __io_queue_sqe+0x90/0x9d0 [ 2237.039123] ? io_issue_sqe+0x77b0/0x77b0 [ 2237.039762] ? __fget_files+0x2f8/0x520 [ 2237.040384] io_submit_sqes+0x44aa/0x8610 [ 2237.041042] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2237.041802] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2237.042539] ? find_held_lock+0x2c/0x110 [ 2237.043164] ? io_submit_sqes+0x8610/0x8610 [ 2237.043845] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2237.044584] ? wait_for_completion_io+0x270/0x270 [ 2237.045321] ? rcu_read_lock_any_held+0x75/0xa0 [ 2237.046033] ? vfs_write+0x354/0xb10 [ 2237.046601] ? fput_many+0x2f/0x1a0 [ 2237.047160] ? ksys_write+0x1a9/0x260 [ 2237.047741] ? __ia32_sys_read+0xb0/0xb0 [ 2237.048378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.049180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.049972] do_syscall_64+0x33/0x40 [ 2237.050535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.051317] RIP: 0033:0x7fcb93017b19 [ 2237.051887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.054680] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2237.055842] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2237.056922] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2237.058000] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2237.059089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.060175] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2237.087932] loop6: detected capacity change from 0 to 18432 [ 2237.098876] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:22:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c00000006000100"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:22:24 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98) 03:22:24 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4880, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:22:24 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x400000, 0x0, 0x0, 0x0) 03:22:24 executing program 4: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x7, 0x0, r3, 0x80, &(0x7f0000000180)=@can}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x8, 0x3, 0x0, 0x4ca, 0x7, 0x0, {0x0, r4}}, 0x287873c7) 03:22:24 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0xffff) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:24 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(0xffffffffffffffff, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:24 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2253.407265] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2253.409704] loop6: detected capacity change from 0 to 18432 [ 2253.415188] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2253.430514] FAULT_INJECTION: forcing a failure. [ 2253.430514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2253.433249] CPU: 0 PID: 12230 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2253.434748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.436522] Call Trace: [ 2253.437092] dump_stack+0x107/0x167 [ 2253.437873] should_fail.cold+0x5/0xa [ 2253.438684] _copy_from_user+0x2e/0x1b0 [ 2253.439533] move_addr_to_kernel.part.0+0x31/0x110 [ 2253.440582] move_addr_to_kernel+0x4f/0x70 [ 2253.441477] io_connect+0x47a/0x610 [ 2253.442244] ? io_prep_rw+0x1050/0x1050 [ 2253.443104] ? __lock_acquire+0xbb1/0x5b00 [ 2253.444017] io_issue_sqe+0x1611/0x77b0 [ 2253.444877] ? io_dismantle_req+0xdf/0x180 [ 2253.445766] ? perf_trace_lock+0xac/0x490 [ 2253.446655] ? io_connect+0x610/0x610 [ 2253.447471] ? lock_acquire+0x197/0x470 [ 2253.448322] ? find_held_lock+0x2c/0x110 [ 2253.449191] ? __fget_files+0x2cf/0x520 [ 2253.450026] ? lock_downgrade+0x6d0/0x6d0 [ 2253.450904] __io_queue_sqe+0x90/0x9d0 [ 2253.451742] ? io_issue_sqe+0x77b0/0x77b0 [ 2253.452630] ? __fget_files+0x2f8/0x520 [ 2253.453503] io_submit_sqes+0x44aa/0x8610 [ 2253.454415] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2253.455494] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2253.456540] ? find_held_lock+0x2c/0x110 [ 2253.457410] ? io_submit_sqes+0x8610/0x8610 [ 2253.458331] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2253.459348] ? wait_for_completion_io+0x270/0x270 [ 2253.460378] ? rcu_read_lock_any_held+0x75/0xa0 [ 2253.461359] ? vfs_write+0x354/0xb10 [ 2253.462150] ? fput_many+0x2f/0x1a0 [ 2253.462924] ? ksys_write+0x1a9/0x260 [ 2253.463735] ? __ia32_sys_read+0xb0/0xb0 [ 2253.464613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2253.465737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2253.466845] do_syscall_64+0x33/0x40 [ 2253.467634] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.468728] RIP: 0033:0x7fcb93017b19 [ 2253.469523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2253.473426] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2253.475056] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2253.476565] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2253.478069] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2253.479588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2253.481122] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:22:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="f860ca43154d02be4753a5aca6d01cc7da99bcc45ffe15da081456b8f1ac", 0x1e, 0x10, &(0x7f00000002c0)=@in={0x2, 0x4e21, @loopback}, 0x80) r1 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) syz_io_uring_setup(0x168f, &(0x7f0000000340)={0x0, 0xb48b, 0x10, 0x3, 0xd5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) close(r5) r6 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c00000006000100"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:22:24 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x20000000, 0x0, 0x0, 0x0) 03:22:24 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:22:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) r1 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) io_uring_enter(r1, 0x3fbd, 0xdb25, 0x1, &(0x7f0000000040)={[0x7]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2253.564818] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2253.577095] loop6: detected capacity change from 0 to 18432 [ 2253.581187] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:22:24 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x5, 0x1}, 0xe) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:24 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4900, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:22:24 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99) [ 2253.669091] loop6: detected capacity change from 0 to 18432 03:22:24 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4940, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2253.712892] FAULT_INJECTION: forcing a failure. [ 2253.712892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2253.714456] CPU: 1 PID: 12276 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2253.715252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.716225] Call Trace: [ 2253.716534] dump_stack+0x107/0x167 [ 2253.716951] should_fail.cold+0x5/0xa [ 2253.717388] _copy_from_user+0x2e/0x1b0 [ 2253.717845] move_addr_to_kernel.part.0+0x31/0x110 [ 2253.718405] move_addr_to_kernel+0x4f/0x70 [ 2253.718887] io_connect+0x47a/0x610 [ 2253.719301] ? io_prep_rw+0x1050/0x1050 [ 2253.719765] ? __lock_acquire+0xbb1/0x5b00 [ 2253.720271] io_issue_sqe+0x1611/0x77b0 [ 2253.720724] ? io_dismantle_req+0xdf/0x180 [ 2253.721207] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2253.721803] ? io_connect+0x610/0x610 [ 2253.722244] ? lock_acquire+0x197/0x470 [ 2253.722696] ? find_held_lock+0x2c/0x110 [ 2253.723162] ? __fget_files+0x2cf/0x520 [ 2253.723610] ? lock_downgrade+0x6d0/0x6d0 [ 2253.724107] __io_queue_sqe+0x90/0x9d0 [ 2253.724551] ? io_issue_sqe+0x77b0/0x77b0 [ 2253.725022] ? __fget_files+0x2f8/0x520 [ 2253.725488] io_submit_sqes+0x44aa/0x8610 [ 2253.725973] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2253.726539] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2253.727089] ? find_held_lock+0x2c/0x110 [ 2253.727556] ? io_submit_sqes+0x8610/0x8610 [ 2253.728068] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2253.728618] ? wait_for_completion_io+0x270/0x270 [ 2253.729173] ? rcu_read_lock_any_held+0x75/0xa0 [ 2253.729699] ? vfs_write+0x354/0xb10 [ 2253.730121] ? fput_many+0x2f/0x1a0 [ 2253.730536] ? ksys_write+0x1a9/0x260 [ 2253.730967] ? __ia32_sys_read+0xb0/0xb0 [ 2253.731430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2253.732042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2253.732632] do_syscall_64+0x33/0x40 [ 2253.733053] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.733632] RIP: 0033:0x7fcb93017b19 [ 2253.734056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2253.736199] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2253.737065] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2253.737879] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2253.738694] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2253.739507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2253.740336] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 03:22:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c00000006000100000008"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:22:24 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x30, r4, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2253.777305] loop6: detected capacity change from 0 to 18432 [ 2253.781222] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2253.805761] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:22:24 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x2000, 0x0, 0x0) 03:22:24 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:24 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100) 03:22:24 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4980, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:22:24 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r4, r7, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2007, @fd_index=0x5, 0x7fffffff, 0x70e3, 0x2, 0xe}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2253.895714] FAULT_INJECTION: forcing a failure. [ 2253.895714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2253.897162] CPU: 1 PID: 12297 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 2253.897952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.898898] Call Trace: [ 2253.899203] dump_stack+0x107/0x167 [ 2253.899618] should_fail.cold+0x5/0xa [ 2253.900079] _copy_from_user+0x2e/0x1b0 [ 2253.900537] move_addr_to_kernel.part.0+0x31/0x110 [ 2253.901099] move_addr_to_kernel+0x4f/0x70 [ 2253.901580] io_connect+0x47a/0x610 [ 2253.901991] ? io_prep_rw+0x1050/0x1050 [ 2253.902457] ? __lock_acquire+0xbb1/0x5b00 [ 2253.902943] io_issue_sqe+0x1611/0x77b0 [ 2253.903394] ? io_dismantle_req+0xdf/0x180 [ 2253.903874] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2253.904498] ? io_connect+0x610/0x610 [ 2253.904931] ? lock_acquire+0x197/0x470 [ 2253.905386] ? find_held_lock+0x2c/0x110 [ 2253.905848] ? __fget_files+0x2cf/0x520 [ 2253.906299] ? lock_downgrade+0x6d0/0x6d0 [ 2253.906772] __io_queue_sqe+0x90/0x9d0 [ 2253.907221] ? io_issue_sqe+0x77b0/0x77b0 [ 2253.907693] ? __fget_files+0x2f8/0x520 [ 2253.908167] io_submit_sqes+0x44aa/0x8610 [ 2253.908652] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2253.909219] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2253.909766] ? find_held_lock+0x2c/0x110 [ 2253.910231] ? io_submit_sqes+0x8610/0x8610 [ 2253.910722] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2253.911267] ? wait_for_completion_io+0x270/0x270 [ 2253.911817] ? rcu_read_lock_any_held+0x75/0xa0 [ 2253.912366] ? vfs_write+0x354/0xb10 [ 2253.912789] ? fput_many+0x2f/0x1a0 [ 2253.913203] ? ksys_write+0x1a9/0x260 [ 2253.913635] ? __ia32_sys_read+0xb0/0xb0 [ 2253.914097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2253.914695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2253.915284] do_syscall_64+0x33/0x40 [ 2253.915709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.916314] RIP: 0033:0x7fcb93017b19 [ 2253.916734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2253.918838] RSP: 002b:00007fcb9058d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2253.919702] RAX: ffffffffffffffda RBX: 00007fcb9312af60 RCX: 00007fcb93017b19 [ 2253.920532] RDX: 0000000000000000 RSI: 0000000000007e66 RDI: 0000000000000003 [ 2253.921345] RBP: 00007fcb9058d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2253.922160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2253.922971] R13: 00007ffdfd35644f R14: 00007fcb9058d300 R15: 0000000000022000 [ 2253.932361] loop6: detected capacity change from 0 to 18432 [ 2253.980137] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2254.012423] loop6: detected capacity change from 0 to 18432 [ 2254.018390] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:22:42 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x49c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:22:42 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38303439393233303000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000f4e089668a0d4000840a22d1089d0f04010040000c00000000000000d5f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000004300000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d5f4655fd5f4655fd5f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d5f4655fd6f4655fd6f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011600)="200000006418e53c6418e53c00000000d5f4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011700)="8081000000601020d5f4655fd5f4655fd5f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d5f4655f00"/160, 0xa0, 0x2600}, {&(0x7f0000011800)="c041000000380000d5f4655fd5f4655fd5f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000020000000", 0x40, 0x2a00}, {&(0x7f0000011900)="20000000000000000000000000000000d5f4655f000000000000000000000000000002ea00"/64, 0x40, 0x2a80}, {&(0x7f0000011a00)="ed4100003c000000d6f4655fd6f4655fd6f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000be5839ad000000000000000000000000000000000000000000000000200000006418e53c6418e53c14f4f03bd6f4655f14f4f03b0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011b00)="ed8100001a040000d6f4655fd6f4655fd6f4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000f3be7438000000000000000000000000000000000000000000000000200000006418e53c6418e53c6418e53cd6f4655f6418e53c0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011c00)="ffa1000026000000d6f4655fd6f4655fd6f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3830343939323330302f66696c65302f66696c653000000000000000000000000000000000000000000000f583dfd0000000000000000000000000000000000000000000000000200000006418e53c6418e53c6418e53cd6f4655f6418e53c0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011d00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011f00)="ed81000064000000d6f4655fd6f4655fd6f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c82b8fdd5000000000000000000000000000000000000000000000000200000006418e53c6418e53c6418e53cd6f4655f6418e53c0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x3000}, {&(0x7f0000012000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x10000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012800)="504d4d00504d4dffd6f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x28000}], 0x0, &(0x7f0000012e00)) fallocate(r0, 0x0, 0x2, 0x3ff) 03:22:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c00000006000100000008"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2271.513212] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:22:42 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:42 executing program 2: shmctl$IPC_RMID(0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) r0 = syz_io_uring_setup(0x12aa, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:42 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x4000, 0x0, 0x0) 03:22:42 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x372}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0xf2) r7 = syz_io_uring_setup(0x6a0e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x1010, r7, 0x8000000) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r7, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) 03:22:42 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6d44, &(0x7f00000002c0)={0x0, 0x2b99, 0x2, 0x1, 0x2f3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, {0x0, r9}}, 0x5a3f) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2271.555751] loop6: detected capacity change from 0 to 18432 [ 2271.580500] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2271.619845] loop6: detected capacity change from 0 to 18432 [ 2276.586977] Bluetooth: hci5: command 0x0406 tx timeout 03:22:56 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:56 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:56 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4a00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:22:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c00000006000100000008"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:22:56 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x200000, 0x0, 0x0) 03:22:56 executing program 7: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r0, 0x0) r1 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:22:56 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) [ 2286.018478] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:22:56 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0xc000000000000, 0x4, &(0x7f0000000600)=[{&(0x7f0000000480)="e753d969013851c6c6cd43a1d882c141d80a8016b58524d500b648e34bbaf09fe520b7436f3e459b29095a3233b3eca13a4542d4e9e39cdb3e910778cd59d40a01753cdea1d9d77e8b288ff7403e1afc0eadbb4c3836a6b2ccbf0f013a02178a7638c9b784", 0x65, 0x101}, {&(0x7f0000000500)="6c5a76e30f7aa8f5e0ff5b6bbf8b388fd9da8fd6c53db566b03826cf10cb410e0a36621ea7501e24f00b91468e969fd089ab80a2827ef7a86dca1d0fbe53d913cb9b982a1a6d92214ae531d47582600f7c20659648f965aa616694455cd5f1d3b83750b8e5b22fad5840932d9ae89869060b50f240", 0x75, 0xffffffff}, {&(0x7f0000000580), 0x0, 0x40}, {&(0x7f00000005c0)="46fe76afc18ee6f31d7c3287bcf32563c175d52e63", 0x15, 0x3ff}], 0x40001, &(0x7f0000000680)={[{@block={'block', 0x3d, 0x200}}], [{@fsmagic={'fsmagic', 0x3d, 0x200}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@euid_gt={'euid>', 0xee01}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r1, &(0x7f00000002c0)=""/225, 0xe1) renameat(r0, &(0x7f0000000700)='./file0/file0\x00', r1, &(0x7f0000000740)='./file0/file0\x00') r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x5, 0x2, &(0x7f0000000180)=[{&(0x7f0000000300)="89b07ff41ebbb64df7fe080a32d42af59ac044aa7e5915c9a2f46fac59ec2a38b60d2d5d6a5545be40ff964af1ea52837e958124a31b02b5fae58a0c60beaf227e299a222881c3b06ab46712913a873ebf07a3204031875e26e4acf86dd3ffaba9cb1905f18b6cfa0f9c713a4416e9863e6980e7454572f83b49eebd09597f82ebf25837f9bc7f1e11e900f646cc794d1d290d0467", 0x95, 0x5}, {&(0x7f00000003c0)="2cd872195e288c345082ceec8787db3e39ae6f2307a37c157031d3256ead93edd0a72a2d5344d8c16e9714cc71fe187017ded1d0c7c177fa0aca28e7db228d801d874807ce1f334c4c8e884f4baf5be8a92455b5bd09f37b829899f7219915f921746e452ba8ed22a4ed01a965f2ccd0eb641d9d5c1a1cd169e6bd30cd64c530ef1b650f5e24c46b7bbad0abf0a0b9360d72bdb3a34d63851436269b4e1c2208e9", 0xa1, 0xb1}], 0x201000, &(0x7f0000000980)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c7065726d69745f646972656384696f2c7375626a5f726f6c653d6c6f002c6d61736b3d5e4d41595f415050454e442c0080b794ccc2e77430e995946ebd4f8a9b86176d620465a2151282f82d5aebdc034839a310e59bba2b7304e7ea72273898241c7081c13a6a5936ce1418b6b1033775476d55389d88d2c7f456538eecd60f845a498eeb14b6c6a00b3af5c7e23ef1840f7a1e30cec028fb4daf9e288f292ab012478e74ad295f9ec876c22d21f4b9a5424dd938530079266a761e2f321ebaf0eb66759c9f7bbac8df7bd0000000000000"]) r3 = openat(r2, &(0x7f0000000240)='./file0/file0\x00', 0x5116e0, 0x1) fsetxattr$security_capability(r3, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000940)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r6, 0x0, r6) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x200440c0}, 0x45) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000000)={0x0, 0x1}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r7, &(0x7f0000000880)={'#! ', './file0', [{0x20, '-'}, {0x20, 'mask'}, {0x20, '-'}, {0x20, '\\..'}, {0x20, 'subj_role'}, {}], 0xa, "8a4b3e351dca9244c30f4aca01fb3697fb324bdcf2f14588be"}, 0x3c) [ 2286.057626] loop6: detected capacity change from 0 to 18944 [ 2286.078669] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:22:57 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x400000, 0x0, 0x0) 03:22:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c0000000600010000000800"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:22:57 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4a40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:22:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) shmctl$IPC_RMID(0x0, 0x0) r1 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f00000002c0)=""/115) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) shmget(0x2, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2286.259781] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:22:57 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x2000, 0x0, 0x0, 0x0) [ 2286.303450] loop6: detected capacity change from 0 to 18944 [ 2286.310181] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2286.353459] loop6: detected capacity change from 0 to 18944 [ 2286.364188] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:23:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x4c, 0x12, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x4c}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = dup(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000080)={@local, 0x0, r9}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r9}) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xe324c73d25be45d}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xd8, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x1) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x0, r4}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r4}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x194, 0x13, 0x400, 0x70bd28, 0x25dfdbfb, {0x10, 0x6, 0x2, 0x5, {0x4e20, 0x4e20, [0xe2d1, 0xf4, 0x9d6, 0x2], [0x8001, 0x7, 0xfd7a, 0x64614574], r4, [0x1, 0x401]}, 0x0, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x35, 0x1, "ed676947e96bdf03e529e6319f4d80b75274f3ecb3a092c45314c3c69caa6e239f69f26f00bdf90332f1b1734cba111206"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "799377df8ffce40e74e035ff41849cd0b405e6711df9f9ddf3f92905c995120806bb69ff02297fd939a0bad9ea7ff7769b77368fcc701a534ba5538cb2670b42940ec0da04c3c1d9e29a15"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "ebc2f17738fa47c0e258f4528d5cff07ce02d0ac89a9319441b1ce40add16d9a912abc23ad9721fe51e824a98dae099f225b8ff39e51da3ff87f76c9b9faa40f752b4d9c7d90a7edbb8ab9ae71f5983125316b4a41aed514748c8f9394868a0e7e04b3a2c1c1fecf4ff6cda2762e687d63f29ede804031b5fdaebe350813ca4c55ebfb93e8db984c0ab40b2a1ef37a3b2f8f3cb57538e4f13a18235ae6f4df935129b08be862eca22ef9ec8debb2ceed0a132e4889b5c82d9a"}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x400c800) 03:23:11 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x20000000, 0x0, 0x0) 03:23:11 executing program 2: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2300.943680] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2300.947486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 03:23:11 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x4000, 0x0, 0x0, 0x0) 03:23:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c0000000600010000000800"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:23:11 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x2a7b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x8000000) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x3600, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0xfe67, 0x6bca, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3ff, 0x0, &(0x7f0000000500)="a06e5817cd0143d88bd7aee90f3628b13ece967b4fed4e2a93119bc0cac495667a31dbf2aec76fbccab94b1e6830424a7edc423c92aafcc9cdaf733396e2e9c98b8460413e2078bebae314bd07e6221fa8ec8a27de89334cb23b38fb1fe36f413535aa7621cda31f5a309bd85fb2d595f22a96db65413cabdb4fb9febab80b2d2ff699d81b55497071a2a8fe367bbc4b6e40d1725ffea8157545daa187559d90c4ba476cdbc54798a67eeec902f3f6fba065631d63d4f292b508f97b3f1441ec9beb16837d7774dcbf5bf0c49d1bd0e98387e4f58e5635cefe8b308e7b7f56bf59f447f4777d3cdbb5ebdc05d79159f6f4f75af4df36461852f319b92cd7d12f6c0aa28353890ab66db99defa375f82e2caf9305bc84940fc3ffc024c3b515c3eabbafc1dd371e952170ea4b86c351f935fdac2e", 0x4, 0x0, 0x0, {0x6, r5}}, 0x1) 03:23:11 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4a80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:23:11 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) r4 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000016c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000001680)={&(0x7f0000000380)=@ax25={{0x3, @null}, [@rose, @bcast, @netrom, @default, @bcast, @default, @rose, @rose]}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/160, 0xa0}, {&(0x7f00000014c0)=""/58, 0x3a}, {&(0x7f0000001500)=""/105, 0x69}, {&(0x7f0000001580)=""/122, 0x7a}], 0x5}, 0x0, 0x0, 0x1, {0x2, r5}}, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/18, 0x12}) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0xfffffffffffffffc) io_uring_enter(0xffffffffffffffff, 0x2ce8, 0x5ea2, 0x2, &(0x7f00000002c0)={[0x29e]}, 0x8) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f0000000300)) io_uring_enter(r0, 0x1d82, 0x5c06, 0x3, &(0x7f0000000340)={[0x20]}, 0x8) [ 2300.976666] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2300.989445] loop6: detected capacity change from 0 to 18944 [ 2301.008264] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:23:11 executing program 4: ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000080)) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x458, 0x2f, 0x4, 0x70bd2d, 0x25dfdbff, {0x18}, [@nested={0x1e1, 0x60, 0x0, 0x1, [@generic="a052438b803bd1857feb8c3261d580dc46840e95e583212f187c30e9105c940b629af5711f857cbf71e46f6da464ccc5dc15356c8d10b7a8a02bdb812ba486ce710aeb1ec3dd1479c4ec59131c19506932aa6dc7dd4af85c462b66b5748c2efa5843a6fd2dcb8da1c59b2d845b8f722b00d05be6f085928165acd78fdbb0cd97630b94a3e6f1261aeb88504e716d0497e46e5d6fdb925948e7a66590dd75fa67f421e6d1e5a4db43e897b4c096cb5d73f9075eeab01d964af43a9137c6d67186f0ad9e7afe662019c016f3a638558d81d3487c4ca84236672ea5bd602c955f1dec", @generic="35ee14a30dd129fa46890696d5601a73488b2bda83e92917011edb3e0cdfba4993ddea00baafe35097a77045f2fba0e302c945f0bee1d6eaf4f35149dbbc0e10d4bf3b5cdd4c6f9aa7e41251ad7e16c492ffbf2f7bec16a83069c5ceacfe62a915739ee51d53f8455b850d3ea9e5d07629bbb77e60c926ff00b8a3cf58e19c98aaede833ce8dc6692167ef6c3d6efb2032c0123b21f304a152fc6c22b83d457740496de8c7010c5a82d8e9be5109e6b763dab3e18f98f6f4c7b0b79f09e5a003925d17ec4ce7b168cab2ef69c16bb951c506e24247caf70062711e0a9ba0d296201e35a67110b61b6c8de6a0d7fedf73", @typed={0x9, 0x66, 0x0, 0x0, @str='%\xfb[[\x00'}]}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x255, 0x1d, 0x0, 0x1, [@generic="14d90c7488bb13288b00dc8c4eea768f613e899c6d2a7d1c09c11d658aa8702ae0d824ff4e4f09fefb86ff04f1081e2ce28727cd4a9b291ad5c2cd400aaa5a3b8c7ffa29ab0fdf227b27c5d1df0e9e9566ae90ec7050b1fa413769ecfc87d48195ea546777821bcb1d01b0ff76d7c5b673520733e01ba6ae80831f9060a9051fc14838eda9d387f8f10e14a38237ff09a65bc83c28aa95775477cee9ac130e1819ea4977ac7e4d8bb95d17b29c25f4f9ad48ac6868e71d52a7a7dd754e538fd49c1fdbf787c31cb29f9b53489f92cb3a254aab6ba2c5647c06c2ad8a09161e9a2a09e4afa0084554f3bc58bbb97b4918f671356616f77bdd303c2e", @generic="9dd4e902b7ad2c0db60dd6f72008767ab427820486aaee862134414c16cf3286400311348705e8156cb4833766dac5b63dd047cc1535f0843e1ea1085829fe389125c3b8e84141922754f458acf6570cc9357a985eb4723fedc92336d7a82276b60fdb59aa31d0731af7ebff183fd7f17b26ca70a662774b425728fa4e1f991dbcd70720d01df7721b65defb7035399113caed6e469a96bf4626dd0e610ce9debd0d4750", @generic="52654df5b541f4e8accbb1e872cbe60f576c36bf87ebde1bbe8de365eab6a8899ba82f8ec99be216a150fbf7545c216ec70c899b679c5fa3226bb5f87654922305a0185e965ba37fd0c6d63a33ee84b233655c403fa40924842e3881b8dceeb8dbfd5e1f770626b40a15bcdf85a38a444d2cecb34707d723e2089bc75903651d4472f8587b06bb80c91965796265b4b8e3c04166da6005ade446bbe4c812270cf27192b5a0ef65fc75ae9ad513fa45dab81e"]}]}, 0x458}, 0x1, 0x0, 0x0, 0x5}, 0x4000151) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002000210c0000000000000000020008010000af87040a6d00705ae0d93d3ecd5f039467a0de7c744eb020b1e3e5103988b0f30bbd685b75cb61250cce32801329e392c7d0004df124b426acf101cd543320946c92348e05d87d900833abdbe3facd1fac64a9b190ea19b70003f3c2fed2b09c5afb592a8959e1bc4c5c487cb14aaa29cc1d93aa9d0048aed6cc9a147565d7b3ceb0c6f1c01087ec2860d99168e2af150e4301d185617c313c44f65df0e9222e71f35e11c676d694f1307c5d01b59fce37d22153d4118f217cc28e9a84979345eba1c0cdc1ea25c8eaeb7db3167f225bd596f98cbfaf"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xcc, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2ff7405}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_NAT_DST={0x88, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x25}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380), 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x20004000) 03:23:11 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x20000000000000, 0x0, 0x0) 03:23:11 executing program 2: shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x6554, &(0x7f0000000180)={0x0, 0x6847, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r4, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x2010, r4, 0x10000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xe0, 0x19, 0x10, 0x70bd2a, 0x25dfdbfe, {0x12}, [@generic="96a30dec89cf9ab722fafa8bcf5a27ef5b11f307ede6b2f91fa90db72366a9bf428856b564e24e6ece99b4ae1df6c4f29a6ae559668fc18c1c505248122a35697689c070e62af319ab596eae06bafa983131ebb6ed4d04cfe8eafc1c54b91f72b35f7c2401366fe0a4066c64a1093761fe74baf7c0b1f12425256c2764beb4444abcf34cde79668bf0eaa6cfbfd4572f8d5b3caff924a7c371b51d4bbd9e61edb22fad95eab3170305ed9ad9a016c2b83b0e2063e51029f5294aa2f8db76458a90c31306a9a478003c"]}, 0xe0}, 0x1, 0x0, 0x0, 0x6004}, 0x4) 03:23:12 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4ac0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:23:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c0000000600010000000800"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:23:12 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r3, 0x10000000) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8914, &(0x7f0000000140)={'lo\x00'}) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r12, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r13, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=""/186, 0xba}, 0x0, 0x40002000, 0x0, {0x0, r14}}, 0xfff) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x4) [ 2301.158555] loop6: detected capacity change from 0 to 18944 [ 2301.162553] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2301.183182] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:23:12 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x200000, 0x0, 0x0, 0x0) 03:23:12 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x3}]}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x30001901}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', r8, 0x7, 0x40, 0x2000000, 0x9, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x66, 0x0, 0x3, 0x2f, 0x0, @broadcast, @local, {[@noop, @noop]}}}}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10040, 0x0) mkdirat(r9, &(0x7f0000000200)='./file0\x00', 0x14) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:23:12 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x88002, &(0x7f00000001c0)={[{@subsystem='cpu'}]}) chdir(&(0x7f0000000240)='./file0\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x3f7, 0x300, 0x70bd2b, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) syz_mount_image$nfs4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:23:12 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x400000, 0x0, 0x0, 0x0) 03:23:12 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x40000000000000, 0x0, 0x0) 03:23:12 executing program 2: sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000010900090000000000000000050000086000020006000340000300002c000180140003002001000000000000000000000000000214000400fe88000700000000000000000000000106000340000300000c00028005000100880000000c00028005000100000000ff000003400004000008000640000000010800064000000001080005400000001a0900010073797a30000000000c00020006000340000200000800034000000008"], 0xac}, 0x1, 0x0, 0x0, 0x8084}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x6000, @fd, 0x6, &(0x7f00000019c0), 0x0, 0x10, 0x1}, 0x4d) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="9dd6cc2e2677a371", 0x8, 0x4020, &(0x7f0000000340)={0x11, 0xc, r1, 0x1, 0x3f}, 0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0), 0x4) 03:23:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2301.321826] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:23:26 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:23:26 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_rxnfc={0x2e, 0x7, 0x10000, {0x9, @hdata="b0b535f1cdbd1b6e70bfb54d96d410ad11d0b2c34789430d0bffcb2943654e965fa4397e547f95a985b345ed73504d83f8196790", {0x0, @random="98d1e68d0511", 0x9, 0x7, [0x3, 0x7]}, @hdata="74895ebcf1f97381abf49b1d1412991f1a074a7ce4ce3f7ebfd3bb6da7e16dc895989f2c85f4e8371f85025aa8217790f84c5bbe", {0x0, @random="5edabdc96a88", 0xd1ab, 0x2, [0x80000000, 0xffffffff]}, 0x6, 0x5}, 0x2, [0x1, 0x5]}}) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x200800, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}], [{@subj_role={'subj_role', 0x3d, '\\%&+)--]'}}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_user={'subj_user', 0x3d, '{:&'}}]}}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x80000000}, 0xb00, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:23:26 executing program 4: listen(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = io_uring_setup(0x3972, &(0x7f0000000a40)={0x0, 0x5912, 0x0, 0x1, 0x24}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x2}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/77, 0x4d, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f2000008008000000", @ANYRES32=r1, @ANYBLOB="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"], 0x48}}, 0x0) 03:23:26 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0xae, 0xd, 0x0, 0x0, 0x5, 0x40, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x60, 0x1, @perf_config_ext={0x7, 0xf6e}, 0x40, 0x100000000, 0x1, 0x7, 0x3f, 0x1, 0x1f, 0x0, 0xfffffffc}, 0x0, 0x5, r0, 0x2) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x0, 0x6, 0x1, 0x200, 0xff}) r4 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)={0x10000, 0x3d0, 0x1}, 0x18) getsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000280), &(0x7f00000002c0)=0x10) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) 03:23:26 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x2000000000000000, 0x0, 0x0) 03:23:26 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x20000000, 0x0, 0x0, 0x0) 03:23:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:23:26 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r5, 0x400, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x20044811) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008094}, 0x4000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2315.914210] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2315.958519] loop6: detected capacity change from 0 to 18944 [ 2316.050559] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! [ 2316.090143] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2316.193382] loop6: detected capacity change from 0 to 18944 [ 2316.307765] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2316.309775] CPU: 1 PID: 12487 Comm: syz-executor.4 Not tainted 5.10.236 #1 [ 2316.311315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.313233] Call Trace: [ 2316.313833] dump_stack+0x107/0x167 [ 2316.314653] sysfs_warn_dup.cold+0x1c/0x29 [ 2316.315596] sysfs_do_create_link_sd+0x122/0x140 [ 2316.316656] sysfs_create_link+0x5f/0xc0 [ 2316.317568] device_add+0x703/0x1c50 [ 2316.318404] ? devlink_add_symlinks+0x970/0x970 [ 2316.319563] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2316.320732] wiphy_register+0x1da6/0x2850 [ 2316.321675] ? wiphy_unregister+0xb90/0xb90 [ 2316.323040] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2316.324300] ieee80211_register_hw+0x23c5/0x38b0 [ 2316.325507] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2316.326659] ? net_generic+0xdb/0x2b0 [ 2316.327644] ? lockdep_init_map_type+0x2c7/0x780 [ 2316.328861] ? memset+0x20/0x50 [ 2316.329690] ? __hrtimer_init+0x12c/0x270 [ 2316.330697] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2316.331902] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2316.332945] ? hwsim_new_radio_nl+0x967/0x1080 [ 2316.333999] ? memcpy+0x39/0x60 [ 2316.334701] hwsim_new_radio_nl+0x991/0x1080 [ 2316.335659] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2316.336983] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2316.338366] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2316.339743] genl_family_rcv_msg_doit+0x22d/0x330 [ 2316.340881] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2316.342258] ? cap_capable+0x1cd/0x230 [ 2316.343146] ? ns_capable+0xe2/0x110 [ 2316.344101] genl_rcv_msg+0x36a/0x5a0 [ 2316.345099] ? genl_get_cmd+0x480/0x480 [ 2316.346249] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2316.347533] ? lock_release+0x680/0x680 [ 2316.348486] ? netlink_deliver_tap+0xf4/0xcc0 [ 2316.349546] netlink_rcv_skb+0x14b/0x430 [ 2316.350531] ? genl_get_cmd+0x480/0x480 [ 2316.351513] ? netlink_ack+0xab0/0xab0 [ 2316.352482] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2316.353582] ? is_vmalloc_addr+0x7b/0xb0 [ 2316.354575] genl_rcv+0x24/0x40 [ 2316.355372] netlink_unicast+0x54e/0x800 [ 2316.356360] ? netlink_attachskb+0x870/0x870 [ 2316.357459] netlink_sendmsg+0x90f/0xe00 [ 2316.358456] ? netlink_unicast+0x800/0x800 [ 2316.359547] ? netlink_unicast+0x800/0x800 [ 2316.360624] __sock_sendmsg+0x154/0x190 [ 2316.361652] ____sys_sendmsg+0x70d/0x870 [ 2316.362682] ? sock_write_iter+0x3d0/0x3d0 [ 2316.363743] ? do_recvmmsg+0x6d0/0x6d0 [ 2316.364769] ___sys_sendmsg+0xf3/0x170 [ 2316.365756] ? sendmsg_copy_msghdr+0x160/0x160 [ 2316.366894] ? __fget_files+0x2cf/0x520 [ 2316.367875] ? lock_downgrade+0x6d0/0x6d0 [ 2316.368938] ? futex_exit_release+0x220/0x220 [ 2316.370048] ? find_held_lock+0x2c/0x110 [ 2316.371049] ? __fget_files+0x2f8/0x520 [ 2316.372050] ? __fget_light+0xea/0x290 [ 2316.373055] __sys_sendmsg+0xe5/0x1b0 [ 2316.374015] ? __sys_sendmsg_sock+0x40/0x40 [ 2316.375062] ? __do_sys_futex+0x2bb/0x480 [ 2316.376131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.377410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.378708] ? trace_hardirqs_on+0x5b/0x180 [ 2316.379758] do_syscall_64+0x33/0x40 [ 2316.380686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2316.381962] RIP: 0033:0x7f88f2458b19 [ 2316.382929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.387534] RSP: 002b:00007f88ef9ce188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2316.389435] RAX: ffffffffffffffda RBX: 00007f88f256bf60 RCX: 00007f88f2458b19 [ 2316.391197] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2316.392988] RBP: 00007f88f24b2f6d R08: 0000000000000000 R09: 0000000000000000 [ 2316.394616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2316.396247] R13: 00007ffd777bf81f R14: 00007f88ef9ce300 R15: 0000000000022000 03:23:41 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) listen(0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendfile(r0, r3, 0x0, 0x100000001) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8040) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 03:23:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:23:41 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x4010, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x77359400}}, 0xfffffffb) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001400)=""/34, 0x22}, {&(0x7f0000001440)=""/38, 0x26}, {&(0x7f0000001480)=""/65, 0x41}, {&(0x7f0000001500)=""/146, 0x92}, {&(0x7f00000015c0)=""/172, 0xac}, {&(0x7f0000001680)=""/14, 0xe}, {&(0x7f00000016c0)=""/23, 0x17}, {&(0x7f0000001700)=""/29, 0x1d}, {&(0x7f0000001740)=""/202, 0xca}, {&(0x7f0000001840)=""/133, 0x85}], 0xa, &(0x7f00000019c0)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}], 0x1, 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clone3(&(0x7f0000001c00)={0x28001000, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300), {0x38}, &(0x7f0000000340)=""/14, 0xe, &(0x7f0000000380)=""/4096, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r5], 0x3, {r6}}, 0x58) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:23:41 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x2000) 03:23:41 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x2000, 0x0, 0x0) 03:23:41 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x7, 0x22, 0x0, 0xca5}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:23:41 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:23:41 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) r5 = dup3(0xffffffffffffffff, r0, 0x80000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x5, 0x0, r5, &(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x7ff, 0x4000, 0x0, {0x0, r6}}, 0x9b) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000004ee40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x44, "37c4ebd632c74f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000004fe40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {0x0, r11}], 0x0, "d7641a01061764"}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500001c000000000011077800000000e000000100004e2000089078998e60949b4339025ec2f08aee66b7f5f5b0c63bd4360bd0905921d92eb9cbbd284bc250644a0d9e2c44faffc8d55c4629266001e3be9fc41717a6beba72a2d0f632394c08a4938d66bf583499a659e4954f2409c5661027e62835a6dc6680e21c2011d7c8625b0c933aed2d59491f3bb18cfbe38cf44119f3a7479579b1996a3d"], 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0xfffffffffffffffd) [ 2330.410655] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2330.429380] loop6: detected capacity change from 0 to 18944 [ 2330.436746] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:23:41 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) openat(r4, &(0x7f0000000040)='./file0\x00', 0xf0842, 0x6) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x8, @any, 0x4, 0x2}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2330.475724] loop6: detected capacity change from 0 to 18944 03:23:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2330.485609] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:23:41 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2330.531625] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2330.589408] loop6: detected capacity change from 0 to 18944 [ 2330.596546] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:23:41 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x4000, 0x0, 0x0) 03:23:41 executing program 5: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x4) r0 = syz_io_uring_setup(0x12a5, &(0x7f0000000240)={0x0, 0xbbba}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x40010, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x3, @fd_index=0xa, 0x9a, 0xc498, 0x5, 0x0, 0x1}, 0x80000000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x50, r0, 0x10000000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_submit(r1, r6, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r7, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1, &(0x7f0000000440)=""/72, 0x48}, 0x0, 0x2, 0x2}, 0x3) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:23:41 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4bc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:23:41 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x4000) 03:23:41 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0xa0) syz_read_part_table(0x4, 0x4, &(0x7f0000002ac0)=[{0x0, 0x0, 0xb}, {&(0x7f00000000c0)="c38cf7bc4643814e0c3c102f3b75e3c485e1953666867ff0b760954b5332fb483e5202228f1d3639fb7e217fc1641ed544264d6d64acb87d45fd283a67394a4e2e2701aa50bb03876578363361aeef9122b3f11fc180a7a88078783617379e9d50a70aaa5a7cb9416764cc79f78aaa19e3233560c4a9b6170a115d98d65791cb814e7913658915c75934144bdfad8f323895925d58061f0cfee517811f", 0x9d, 0xf4b2}, {&(0x7f0000000180)="5bffa097ec44ff12ea1e69793d84533c7cb8a98876a1d69640b9350e43bd6dbde6d292e3ec889a2f997ed8ca47e1ce40613b86425c9456f874799fb3e850dbcfeb73af445005e7561b8047b6d9437d7a6c73b62e7124fb2699949fe472ecbf145e1c365cd2287639641d1a0c04144114d1bc776d64b3bf20c3e73b4249f23d53201bfb8491e7b24e3c110cf6fa7d1d67d5ee06beeb1646190fdbb6bc2b1b44a917d0612a21f3a5a8a4911756e842a9b14ac53892cdeca6ea25b9228b5bc75aed64cee705e38f18640770a2a4d5d901853a031c6cc4cddff8c22897481b3c52649adbfe44f9e62e445b1bbfc9af83", 0xee, 0x7}, {&(0x7f0000002a40)="cf77a08e521cfbc84ff244bb525da2e37e80f5917b927af9e658ea7a2f06c7103eaf900a81ac30140e0b1a39bab74da4a98793fc68ac513914a638bd7a3a8e8a980a92ea6a3095d39be77c06a3419a1eaf02b4d5987dd03e00a0bfc6b5e763", 0x5f, 0x4}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) readv(r0, &(0x7f0000002500)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffff}, r1, 0x3, 0xffffffffffffffff, 0xf2bbbeefa2dc2e6f) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000004c0)={0x1ff, 0x1, 0xd43f, 0x100000000, 0xd233, 0x5}) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x3000000, 0x13, 0xffffffffffffffff, 0x45227000) [ 2330.730495] loop6: detected capacity change from 0 to 18944 [ 2330.741696] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2330.748455] loop2: detected capacity change from 0 to 124928 [ 2330.808698] loop2: detected capacity change from 0 to 124928 03:23:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x5}) getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) 03:23:57 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x200000) 03:23:57 executing program 7: r0 = syz_io_uring_setup(0x25b1, &(0x7f0000000240)={0x0, 0xecff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) syz_io_uring_setup(0x7549, &(0x7f00000002c0)={0x0, 0x4568, 0x8, 0x0, 0x3c8, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r11, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r11, r2, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3f) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:23:57 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x200000, 0x0, 0x0) 03:23:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:23:57 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:23:57 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x4, @any, 0x101, 0x2}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:23:57 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x81, 0x81, 0x40, 0x64, 0x0, 0x10001, 0x200, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f00000001c0), 0x7}, 0x600, 0xfff, 0x6, 0x1, 0x100000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1000000042236510bfe9aef6a9d4f35d995d636d"], 0x14}}, 0x0) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0xfffffffffffffd69, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000004c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x110) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r1, r5, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) unshare(0x48020200) [ 2346.934502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9026 sclass=netlink_route_socket pid=12587 comm=syz-executor.2 [ 2346.936781] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2346.969088] loop6: detected capacity change from 0 to 19456 03:23:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsopen(0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xfffffffe}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1b) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:23:57 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x400000, 0x0, 0x0) 03:23:58 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) copy_file_range(r0, &(0x7f0000000040)=0xd95, r1, &(0x7f0000000080)=0x2, 0x2, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) [ 2347.050359] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:23:58 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x400000) 03:23:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:23:58 executing program 4: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x400) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8000}, 0x602, 0x7f, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001400)=""/226) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001500)=""/278) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x2000) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000001e00)=""/4082) shmctl$SHM_UNLOCK(r1, 0xc) 03:23:58 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2347.208252] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:23:58 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) r1 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r6, 0x1, &(0x7f00000002c0)={&(0x7f0000000200)=""/33, 0x21}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2347.271121] loop6: detected capacity change from 0 to 19456 [ 2347.290093] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:23:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:23:58 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00'}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x0, r9}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r9}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0xd9, r9, 0x1, 0x1, 0x6, @remote}, 0x14) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f00000002c0)={'team_slave_0\x00', {0x2, 0x0, @dev}}) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000040), &(0x7f00000000c0)={'L+', 0xed1f}, 0x16, 0x1) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r3, 0x1, 0x0, 0x7, 0x0, 0x0, {0x0, r10}}, 0x8) [ 2347.338551] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:23:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x32da82, 0xb4) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 03:24:12 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x20000000, 0x0, 0x0) 03:24:12 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x416f, &(0x7f00000002c0)={0x0, 0x52e, 0x4, 0x1, 0x29d, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0xe0e0) syz_io_uring_setup(0x3ef8, &(0x7f0000000340)={0x0, 0x8905, 0x20, 0x1, 0x2ac, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x50102, 0x82) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:24:12 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:24:12 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) io_uring_enter(r0, 0x5314, 0xeea, 0x2, &(0x7f0000000200)={[0x6]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/thermal', 0x103080, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) 03:24:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:24:12 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'wlan0\x00', @ifru_addrs=@can}}) 03:24:12 executing program 4: r0 = syz_io_uring_setup(0x3157, &(0x7f00000001c0), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) syz_io_uring_setup(0x5d71, &(0x7f0000000240)={0x0, 0x63d3, 0x20, 0x3, 0x1e0, 0x0, r0}, &(0x7f000060f000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x50}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x108, 0x94440, 0x23456}, 0xc68e) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r3, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) io_uring_enter(r0, 0x3353, 0xc0f6, 0x1, &(0x7f0000000000)={[0x3]}, 0x8) 03:24:12 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x20000000) [ 2361.729480] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2361.735485] loop6: detected capacity change from 0 to 19456 [ 2361.784428] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:24:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2361.842661] loop6: detected capacity change from 0 to 19456 [ 2361.851923] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:24:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4(r2, &(0x7f0000000000)=@nfc, &(0x7f00000000c0)=0x80, 0x80000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="01a00723ee4db400000001e8ff0018000000", @ANYRES32=r3, @ANYBLOB="00000100010001002e2f66696c653000"]) socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r6 = dup(r1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000680)=0xe8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80400, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@cache_loose}, {@msize={'msize', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0x13}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_role}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@dont_hash}, {@seclabel}, {@euid_eq={'euid', 0x3d, r8}}]}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 03:24:12 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4cc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:24:12 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x20000000000000, 0x0, 0x0) [ 2361.926491] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:24:12 executing program 4: init_module(&(0x7f0000000240)='\x00', 0x1, &(0x7f0000000280)='--\\)#+#--\x00') r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x69, 0x1f, 0x6, 0x9, 0x0, 0x8001, 0xa1018, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x810, 0x0, 0x6, 0x1, 0xff, 0x3, 0x4, 0x0, 0xffffcd51, 0x0, 0x3f}, 0x0, 0xe, r0, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ffff0000000000002e2f66696c6530008d4eee9f76655a63e336a5b336778c38d46b2258197b6f6d6aa7d47de053fac76fe2c42f8fe4ea3f8da05d"]) open_tree(r2, &(0x7f00000002c0)='./file0\x00', 0x1) fsetxattr(r1, &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) 03:24:12 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x20000000000000) 03:24:12 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x152002) r6 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15, 0x0, {0x0, r4}}, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2362.037246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.038734] print_req_error: 28 callbacks suppressed [ 2362.038754] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2362.059514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.060862] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2362.063547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.064866] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 03:24:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000100), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 03:24:12 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4d00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2362.075313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.076620] blk_update_request: I/O error, dev sr0, sector 775 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 03:24:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2362.095398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.096719] blk_update_request: I/O error, dev sr0, sector 1031 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 03:24:13 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@l2={0x1f, 0xab, @any, 0x7}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/nfsfs\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x7df88ecbb2188d16}, r4}, 0x4) 03:24:13 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x4, 0x3, 0x0, 0x70bd2b, 0x25dfdbfc, {0xc, 0x0, 0x3}, [@nested={0x20, 0x58, 0x0, 0x1, [@typed={0x14, 0x13, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x5, 0x21, 0x0, 0x0, @str='\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x80}}, 0x80000001) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r11 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_io_uring_submit(r1, r7, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r10, 0xc12c, {0x0, r11}, 0x80000000, 0x0, 0x0, {0x0, 0x0, r3}}, 0x7ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2362.111437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.112723] blk_update_request: I/O error, dev sr0, sector 1287 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2362.115197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.116447] blk_update_request: I/O error, dev sr0, sector 1543 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2362.125532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.127220] blk_update_request: I/O error, dev sr0, sector 1799 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 2362.147313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.148782] blk_update_request: I/O error, dev sr0, sector 2055 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2362.178446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.179980] blk_update_request: I/O error, dev sr0, sector 2311 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2362.189196] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2362.194485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.197211] loop6: detected capacity change from 0 to 19456 [ 2362.202706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.209301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.214645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.216429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.223753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.228436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.234380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.239892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.245762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.277448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.288590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.290324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.301442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.303841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.317681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.319210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.320752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.329260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.330696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.332235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.340610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.342196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.343631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.348166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.349610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.352498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.354089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.355305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.357211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.358752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.360292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.362192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.363594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.366185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.367679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.368842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.370795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.372504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.374147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.375595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.377162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.378584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.380179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.381321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.382792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.384295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.385688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.387188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.388586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.390199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.391569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.392723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.394254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.395700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.397197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.398582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.400185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.401556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.403179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.404294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.405731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.407218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.408578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.410126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.411526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.412869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.414476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.415600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.417182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.418589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.420189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.421535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.422910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.424434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.425793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.427127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.428548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.430177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.431525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.432878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.434459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.435789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.437211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.438374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.439794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.441218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.442545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.443883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.445300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.446656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.448155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.449282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.450685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.452191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.453526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.454876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.456289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.457619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.459126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.460278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.461675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.463184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.464510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.465830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.467995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.469268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.470641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.471740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.473253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.474617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.476173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.477320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.478649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.480115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.481487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.482570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.484154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.485475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.486759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.488161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.489487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.490784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.492165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.493242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.494586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.495886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.497239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.498538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.499851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.501212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.502490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.503560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.505082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.506477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.507726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.509150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.510475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.511763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.513154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.514237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.515569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.516862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.518206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.519533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.520804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.522166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.523442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.524471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.525845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.527184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.528448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.529710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.531078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.532240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.533526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.534611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.536015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.537261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.538492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.539814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.541174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.542287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.543563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.544650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.546080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.547268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.548510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.549832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.551163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.552264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.553512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.554582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.555897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.557207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.558450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.559724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.561142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.562262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.563487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.564546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.565841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.567179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.568252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.570090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.571180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.572458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.573694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.574779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.576224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.577464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.578692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.580050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.581183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.582272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.583481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.584503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.585772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.587152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.588236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.589444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.590682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.591871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.593152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.594177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.595267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.596468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.597697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.598758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.600048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.601205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.602271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.603264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.604539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.605592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.606818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.608162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.609202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.610267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.611522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.612514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.613809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.615150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.616183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.617230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.618220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.619435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.620472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.621488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.622719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.624078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.625137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.626188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.627216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.628151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.629169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.630137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.631284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.632446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.633668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.634712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.635875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.637096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.638145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.639100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.640218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.641430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.642460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.643651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.644673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.645843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.646873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.647873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.649168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.650220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.651184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.652186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.653212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.654249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.655220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.656229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.657451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.658591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.659754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.660771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.662019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.663161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.664047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.664893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.666158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.667208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.668165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.669199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.670064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.671571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.672862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.673829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.675144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.675907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.677164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.678053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.679122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.679891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.681077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.681877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.683139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.684082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.685133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.686053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.687115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.688078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.689100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.689870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.691140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.692075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.693087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.693879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.695043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.695867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.697065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.697867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.699150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.700095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.701098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.702046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.703075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.703864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.705024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.705813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.707019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.707831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.708896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.710032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.710841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.711769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.712658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.713588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.714713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.715647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.716585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.717528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.718417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.719495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.720500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.721443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.722562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.723601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.724665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.725592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.726690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.727729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.728843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.729762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.730961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.732093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.732895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.733852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.734775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.735859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.736773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.737739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.738857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.739813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.740776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.741734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.742638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.743736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.744648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.745591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.746595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.747500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.748581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.749483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.750555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.751434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.752512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.753399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.754562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.755511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.756449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.757407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.758332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.759258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.760200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.760901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.762031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.762841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.763984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.764793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.765885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.767006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.767804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.768732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2362.769677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:24:26 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x40000000000000) 03:24:26 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x40000000000000, 0x0, 0x0) 03:24:26 executing program 2: perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"/353]) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x0, 0x1000}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0xf0842, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xf0842, 0x6) clone3(&(0x7f0000000480)={0xa2090000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300), {0x20}, &(0x7f0000000340)=""/244, 0xf4, &(0x7f0000002e00)=""/4096, &(0x7f0000000440)=[0x0, 0xffffffffffffffff], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, @in_args={0x2}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00008d7000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000001e00)="3024b6c441ffa692c3ed69c9064bc1490740ed940236997ecf2c232ad1aacc084d3ff51ed896f44800d9a756e975b5390beb11fd5333ebb002934083316efe225f5f0345a235e1712ca2f19c10200e96e4e1b361256f00a2e8bfc6cfafce66510aa197b1785fa1327bf99b4190d8ecb7e4a2cc86a2d7cd70e872bfdeb263468d5e84c6752b1c4181a62e6f3e1ddafae4b1263570ddfe9e78bd2090cb11ff5d2e03019656fc43c85bab9912f6fa52d8257b1bfc01052016b9e07a86421ad1cfa54a40628cddb2f3b545c0edd9c934b703298c96bb22dd1789000d29accf5d947cd4dd663b5d6957f09bf52ec8694c787785f3064710a84e5571506f8617d6a5e19bf99a6f6572a69bd06b2cbee36de9dd51684076125b679c17b573339191678b61e500fab323cb80fa9d01395532794a19bc831d7ec4d4b046cc4dab051f4196ec27f2fb7a17ebe3ced57127d512eb6fdd542e58f47d6b459a212827fd33fb85ac893cb03a1f0ec32114d2d0a5e9f9bc6f966c99c8d106404de8e4a8ca296a53013d81d6c2f0e46f5b12163da25121906e2920a9fedb1b868269390c26c5a927e1995621198fd1cb83096b695863cb4e021e58f976c9374df773499418d644f225b8e47446fa997ef465e0ab4fa3896df4309d36697fc748281b78a3fca696adc670066d422e130c9553af75d199fcb8d2f8a94708ad9d263cc0156aab16f22feb7720112adfe6cd4c883da1736e9aa38ae99b69059a6322be42a97d4dc0548092c6ab1a03f0658a730b4d69e9fa0c80c2b319a6931189d842ff7ce97aec306afa007779b8edc5ca77558c4a3059680d7b5b9ffb1aeefb79f5b6ad5d8dfba41c9494196f589b102e3203ea2f73be7c02c59a1e3fe7d39dddf0443ea37a71f247fb64b54430bd19071af53ece1e8062763e133bd509aea0e6039b9647aca17481ef716fc3dee04c48287305492d345c8e0895fb7b901931b98b4ad91b37bfb5d6f099d0d05918fcb24692b4d96d048d2894f13f874b136b82f0b444920e9530e7f1baa5c852ab006e77985a957df68b47d3fce0e36be0a6d12d261fc1752fc8ffb9684fa58ad10948c04eb70fbd833b6d4be77826324199c647d2ca58724314e5e3ed75781bf850a9e3ab1c72b205c47d0c2982cdf81a7966989cb71dc77e76e15e28ee770feb0225cd71c8e635f364b55d014887220642361be6dca420d63b030716cb056dc08acce4227591ca77d8f685d40b2bcabf3727e4a5377bc0da4adee8c695d162b253987bf27d94d5f4bc0b037f823309046d5fd367a143ee60164f9d310eb5ecf5926fbc75c36b5a981152d61dca63404a25e769519b037c29b908174546359a9fdd52ce5d1a7e04317b246c5d3398a16059499a2a3b7f03d7588f6516c702783083c69406f1e6e430259e111264a4a36e3182d7b1a5805a271e6ce0291df9733dac2adb988f7824407dca1d1262c56fc11e00bc09e2cfe601756026305cbf20cbc08e2b287e19fbfbb008158124dff8e34179c45b4f181948b28bed1396c4fc0b270fba481289b6c33648d9076ff724ac113ee6e2dc73fc2722502c7e13736708d38fbe59885012bb79c6eda27fd09fd0e2480e8da0c2511ef86bbc30ef0e1c304aab32320f2075cd5b0c91026c29e2ec8a9697f8dbf881055eb60c7bf93a20cecfe4b55fb1d19d566d92aa3d2c29a3e76e87266ad25166ffb4a5e6ef8c22ff517958ea53810ec2f92c7fa335842d09387ccd970d0195eff778778922a16355bb68733fd8f859ff654d97a3a0ebd1b0191786622b4e9e8858b1141080d54384f0b759f6ddfad2b4b7b52602dca5ad13a5f73775b4b4c637da166e63eee2bcde6b74649370e34fd3742a095265b7a7d28c4db0426fba8caf2ce3a1c2bb49778bf851b9111ef0cc0fa5908687cef702a5a3dd5435d90987b87ec2f0b129adfac82df5d18c9df299f737956d38a5a445b500cf1b6189b1fa9327a05db3631b9bc8ef79c5f42b0053c7169c04943efee7299696e348ea4fd79eebaeb9357f797b14e511570860de10ebe6babcb854021b416304ebcb9104d2a8d85a75a875429ae92eb453aa9bfb9cc83ff53979f11a57e237795dfe22cf41e80cd714453806e7df5dd0f8bf14a2d789ab027cf70b55ab68c31b3bdae01ce6ba16b5ebc8b155d7c64289d3fb2596a93699aa8832dbe4168daad721ab91e077fc6ebfcc6b4811404cf0f8c5948f32b8f7b3fe83cb9686841c37b50e8fcef0e6272b048f1f196830d75552e2b734569ebcd4cbf4b4275fede5bc7a286ab69f4bf42d1271b0a4c76a3f51ceb8edc4522ec83648e00214ef1dbce72eb1db6f6cd99b6c98bc9d9464c511758efb44e0a3adf6432fb6ded743137e09683e2143441a9c7aa189182b03fbf350a5502b5a74059ad53488c1a4779e282523f83ae4d4da380d36e73bcbc7692415f3c34453e1178e219f47182746e26acc77c3e14a5e4dbbc0abb16a680037872de2ac8f0e42440f43196817b161e9d46af468f09b0d23dce8620ff7f046767937a7d19b8cb2b93d28a86028f5daf9bf35caaf3dcd76fda8ea3e9177bffee3680602c2752ca0a27028ed6302f0761b78c9be8fd3962421af702a88a56dfadc4084aaf5e68828ef4c74c3a7300bea184aeedbb40d06d2def76ee9dc748a6ae4dd9d16710565895402a954144d5651db0f3688436ca18b8908dfa4accee5d0cd89304cc122bebf404ec576ea22553b36515f26d06bfe6c52d9d9e5f271274fce0ccfc37a5d111053bf2c0128580f2da89ed0a5db2a35e12d845dc6e6b16e9f3fcc1ef7b0952d7ecb12ce7b6e8ce0107d69f431544cf54e753e2f7f52ab34c20ed2e4926beee19d266357c53ff0685029cd1e102a97dfe5e130befd4ee8902d76cee5c2fcc8ceabf80997a51b63fa0c87da7d2273629f5f5a92979d51d66b8fc4287388744b396a3f3d9d24b8829216e01ae16400e4446e89af483d329b09d8557848c17ea3756dadcdb2ec2193fb18629f5cc085d5026fe206015f8b5986e2b15bd3c2d6daa4b00978a2f61bb759a1f78eb4bfc102e6dc85c2c276c05d5f969ecb07fb1dd29e59823c07636f43556aed043e3edb9012a5e66c525596048a86138ca441dd04c19d2926a5cd9a19d114348a86f82d30fc5c0481d19eb2cd20796cfa6c8892a07c63aa64cd3ec9faa08c5b26fad0d32001061937ab8a1902f0a522f2f7ef7534efa244b96de65d2aee4841183b23b3af32fc39a005e1de6af463447a736f3c840be57fb76546bef35f2f569cf2ddfce09ca9e406407fe0e62b64319dcd4067c644b6ee7c31dfb6791c4dfa919f3669bfa9862500e84f8e2183c99e0efc8df30f27897dcdc9b054e4fdf2acc06cb1b219b0984a9530c1e412da729199472d5c1287bcac0baf6288813480a1e6268200a451a258f4b6336edab53d09fe917734eea3894dadb02578b0d37a0e678a96cfb3f7c009f2678f08dc3d32ab72af332563b902f15b2ffa85a1efa3d00268594fe4d7a095980f81422484b6f2d2a1f8fe92b9505eaed5e6ec081efb88a282b0f4332b056c8908790daecb6e158c72bcf291df4254dfae96ac6e3e27f78118c85a73a1427c1e9e60578579bc5411dbb580c4c086bb66a22e39ed989d02141f4e9971663969dd7d4cf82d929ffc7493a3732a5e68bbb281ae0bc0f7a8cd25ce228d5c14b9f41dfb848aea3c2a20df230b254b5cd0ea7dc62840f772ad96bd1e2724d3f409ba3bca1799e51273c19282687980c5a9a2e23b4b25de1f614d0ebcba90fb71e24e44a80038f411f9a8156e9bce390e90dff6186fb600f19658ea62925b795c2c3895ebe2c1828928f25729083a4420a48ebcdf892304f49fd20732340928d39c08f3bbbb530c84a0ffa3c53e33f494e018378f2b399cc57c44a69162fbe46f3f13212496434b9ebdc6909ea082938dad4273ec78bd6219b87253cb4e4d0536c6aea734459a36f452b39cc3f6cd1c11cb6822eb3979299aae47db0908e57d21c5088d0454fb596604976f9db2ee16d5119d361b464699b9eec6f74566c3753178a0663c9ab1fc66199bc51443577cff5972620359af79327d435b02d7ba58479671f05fa493345bb627092c5bac30b874c01f82890bf8146810b4707f491629a9afe2611b32514250ff1a4f2381d4b25f5e7f245e7954420b8a474cd85a78c03491c845a79039c98fa5557856a18303dafa01463fc7be7435e95f08db21ebdd6a3abe7ec39bfd7786391a358e4691e47fa7b755443c888c26872526c5e38496ecd4cf6bfd05efd9ce7ad51ec6519e6dbcedc3469d4716c6ad2450276d537a5397a0a903f555fb95c42a2187f0b206072821dea1bae68ad9c4541cf513daa4bca66378a42e5dfddf8c81e8d3089b9fce8073de73f05c1a55efa61a1f92e5191c419aa6b028f51207ce7b39b338f8a3b785574efce909ef245e9ab38e6fb7f9bf7c7711c25bde2835868f1e10839c7bdf03fd131e98912bd15dca4758c6cd126922513e6b7bb79e9710dda457e3a9a77fe55b31916ddc29fa1075cd3ddc80958da67d5a04af49b57f62ebad527223b748aab158f0869f02e6604cc37c9d29958cbd16c419df24d93236c76bc7825ce6947f4c760aa4a2ba5fc495f6d5c58ab77333c450b78e384d81353bf6c1f4fef11576e3ed3e22fdf78631b9dd67793fadcba652d8a6071fd03fb8044e5961b1731fe1537f3326fa4a9a67cc5d56911985a3101cdd99f5c76b2bd968195a29076f85d4def2a4ddca23792433134bceec0adee1a19874b63cfbd71c8045baa12572c75eb5871f6e8b0fca7a224687013d2f69662d8c93971ffe41d8fa5daa5b8bc9c4289e624a3c8579d77c619927f500bd40e791026719f2f82f69cc68f946dca22307596c85b215708d5e07220b1a58da201f4c97cc426a434395d68a10955980ee000980b3b3287b33c3bded840dca6b4eb99a10fc83bbfab80e6a791f28cee2094ddd984e24d8394142ea38ea1099868f4462ae913cf5e40b5edfe41a56993c17d2b2e8af31e37a590b7c88ce1c6dbe25a73e2894cf5cc7862b86323309fc4287c5a799176dc6940528180d2a7b4d8fde59a0d243cf2471d0d48101ec9c22fd054ac77221d57d5491b2fe8edf3eae9e5c59a449efa9cda4f2f4fa51d99c6c5ac7cca5e836bbcc02a8fc6da7b20d1b790a6708b87c746920d4f59caa37390745588b44cf467a22f9c296f4f0708500476f27a04291a8396405596534a1c394ce3eb4c504f3c43447e8d683ecfade60f8e4bead09957ac41d3f0897bb5a03be1060776d4981d5328ea1dd4964f9c88e18fc6512cbdc92dc5e02c2e1cd702088a96e4bcdb8a98eaf8d588356c23fec3b37045b8b491405c2704a1fe6421b93b8186ceb75f31b6e66f0f5812b1dc19aec27e3942cb798f8e762dc44b9cffaf1d4b569d7ff2faf34d24327d3ef02cf5d9e89009d8ac0783c46f8cbcd93df8f8762e10e2bd0aa76e589843665ca57c676549530c99a7f005923ff89cda8c083dd2fc4143f47e36beda154d5acd162cb194937001aa44bef558b0cbbad4bc60864813b5a5ee73bdf76bf0488a052f23b50bfab557468ddc40de54dd22bb04f1978f4851c4e1944205bccb389396cb0028dce73b0df4c39bb2fbf0b64681b3d8e1f5127569945cc7720898f98624f1ebc983327768d0401e1a1d373679c3bf4c0859152409bc85d08610bb3db635b09c271dec991ff4d35d29c87def625eb4f091b8f5f3f5dc710fc2a764fce5241f25d746ed937b883423586b2", 0x1000, r1}, 0x68) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0xc, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) unshare(0x48020200) 03:24:26 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x245a, &(0x7f00000002c0)={0x0, 0x9539, 0x8, 0x0, 0x38a}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x810, r6, 0x10000000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x6, 0x0, 0x0, 0x0, 0x23456}, 0x1000) ioctl$sock_SIOCGIFINDEX(r8, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_submit(r4, r7, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r8, 0x2, 0x0, 0x3}, 0x8) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x2, 0x9, 0x0, 0x3, 0x0, 0x1, {0x0, r10}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:24:26 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4d40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:24:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:24:26 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x5, 0x2, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r5, &(0x7f00000002c0)=""/225, 0xe1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x2) 03:24:26 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000300)='./file0/file0\x00', r0, &(0x7f0000000340)='./file0/file0\x00', 0x3) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x4, 0x4, {0x0, r0}, 0x2, 0x2, 0x1, {0x0, 0x0, r0}}, 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ext2\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)='./file1\x00') [ 2375.895281] loop6: detected capacity change from 0 to 19456 [ 2375.900372] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2375.911971] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:24:43 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4d80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:24:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:24:43 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:24:43 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x2000000000000000) [ 2392.650828] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2392.651659] loop6: detected capacity change from 0 to 19456 [ 2392.667353] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:24:43 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = fork() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x10, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4000000}, r4, 0xffffffffffffdfff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:24:43 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x2000000000000000, 0x0, 0x0) 03:24:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) sendfile(r1, r0, &(0x7f00000001c0)=0xa0, 0x3ff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) write$P9_RLINK(r3, &(0x7f0000000340)={0x7, 0x47, 0x2}, 0x7) sendmmsg$inet(r4, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r6], 0x38}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000280)="8a8e35f4fdf182f5ff1aa27d3d133d8d501a146d3aa59ce07a19cfae723ac599cd31df201f5a2b2d5c8961723517f7ba3423d7409ab1a41dead860cb06cffe903c3aca9350f6a2c91ea08bee361455557516877479f416ed2b28da66c4403a3358966cef014249810c7bf8fdb248cbb4d764303b4a25b4fd3384cbf4cc3aeed651b4ed4516c35721a8c6fc00a0f1a2bf6ee54740cc59ff7af175363f40e0bea34798127ec73c5963c8239115b0f9718297da00b1f2bedc", 0xb7}, {&(0x7f0000000400)="8f955e3ed370a085d15b61d4e53dea13ca73182060b995339fd69f9307da83a91945c16986407419e042b0896e79", 0x2e}], 0x2, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x50}}, {{&(0x7f0000000580)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f00000005c0)="e743218537b54d8be2fa15d0582a179cb779d90149215f8c496dcd833a8e657e5073688c6807ec7f56080c657df46e1bafc1bf1b28b6d3e042ee40cfddd0aa3eee36ac43dbecd22228062f0281ad98cf4bb70f15aba8c2f1a1ec7196dcb9180285d00ec00a9d6f973083c7368af7c753e5b1b7874dffb524884c712ad0ecee3c7e028dd310", 0x85}, {&(0x7f0000000680)="7678b34e04f53e3d697403d9617343e1a7af262a505c78f120437b2a40f3af5f27c0154b01aca568859b0a9d8af211e2c21e37170dd84c340de45c4b1df30d4ec5d95709a4cd437a8cbae74a10b6a4c4fb17fd49c5b5ed6522e21f749712237c5fc73df10f96223649676584d032862e7ce477828642243cf57c9602fe4f1a06ab24ad66ea0a79362c1cd81b25c6836c2bba9451708ca36b90d726a965858c1c455caccb904bf66b1f084bf7edead984d68998e71c0882a30facb3421028d0765d80017e5c2eeabfab29db49235506a1d09a41f59b4edf78f06b113b4308322364d603685110ddf0422082b3ddf476cf623652c6c7c6", 0xf6}], 0x2, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xa6, 0x0, 0x7, [0x8000]}, @rr={0x7, 0x17, 0x9c, [@initdev={0xac, 0x1e, 0x40, 0x0}, @remote, @multicast1, @loopback, @rand_addr=0x64010101]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)="b80ee36210d9d67bbd9374d93e5bc60e68438d06ba15aceb6656f854f741add9da35daac106fcb5d8fee1615a1fbb10140b212", 0x33}], 0x1, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffff7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000940)="93f81dc91a5c565b6a59c4cc670be29563f1d19e132948e5deb32f80f7190002d00bb9f02c405ddc82708554ee3e3d49bfc46f375a87a3c55d749617a4a04655daca77772e0fa2426abdb4d939922ece31c237b74a9b9f2a6fd0e06f4d06f3c2d0d02ff2093f8682e2e4a1436b6d7b39eb65dc50f879ee6fb3b296d87cfedab93f134ba9157703b053bf932c0c274545826a1f837cd495b5a3b6beb762b0cc968a", 0xa1}, {&(0x7f0000000a00)="52b401f52db8980ed898971080fc825cb11a9362843a7c4ed723e4fd3fd7305262a1a1b635929d4929bc6fde1d763956a169cadbf00e52ba685320593e718749057d73e96197bcbb4a6bcd6bcafe0db1296986dce1332f40c6335016b65018a48e85bdf69fa25324836a138832bdb0abb8b9ec00f6172fd0015cc3de5153ee960e0ecdfd693ea99e5252f38441a915dd1929c681e1af", 0x96}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="33c9af76346a676210d5bf44e820ca567d90529360caa91e257844c286e43c0163b8405f0be9c6417829c0a16300fb54c7ba36c944ddce9455bde6657cb4da1dadbfcc3ebfebd9182c335c43e1082d9417920f4a27153d88cd6a5b79cd7bc17bab3a4e", 0x63}, {&(0x7f0000000b80)="6046e32030a1d794f9b1c296214d486def6490db141e85a77e66ecb601f7387125ea442c925e0891d13017afb12a1acd7f3ddbd4c201f40e362b55f4d990a9e47f12c56cb09e5ad0d7cdf8e6278afac198665d", 0x53}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000c00)="f138e82ce500a906da12a3e0ddde677cc961be441509d72c3bec8d029288b1f4a23299b5c327e4df33ae064242b679eeb707b3213882c35f6c3e4a28fbf16059516d28b9c621c53427feec4bf96e020837fdd9926e79cb194a5977c2a80e064397fe803a77ee5689b2c9553376a5c9be1a630e85d93aff1944aa1769297c51a8c576441dd2bbae759b8616", 0x8b}, {&(0x7f0000000cc0)="c0455a8da7179daa418c7dc7e5753413fdc04c9033411426f2dc74e16541d53a6016637da75a7ee2cf529fe51d49a9d86f567e74c6702497072496b6c69c8a00a225a97ddf75592bf14bcb998908c50098dfae36ce07b1f91cfc04ec6a47640fa93e2d0b619a957fafac83a7afbc85340bf4c3489f5a3ffe95b92869447870b1ee9135259c90be5571c0a9e47b53", 0x8e}, {&(0x7f0000000d80)="3fb24fa099c8d2f1ae5f337b15597b215fc7ac3e9ffd1af21296055ce61bda51c2b07981e84cf1abaf22dd19c116fdd8ecc423eb8d47593e9e39caa1de15175b50b180b8f0822ebfe8af76ae39f71ce0dbcf278adb3615fd5d151f75147be5bf79c964fa30d520fa76f72092a794d6ca499fc3640f41351e46bd2790bb78380de7790a6a74b9e6a544282cb3c3cefcedfb04d1e2fe59992dd8baefa976859b3a51f3703a63c87c2d3d20ad78", 0xac}], 0x9, &(0x7f0000003400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1e0101ac14142100000000580000000000000000000000070000000100891b47ac1e4001ac1414aae0000002ac1414bbac1e0101ffffffff83039989278e00000000e00000010a01010200000000ac14142cac1414bb64010100e0000002ffffffff00"], 0x1e0}}, {{&(0x7f0000001100)={0x2, 0xf612, @remote}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001140)="d71792f4755839ed8f2128e7cd7dc2cf727995faf73f24cff6d5d15b2f05f54dea36b04d76b4e6ed03c30dbe8366317fb613fc263a5c50ecbe42e6eedddfeb858dafe22c2e7ea7aef525d60c1846f372d1f3efb1f0c6a5ff3171f75b86249cfacd8618e9c3069c47b0c17ca4f76e0db311bb87414341e3626885aaedfefa87c223279907777c6435935150e7fe43bc2b98b7d8dcf2395807677230187835c40e7f65e578c2d50c1f9bbd96ff3f2b07d210baebec2d96b6b56ebc0007eb511d86efdbc71005a2cf0ed35f26744ff35880581aae689638e1d077da361df6ec8bb1ba", 0xe1}, {&(0x7f0000001240)="8308b6508a47d9810d2cc9a47a77b9", 0xf}, {&(0x7f0000001280)="2fb5fe621c9b19fcbbd07f053b815b2ea6aad1c00dbf34aaed048f0c3b5f159a68018c340b52fa55cea887b5cb65c7e91c688cfe71abbbc1aac5a0830091f5148bea0ad71510d3d6f43c89be3ce7cff450308b6705d7f927fa1ed9cade7a7cf53c113bbe4b467b8645c3dcb68be3c0a9fff63043cb0d474b858af909def4aa3d844b3fcb3da12b690d1507f5f412b5aac87048580060", 0x96}, {&(0x7f0000001340)="beaf6ff11c59be6223cafc0e7d00b00c8a2cdfd9d42910c48310ed8cc0078d29462afc9adda3b49fa20ecc3ca71a8a974e7ce0ba9b154d2bf3f9fa17648bbf289fe44d26a23ebf2c6ad7ba2fb53d97ccc6ee7cc68355f85cb07e834869c1384c422afbe017ad19ef91641deff27e903825c443c094fcc85b15b99ed3e1f148c1a0179b171e3053f3a33f91bbc2b89c430543242a0afceef4023cc4073e95db0a93e7bc9cd090e6978de7a2b59d104f2a25e186a94d448b784e3b9bd7688742ea4b2d2daa9df942e3b2828cd14f5a0b09d2366cbe53d2b5e3cc3364a619c33e55b73c72b18323e479f5cb029efa123d9970c1aa", 0xf3}, {&(0x7f0000001440)="912a870e4c8ac0085de9c429041b2e6f059687b22e46de402d2b806d919c209a016c5749a00826c4f422dd7d1b90c99bce0ff6f4074813e4a488f6cc42e55de440fc50638b713415273ea9090321fddcf8b09378a3e7165e12814bc77e559d1ea3f4bfbb28a22ef9fac3657ec758b8bdadffc322ae9bc19f8546cca71073a2ecba388b4efa1d2f1e866349dfaf30ee2bb37ecad1baa6be320ecfb17cdeab1cc00062c60366050bb510", 0xa9}, {&(0x7f0000001500)="f28dc042debf6bdc73e1fe2a208dc445b6cb1fd9463722d4c023c2cad9f3a59c", 0x20}, {&(0x7f0000001540)="e4734076b05836f06542136a5168ae06cba0edb5728f4c05fa471098de72ccd3ee3bb76f003eb6a06e91e6dc6c08d7796c404d05f43dad59bcbd0339f4c13b4d69347b355e245d5d96fc99738266ebeb23bf3622efb80640063a4b054a4c0c1916d612a71694e683", 0x68}], 0x7, &(0x7f0000001700)=[@ip_retopts={{0xe8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xc0, 0x3, 0x8, [{@empty}, {@loopback, 0x10000}]}, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x0, 0x3, 'i'}, {0x0, 0xb, "d130bab99aaf5c81c7"}, {0x7, 0x2}, {0x1, 0xd, "41ee17578c5d47588ba238"}, {0x7, 0x4, 'E;'}, {0x2, 0x8, '\x00\x00\x00\x00\x00\x00'}, {0x1, 0x9, "e2b99f8e3def25"}, {0x5, 0x7, "25cd7938c9"}, {0x0, 0x2}]}, @end, @ssrr={0x89, 0x7, 0xbf, [@rand_addr=0x64010101]}, @cipso={0x86, 0x60, 0x3, [{0x0, 0xd, "bd087cc8c2e23df434087d"}, {0x6, 0x6, "04cd34a8"}, {0x7, 0xc, "c09d0f80d8e282b7d035"}, {0x5, 0x2}, {0x5, 0xa, "afc008604c0f0d82"}, {0x0, 0x8, "460bbcadaac2"}, {0x5, 0x3, "91"}, {0x0, 0xb, "ef2c5800e021c6f09b"}, {0x7, 0xd, "6749b92c85dd3e2c1c2732"}, {0x2, 0xc, "57d935b0c9d81060c4f1"}]}, @end, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xa3, [@multicast2, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x124067ac}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x662}}], 0x118}}, {{&(0x7f00000015c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001840)="72a03390b962b0ec8be67c287d440ac833c7ba33715426965df4d028b64cde67194b5a8caf0b5ab5bb426b3608d85f09b18547dfbc8546924c390715beda6e464bc9bfa6814e1a671506a86c093d6a846428b2ae9726a1f4cc6ca5979c8b7f809c06f3f31959320f0726f226b3eb992f4e34cf841bbce348fbc602a85ca8ecf43ddc8e198669a485c25d1c3ca8df2dfd48bef86183f285cff03275e5d131ceb168a56a149dfb4ebfe503f83193fa6acd35a54f4413601cd42e735f7ea1eb1c8bce70f00cc371eea546489d744fff780a0826", 0xd2}], 0x1, &(0x7f0000003240)=ANY=[@ANYBLOB="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"/386], 0x160}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001b00)="6e8c245d252bad3feaaf097dab53f10aa0354470bd962a5c8163a85c8a9e5457189766861745cb60022b80189ec23460e4c20587b6077e007ff9c40b09f2632ba2a054f3b80802b466f966f02ce1715d3ffec35f03d0a546432de7e00c20ae770c048da2bcec89a47322518b7571f1f6a6e5da79c212d99e729b54427c435131c06b59ee2b42292a33e170572ad8c3cd4272439d66f6f0be3cc0e5aac926c0e1ba64da8a31570b11d1d0adc9c45a779676f475bc8d280a02e63fd6c92af9b4", 0xbf}, {&(0x7f0000001bc0)="68e8a287fd0c4b130eda4f4ba116271b64f7b1be30ad1fbf71e1b3b3aa7be3d1cdfadc5e895fb522d0ac679c504678e748368e71b3dc98a5c965d4aa3ef057651289e9cba09eee129a140ba3df371c1778199b01b9c7c553538e3f096f2db27f6341b97c8f8cdf74e9774dbd143a284a6517efbdafdffefd7a3ffda1bb66f3df2dd3bd5c56c314e01598397c51e2cd8ebcdfc228f80e77d8e80b37747fe5ac3e77ce682965785d5cdfcc0d96416ced66c3d18dfb27c589031ab38bdbcecd95e4e2b572e553a6465771ee6151fe1f46f1cc88bc2edf4a7fc44a605ff017dd8f979ff10b5b5fa58005d44405f85b05d5a971", 0xf1}, {&(0x7f0000001cc0)="7752a28a7c5f025a08fe930c6bee6eecafbb370d0e199e18bb7b4a24c86a723fe93256411a8688de282b03f20fbab3df418fe2defeb1256cf0ca4ba5ce5d4cbabf05e6e8893754d55cf8dccd5c25e604a8e758ac1480ae040957f93556143f175a2e663615acae0c0b1f2dcd7e6d8aa2a02a1f3ff000914ee3049029", 0x7c}, {&(0x7f0000001d40)="699b8cba970f1922fb997003df3cd1d7d73bfc7653cafe8c", 0x18}], 0x4, &(0x7f0000001e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @dev={0xac, 0x14, 0x14, 0x3d}}}}], 0x38}}], 0x7, 0x95) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) 03:24:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100, 0x381000) syz_io_uring_setup(0x1dec, &(0x7f00000002c0)={0x0, 0xce7f, 0x2, 0x3, 0x16b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x155}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x100}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) pread64(r3, &(0x7f00000010c0)=""/4088, 0xff8, 0x1000000) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) r7 = eventfd2(0x8001, 0x1) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_submit(r4, r1, &(0x7f0000000400)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x0, {0x0, r7}, 0x6, 0x0, 0x1, {0x0, r9, r10}}, 0x5e1) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x62}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x800) 03:24:43 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4db4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2392.818332] loop6: detected capacity change from 0 to 19456 [ 2392.831644] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:24:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:24:43 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000200)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2392.889626] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:24:43 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) openat(r5, &(0x7f0000000040)='./file0\x00', 0xf0842, 0x236) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, 0x1d, 0x2, 0x70bd2b, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x54, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xffffffff}, @typed={0xc, 0x32, 0x0, 0x0, @u64=0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000814}, 0x20004844) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x5, @any, 0x9, 0x1}, 0xe) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:24:43 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x84e7d82be9edba86, 0x44) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) lseek(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) lseek(0xffffffffffffffff, 0x3ff, 0x1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 03:24:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:24:43 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4db5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:24:43 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x2000) [ 2392.996695] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2393.057562] loop6: detected capacity change from 0 to 19456 03:24:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e000000200"/38], 0x28) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000500)={0x0, 0x4}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x181080, 0x2) r3 = accept$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) sendfile(r2, r3, &(0x7f0000000240)=0xb5, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000003c0)={0x80, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}}, {{0x2, 0x0, @loopback}}}, 0x108) r4 = syz_io_uring_setup(0x3146, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x2, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000028c0), &(0x7f00000029c0)='./file0\x00', 0x80, 0x800, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1d}, 0x80000001) signalfd(0xffffffffffffffff, &(0x7f0000001500), 0x8) r8 = socket$inet(0x2, 0x1, 0x0) dup3(r8, r7, 0x0) io_uring_enter(r4, 0x3491, 0x0, 0x0, 0x0, 0x0) 03:24:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2393.090232] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2393.107869] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:24:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b000000", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2393.134883] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:24:44 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x6bf3, &(0x7f00000002c0)={0x0, 0xecd4, 0x20, 0x5, 0x360}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0x3154, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x10000, @mcast2}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x2, r7}}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x1}, 0x2) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r0, 0x287a, 0x7f, 0x1, 0x1, 0x0, {0x0, r9}}, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:24:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b000000", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2393.190411] loop6: detected capacity change from 0 to 19456 [ 2393.215891] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:24:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e000000200"/38], 0x28) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000500)={0x0, 0x4}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x181080, 0x2) r3 = accept$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) sendfile(r2, r3, &(0x7f0000000240)=0xb5, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000003c0)={0x80, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}}, {{0x2, 0x0, @loopback}}}, 0x108) r4 = syz_io_uring_setup(0x3146, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x2, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000028c0), &(0x7f00000029c0)='./file0\x00', 0x80, 0x800, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1d}, 0x80000001) signalfd(0xffffffffffffffff, &(0x7f0000001500), 0x8) r8 = socket$inet(0x2, 0x1, 0x0) dup3(r8, r7, 0x0) io_uring_enter(r4, 0x3491, 0x0, 0x0, 0x0, 0x0) 03:24:56 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x4000) 03:24:56 executing program 4: perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"/353]) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x0, 0x1000}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00008d7000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000001e00)="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", 0x1000, r1}, 0x68) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0xc, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) unshare(0x48020200) 03:24:56 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x8000000) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, r6, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x129, 0x200, 0x23456}, 0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:24:56 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x321c) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000a, 0x10, r3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x4) 03:24:56 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4dc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:24:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b000000", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:24:56 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x1e54, 0xa2}, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r7, 0x400, 0x70bd27, 0x4, {{}, {}, {0x8, 0x11, 0xffffff81}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r6) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x890) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2000, @fd, 0x400, 0x0, 0x0, 0xd, 0x1, {0x2}}, 0xffffffff) io_uring_enter(0xffffffffffffffff, 0x64c2, 0x20e0, 0x5, &(0x7f0000000640)={[0x1f]}, 0x8) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbf}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2405.983295] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2405.995387] loop6: detected capacity change from 0 to 19456 [ 2405.999411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12847 comm=syz-executor.7 [ 2406.002540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12847 comm=syz-executor.7 [ 2406.009324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12847 comm=syz-executor.7 [ 2406.029894] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:24:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b0000000800", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2406.142682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12830 comm=syz-executor.7 [ 2406.145490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12830 comm=syz-executor.7 03:24:57 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x200000) 03:24:57 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4e00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2406.160282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12847 comm=syz-executor.7 [ 2406.213860] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:24:57 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) shmat(0x0, &(0x7f0000ff1000/0xf000)=nil, 0x2000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:24:57 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/clocksource', 0x2001, 0x10) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r3, 0x0) syz_io_uring_setup(0x628d, &(0x7f00000002c0)={0x0, 0xdb73, 0x2, 0x3, 0x102, 0x0, r3}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2406.234632] loop6: detected capacity change from 0 to 19968 [ 2406.254408] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:24:57 executing program 7: r0 = syz_io_uring_setup(0x42e0, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x40010, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r4, 0x0) io_uring_enter(r4, 0x68df, 0x6e9d, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) fdatasync(r4) [ 2406.287637] loop6: detected capacity change from 0 to 19968 [ 2406.303403] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:24:57 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x400000) 03:25:12 executing program 2: r0 = syz_io_uring_setup(0x42e0, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x40010, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r4, 0x0) io_uring_enter(r4, 0x68df, 0x6e9d, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) fdatasync(r4) 03:25:12 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4e40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:25:12 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x10080, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@ax25={{0x3, @default}, [@rose, @bcast, @rose, @null, @rose, @default, @bcast]}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000580)=""/92, 0x5c}, 0x0, 0x2040, 0x1, {0x0, r5}}, 0x1008001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r4, 0x8000000) read(r6, &(0x7f00000002c0)=""/225, 0xe1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 03:25:12 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2e20800000000000, 0x8400) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r5, &(0x7f0000000200)={0x101202, 0x8, 0x1}, &(0x7f00000003c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x1f) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000440)={0x0, 0x0, 0x2, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r7, &(0x7f00000002c0)=""/225, 0xe1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000040)=r7, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000280)) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101140, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3", 0x1}], 0x1}, 0x10044001) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000005640)={'virt_wifi0\x00', &(0x7f0000000680)=@ethtool_perm_addr={0x20, 0x28, "eedf48ab5a91771b6bef7c146385c59096699a321585029e9dad65d874978454c56d673a0a64455e"}}) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x0, r5}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r5}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003ac0)={'syztnl1\x00', &(0x7f0000003a40)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x400, 0x7, {{0x14, 0x4, 0x2, 0x15, 0x50, 0x64, 0x0, 0xaa, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0x52379153}, {@empty, 0x9}]}, @lsrr={0x83, 0xf, 0x19, [@remote, @loopback, @local]}, @ra={0x94, 0x4}, @end, @rr={0x7, 0xb, 0xb, [@local, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}}}) [ 2421.803192] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2421.810231] loop6: detected capacity change from 0 to 19968 [ 2421.823400] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2421.862783] loop6: detected capacity change from 0 to 19968 sendmmsg$inet6(r1, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0xa8c, @private2, 0x20}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000100)="8f84aca12f271dfdcebbac8298748b178334d51c2f0f89534f3ea25dad73db0b98482a141f6af27e1c44c1813b4dc2cc85854639793aecbb7d822a92bd14c6bcaf7920b7058997d99a3ff5b69f44c14da33a837db75c8ff000407a53c3041f4e96e5661287caf762b19ad91ad940cd917c149d05b368c500bac1e7103a1adf", 0x7f}, {&(0x7f0000000380)="75afcdbaca6f35a20fe8319e11a93f1cc6a92f00ce07ad41de8f6773ea9dd60c4953cd9d5f7d7c3359836dbf33ab62179dd31c991c05be47cc9c4439a0317a07f2300cf0715e9c1f4bd9754a832fc5491d2506b6921f5c26157217c8512bec027c5ff9cd1ed67b75ddaad9390c5d307662aa35f95a7f788db9648f7e7640abb19197f79426e20882929802e1494363f227e77c55254b2ed9ed05a5b1dfd029d0c1b46285ed43f7d351a2f90e873b8a11284b0bc8c6c33dd70be42c8a8bf6c8a4d135140d2c44daa7115176c320a4a1560e8dc74028c72c5e47e9943cc8ce4a2ef79be1bc8d7cbece5ce7d77474c935b513078aa0386bf1", 0xf7}, {&(0x7f0000000480)="ac602cdd70581c198cd85b5887ce518adfbfb386fb6c90febd649fb099427a5f1ce9a0f19e2e3087ad09841c8b2eb71307bb038f65424b4a6e0a1c169261e3a55208e799f86f997450ee74f5cc1d4642751f726a2138287e8055a702ea7e53537af2a69944c2308d38d5cb0cf76146c716184d5fac79a3ab1f0b791845bb9a97", 0x80}, {&(0x7f0000000580)="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", 0xfb}, {&(0x7f0000000080)="01b6246cf5cd71497e89f64c9e3f0856cf8e5e96d7f7ead50eb283987261efa276187eaa57eb64da6f6ba388ece55dafd9c93a70205acc228729cd", 0x3b}], 0x6}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000001780)="04a0983991beb8ef04c747c7e5bb80a62a6a64f34aa6a250357492da306dd170dd86913df17d1dc5d4adad99ad07b00d032618e3ee0a1f3aabd5fa39405c2bbc97ff7d5a66f55633eca6a37fbc6e80ec04d7d2bf4a1cb90da8ebd7b01d6a9837798d566cac817223be8da372b8b854b8ed59ef8df0404f88d3df724dd15e1f68eb281e12fc09bbcaaf0126386e76fd093f0d4010dae6b3f195a65ad8fb5f", 0x9e}, {&(0x7f0000001840)="836d937c3b14e7921869122268a706eaf8693f901b66b7403b7b65951b57304491103d6986cd2f4c48d849047fa0dfb4d60e15e139b7d2d66cba82725622db405f5055720efda1ae92a2ee94202e0a62d4191ab25f1526a275", 0x59}, {&(0x7f00000018c0)="c2a41b406de4b7c1bd5ea357b4ec32e489d61007da879ddcf77911da02d34e3086c7680b8004da194edb68bd2a7e0378b6b8b974de0e41be6b7459a060541aa3792dd98f394c2042a72129afe539931024fd3cd65a519061c46226e68ea9567ed100e86faedf156f736bb04a5ed015a8a0427917d6aeabb8afa1bd4b6af8b34f731980c2490c6e9a03a018ba455c91a18111f35bba984ac45fc04d60037ab91149295f18ddb3bb73d902d7881dfb9812ebee183afd60a4d7a85ec0ce765463977f6d29", 0xc3}, {&(0x7f0000000500)="74d905e6bb8955a0e8334786d4ed29b1a9a1171c437c295ec778bb33ce60", 0x1e}, {&(0x7f00000019c0)="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", 0xfa}, {&(0x7f0000000680)}, {&(0x7f0000001ac0)="b35de1cb44a362cc3e76c572dba12104e11034664522e8b3df7e38a90ccdc667284e10ab806a4dbce70ee9e11722dd65eba4d5951d135188e57040a47633d4a5f9e387e19e6675c71d565cb00d0fbf32dad35824d23037e4951494b40c1710ccdc112b1dc9d8ce46c8ff47b449d45be420f2680440cf6ccf93a83f636bbf023e8eb8bb199755505ea77c87cadc650c70d9c82b8e69c17b8716d96784ac57aebb79987b81cca2e0b0b73b3385ff0d", 0xae}], 0x7, &(0x7f0000001c00)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0xc, 0x2, 0x0, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001c80)="9556000d74aa42cfbf5c731567d6dd508e5c94dee3e7bc8441bbfa9ecd9673a76d719d10860fdf21d5cee53b", 0x2c}, {&(0x7f0000001cc0)="e43697b66bd25f5eeabefc85cf6b442dce28dd75bc1526040afc2dee835124bdc1380a1b75aa73213489b096fce59df4e7f7044af6f47a2c5962573529bf1e00521fa39a0276d400f0339985dff48d62faa8311896230e48465af305dba3b387742e0528f6282da143da", 0x6a}, {&(0x7f0000001d40)="89862d3f0626c346e8ceb1627e4ab1ed08b1edc731cfc8146c69bd5fe29117cb42e6b45bd3c45687657d4d0aab45ef0684ece6839927b790770a2fa6922c6cff", 0x40}, {&(0x7f0000001e00)="797e41bc1f35e5010f4194f8efc96423e452f366f9313c73108aecdf38025213d5d28b59e450a22ffe7e927b1031023ae44193971ba0219e4652f785054b940dc7ee8c35c0c58eaa1c525abda5c2353c04127a97e7dca35d510be3ead172b0badc73454bdff98cfa5a8d3043d97fdd42380ad690d29ee16ba76cc86c6549c4005ee33ceb2ca910b9441d3c9014348fa9c1ad5e2c99069ffb97a71e3e4412a135232f848f3ed80bf21441bc7ff51f980395cf4d2afb1d04adaebb22115c3854c1973361dffc4f4dffd27abf9581d5", 0xce}, {&(0x7f0000001f00)="4fd302d57106978931c413b035bcfbc12215f0ba7c70a98dccb224bf0aa651735d12520e437f14a25a09ec6b8d4ec94b900a0180bc0573f022194246660601262739ba54", 0x44}], 0x5}}, {{&(0x7f0000002000)={0xa, 0x4e22, 0xb4, @local, 0x6}, 0x1c, &(0x7f0000003180)=[{&(0x7f0000002040)="a807d0412ef3c83dd456470e53671945077f", 0x12}, {&(0x7f0000002080)="3a5c195d3ba15300ae80f07124c7fbfd799df7983d91c91401c8fd73904135375eeff429a4764364203e6d554abc9e58a020428bf0e8d1239c218b09d78f0be4047de0b02b04e0ded33b26158ebb771bcf146694faff", 0x56}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="ffb388d8169473518ec5a01ab01368c3178161fc24856cca8928b6ccd95d90b7406e616dfc7cfa32525ac2748e110294e0a838ebbeb8b7d06a55b2095fb6b9a32617584b12cee10b609e9b", 0x4b}], 0x4, &(0x7f00000031c0)=[@rthdr={{0x58, 0x29, 0x39, {0x21, 0x8, 0x0, 0x4, 0x0, [@remote, @empty, @local, @mcast1]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2f, 0x6, 0x0, 0x5, 0x0, [@private2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @rthdr={{0x28, 0x29, 0x39, {0x87, 0x2, 0x69564240c1a2a028, 0xaa, 0x0, [@mcast2]}}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x62, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x0, 0x8, 0x57, 0x789b, [0xcbd, 0x9, 0x9, 0x5888]}}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x2, [0x247, 0x4, 0x800, 0xfffffffffffffff8]}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x1, 0xe, 0x1, 0x376, [0x80000000, 0x7fffffff, 0x7fffffff, 0x90, 0x5, 0x5, 0x100000001]}}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x64, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @pad1]}}}], 0x1e8}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f00000033c0)="23ff8c45d889d7d9ba74c416ce28b5c6277c2b9d74fd8e055eb27101aad487145f40cd283adf788af9b6a4c7eb29f44a2523ec675a343a57573ea0f3a11abd200d53039b6a70ab521a474a6090f5a66d598eddd61b0f3de68044fedc", 0x5c}], 0x1}}, {{&(0x7f0000003480)={0xa, 0x4e22, 0x8001, @mcast2}, 0x1c, &(0x7f0000003700)=[{&(0x7f00000034c0)="68c9d9c8c81f8a8900dd5210297dc9f2881a0db5a7ed78a55218fcc1c4229b953b97b0975764c898d969f367ac16b953e6c0e8631ec4cdbccb37f48dfeaf29c5c71fed791dfeb3523ce9b21ecf0c03bd7aa8af7d74ec6483aad981d110d76aceb7df44b908f940e925504394fee358589bb36e2bfc4b5eac525c026219f75c8118c9df88a3acd206a734adc3d760fa75b92102ae32344acf748e52e6", 0x9c}, {&(0x7f0000003580)="417e8c4577ca4d3b33f106535441d6ec9515f2e06318d0040e919328ebae6d8a8c8d974dffd6e8ac01f68e421a6493f111fb64b74ced2c8b0218b4a137463cfc04bf55853fa9077a7ea3265c0d8db69ab2e305aea9c00fd3faaab2a6a41575a19b4a0e09aeebccdf49941758f0da731d62f408b64f704740264419beebef0cff6988f15bf021927c091080bea694e659f3f4ea97e1516c8f22bd065f1b09017c63bb4f60b51fb993da71c02fe381b76184119d2680e5369023d9075925f5b52f9148e713c14c03eb38a4f0b96a379efe5dbacda9733299db0b762cf662fa717d26618770f2a38fb3e64154", 0xeb}, {&(0x7f0000003680)="b5364d04d8ce1580842ea7896868b718a3f1b1106882193ff4a1092e03b6c1f167eb3d6ed0fe952073f2cd1062b658e0cbbbc55c2556548a60fa55a31defc95bbe9b481a", 0x44}], 0x3, &(0x7f0000003740)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x2, 0x12, 0x1, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @local, @private2, @private1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local]}}}], 0xc0}}, {{&(0x7f0000003800)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000003a00)=[{&(0x7f0000003840)="eb0be7e69bcee47b669ef2d12879f02bfe6ee968c2813256fe94577a905a1bfa60cd619cc8aabb4453c94eea65ef9f6fbf90012b1782a3bfa7b7ac559dbaafc5a93d50a0b27d8cd33439f56b6501d7fa31b5746a93a378b4c464e649ea8eb6714b7f1e36e2a4266e7bfe6df151eb1334d66a903b8637c41b606c5ac0e5f706a4774ce2b0d4c6985b35a31cb289078f", 0x8f}, {&(0x7f0000003900)="1e54f6b43b38235678cb51529fe80c4cb1a67f09c0b840b4", 0x18}, {&(0x7f0000003940)="2bbbd54e8dbe2afb22d0e1c1bb3561cff1094c19c419e1457f65fb6175fd0d4deffa31a31ffdfc96dc3088282a3f0448c85335e3ffa8f0be9bf3a62bfcef8d11d01b4f37e8917816d6201c43c7c0ba3497fd98926d49cb18c96b9245e59d39282b58110d8e3243f428857e2d4aa3a07ae888c425a8208f0cd7f6d3f248a361297b26fa", 0x83}], 0x3, &(0x7f0000003b00)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x3b, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0xff, 0x0, [@rand_addr=' \x01\x00']}}}, @hopopts={{0x18, 0x29, 0x36, {0x87}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xf}, r5}}}, @rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x1, 0xac, 0x0, [@private0, @dev={0xfe, 0x80, '\x00', 0xa}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @mcast2]}}}, @dstopts={{0x68, 0x29, 0x37, {0x73, 0x9, '\x00', [@ra={0x5, 0x2, 0xd28}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x38, {0x0, 0xc, 0x3, 0x0, [0x81, 0x8, 0x200, 0x80, 0x23, 0x1000]}}, @enc_lim, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0xd3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r7}}}], 0x1a0}}, {{&(0x7f0000003cc0)={0xa, 0x4e21, 0xfffffff7, @mcast1, 0x7fffffff}, 0x1c, &(0x7f0000004f80)=[{&(0x7f0000003d00)="3bfd5239b3a2fca97530eb4bd1df4cbe311ab4fec38542b7857777acd268ab5701be411f02251e9bbb120bc48318d8d33e768bcebac16f4d3706e6f84794dc67641805483bca3c87d3af0ad52fa19a617c805dbfa0fd7c4d93a0cf68f6dd740511e8b297b8c747c08bb678935c55df237472527c8c3bbf61590e2765db653d536d171f726293bfec98d48f2d7177dab5a3be206f63feb32f6208ce23a249", 0x9e}, {&(0x7f0000003dc0)="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", 0x1000}, {&(0x7f0000004dc0)="4362862d28a8fafdee101a062f73178572424d4c136ade57361936d0fa1f38e60acd2e06cbd11446a3709832017a19e5d888403ba9f9ac5d84a78c03c1ac9a394155187705459b5900339d3b7e9bb7698cbf0240ebb53f442c880cb51c1be496b5f510f9ea042fbb3b292c45c055d3b9eed289d747a76a5d7573878a52be82eb09f44fd9683e6209a456a092e6704b1e5fc5e06a01071916f8163f40bbdf4d602d64a59dcdb52605008b74a0966f352c30cd5b", 0xb3}, {&(0x7f0000004e80)="591c6ac6ddaca4ed9ec4c2a80c2ae4dce77de5f7b556f785f03101d9f90584187c75137d6353abdaf659182efa561653234684f73e2ae777b487c96c6fe5b04a4bb085c4f864037bd4c815362dc406a2c453d0e7a80ed956d2912750c43aed425e87bf415516b2c8e92ab28505a575af76e1fe371239f2f7dccd3036690b38597acd775552dd425d2e2c854cec9384052bb9d6025e58f0b7c432d9356a3a0e667c105f23a7312a484699cab589a4790eb966d0c0b7edd8bfa2cdba0b05e5a6babbb50e36352b1cee9f73e620bd1a33e7830b9f804abbabf595ffa8fe808392727f101bb5fa5f", 0xe6}], 0x4, &(0x7f0000004fc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xffffff08}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x0, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x30, {0x92c4564ec4414812, 0xa, 0x1, 0x8, [0x9, 0x1000, 0x10000, 0x100, 0x1000]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x6, [0x4, 0x2, 0x1]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f00000050c0)="65ff6eb3a067ac680df74b08bd05ad55232df4fa86557ef29c01974ee551c53101e5af18436b07955f6293e208646a21792ad6a541cdb8dc18029c0e5765f07f0791b10d10a5ad9ae912d1b7bb015f26a76837a535d477fb265c6713df4507b32c830b68462ed655c07585c82ecb80", 0x6f}, {&(0x7f0000005140)="79fa08e452b3ebf90cd40390214cc47d9500803d8c0176bffab69b0c371bef33e928ed775922f411084757ed589ff9ed14296ec701481f5ed58c43e5237e059eaa6a0a61000e41637c5441c4d6788f3b45086553569bd54eb75a82f49643f4b86b0a625d12d2af66f371d2192c54aae3d89132570c66b21e20b5de2cd086405f91804cad265b1a0f222a7a5911ecee774972157d1df49f38862f96867ef9ad8fe7e567283018d8f3a796546e8b724e873070cf4e6ab51f61083a123921acda0fbe06ead59357599a50d5419023ac768fdc9f8f6b7f3ee1be784b85386327914083a9e9ded6e404f44a2a328978b47885", 0xf0}], 0x2, &(0x7f0000005280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x87, 0x12, 0x1, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, @mcast2]}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x2b, 0x8, '\x00', [@ra, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xc5, 0x7fff, [0x101, 0x7, 0xfffffffffffffffb, 0x3]}}, @ra={0x5, 0x2, 0x2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x178}}], 0x9, 0x4801) recvmmsg(r0, &(0x7f0000000000), 0x5ac, 0x0, 0x0) 03:25:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b0000000800", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:25:12 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:12 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x20000000) 03:25:12 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4e80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2421.965362] loop6: detected capacity change from 0 to 19968 03:25:12 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) recvfrom(r4, &(0x7f00000012c0)=""/246, 0xf6, 0x10000, &(0x7f00000013c0)=@can, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f00000002c0)=""/4096) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2421.980016] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:25:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b0000000800", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:25:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f00000008c0), 0x8}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r0, @ANYBLOB="122300000000010003000000b835f92e2e2f66696c653000"]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1a000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c00)={0x10f8, 0x31, 0x4, 0x70bd27, 0x25dfdbfb, {0x13}, [@generic="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", @generic="864057e2385d3003c8bfd513bdef103f4bf6d91e26e50deef5648233b4ea4b67bff9ae1a2757dbee496e9a46ffdc187a4162dc17a1d91be735d47c796c2cda0d418eb07824483e24f09c967fa3284177ea9bb675e97b48631c717f5e84c20f65f8cbdadce4a9156cfe0038a9689ce75d063ea4438487433f041b3e1e4653064b901badcaf493dae065e76d5679b4773604bbb840ff3dba59d89dd5a6ce6661b7bb72fc538f9e82ffd0bdbe829ef54624eac6356faa7893688c743a117e9d8e2f33125e38284661556974bd0c75f678a3a03058", @generic="ddcf422eba2469f5c67ae6904c143d"]}, 0x10f8}, 0x1, 0x0, 0x0, 0x1}, 0x40) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="4c050000e4dd4ef476760230005a3bce99"]) sendmsg$inet6(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="deed934d1cf3eadd0eb43c48566832619e797b792bd9043f51d78f30d30044d8984bde53a02c4792c7d91e0fa08528ff7b85409266e34c2e56ea44cfc11b8a28aee234c72b2f70dfc8ce6e89b20cae14d54c420ef54a337cf9ea09b6d9632dd463e077675efb661c2db307d4970330ef91e5bc8c488406", 0x77}, {&(0x7f0000000500)="0de63e8f16ca5b6506a67ea5e07e53d7cd0d17c798df0d5330d29196555405a2e05b676b956d881abed5ccf887f9aa50279014a61af7fc4e48b2abc8e68f339c8dce50a83d86f68f171cc8c87e3eb75d4b28990de4b23492be997f7249f86fe209ee60d0925b09c18200a26e2702f8745130448a06b476faff0a0813abb5f298e1d60b0681aa9072250ec719cec473a465c4d27d02af78e1bd3807edf88c", 0x9e}], 0x2, &(0x7f0000000300)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}, 0x20000010) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r3 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r3, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 03:25:12 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4ec0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:25:12 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x401f, 0xe67, 0x1, &(0x7f0000000040)={[0x4]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:13 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) r5 = epoll_create1(0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x12080) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x63d28c2b, &(0x7f00000000c0)=[r4, r5, r0, r6], 0x4}, 0x1) r7 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x9e0b40a9193908e3, 0x0, r3, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x4, {0xa, 0x4e22, 0x3, @mcast1, 0x4b93}}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)="08c893f31071307ceb290028a98038628840a61955edc287b67178dc7218374053e899f30a767223d9c477be3c670e07f4f0ddfa1fec5631d8146235a7bdaad118819c91ab292959640e29d6e4f5add25661ac4af71be0157e4cd24b22e9a2e4f131a7138d13fd97014902a91a42f87af580495caae9693ddc85", 0x7a}, {&(0x7f0000000040)="e51af648a8b019e0673c7384ba6137039acaca0ac8083fb4e9bc61b072af851b9ec443f643", 0x25}, {&(0x7f0000000440)="feb3fea7c69ddf2da0a5041f6c584e37a780ab1368a7a89abaa04e036750181cf2a353c2e341d869350f044ff609ec14fecedd511a201f4f9730fefc25439480f6a1ae9bac4cd01a671788ee82ed71df9a30eb1b7aa41df3c030403059e24f1f3ba785e9a02ed364bf541647b84c01cbf8f90def4613bf7e375fac4cf68e91dfa9d70d04be5f23b1bce58aaa6f80d32f0350af2bc1e20406d3d60e216d8b39c74d567356bfe699e90d7bc58b508c67cd04efa59f22b78ec09a818643630f780ccbe546058026105f5fefc3cb3d86759e36f6e690f9cbfa4752", 0xd9}, {&(0x7f0000000540)="eacdd7dcfbbbc86236dfaba5298b3b9b769928311e7d64d361950ec424ab0a569c9045ad2c3ea2687ae764e5c4527a13b473bc6b064f618a944f52472f9365c41be2704ee166131ceece69d6576d49eb5e03bd37819b4ceb8be70037eb7442f0e99c8d3704fde1028983330f8b91f5671a98396fe69ee079492accc5ae393cc9ff5c02d8ab59cd66217df73b93691621c2e9d3728cc7c675245d8f86db9a33ec702da98e", 0xa4}, {&(0x7f0000000600)="8fb7ea14721aaab7cc0c27cfa7f546ebf252f1bf27cd465d2d93c7280b863d662dd117200a1932b44a20662e9bf41eef08109ad2e5a188838e1f449dd8fd81dbcea04b610ff8fc09c6ea7d6466cf539bb87d5d982897a043ac643191eb115ad0aa07b707615559834b82e4ecc3322c93ddc56b866850fba4bc370844525b78e273fd37790372f7016b03e788608e42bdef3ac5094e88a844abbac701d0699e50ab8c3e6a953fa988e60e788d59b81f4398f2bbf34ff14eb6f29c77e32573f41f064cc2ea9b", 0xc5}, {&(0x7f0000000700)="0af9295077f365ad53b20f9ed1d3ce873997a9723822e545a71629576d6bb359a8214d93a958566c360dc917b1dbe26c7d72db06c615df8aa9b7fdc7c496e0e92af55c41a85c541ce0afd739aba218a7dc10a0a7c649a4e2973f220b273f5535df1b04a7c23c7259e1d1ef0be03a59630d2d6f856a4379078f36e4ff923ab8", 0x7f}], 0x6}, 0x0, 0x4010, 0x0, {0x0, r8}}, 0x4) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f00000002c0)={0x20000001}) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2422.085233] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:25:13 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x20000000000000) [ 2422.142447] audit: type=1400 audit(1744773913.063:90): avc: denied { block_suspend } for pid=12939 comm="syz-executor.5" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 03:25:13 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2422.228574] loop6: detected capacity change from 0 to 19968 [ 2422.260086] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2422.317332] loop6: detected capacity change from 0 to 19968 03:25:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcde}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="110d0000000000000000700000000c0099000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0x9, 0x3d0, 0x6, 0x61}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 03:25:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b000000080003", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:25:27 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = signalfd4(r3, &(0x7f00000000c0)={[0x2]}, 0x8, 0x80800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x101, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xd}, 0x0, 0x0, 0x5, 0x5, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000580)={0x10229200, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x28}, &(0x7f0000000400)=""/100, 0x64, &(0x7f0000000480)=""/188, &(0x7f0000000540)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x7, {r4}}, 0x58) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x1f, 0x3f, 0x9, 0x3, 0x0, 0x2, 0x13004, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000600)}, 0xc27, 0x7, 0x1, 0x0, 0x9, 0xfffff55f, 0x200, 0x0, 0x7, 0x0, 0xa}, r5, 0xc, r4, 0x2) [ 2436.224487] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2436.230193] loop6: detected capacity change from 0 to 19968 [ 2436.241569] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) 03:25:27 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x3f, 0x78, 0x0, 0x0, 0x1, 0x300, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x20, 0x5, 0x7fffffff, 0x7, 0x10000, 0x9, 0xffff, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x50, 0xffffffffffffffff, 0x8000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001100)=0x0) perf_event_open(&(0x7f00000011c0)={0x5, 0x80, 0x6, 0x0, 0x8, 0x7, 0x0, 0x9, 0x4083, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6b4, 0x1, @perf_config_ext={0x1ff, 0x10000}, 0x102, 0xff, 0x9, 0x1, 0x2, 0xfffffffb, 0x0, 0x0, 0x80000000, 0x0, 0x6}, r3, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001180)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ieee802154, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/30, 0x1e}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x3, &(0x7f0000001100)}, 0x0, 0x40000022, 0x0, {0x3, r2}}, 0x6) r4 = syz_io_uring_complete(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 03:25:27 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4f40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:25:27 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x40000000000000) 03:25:27 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgid(0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @pid=r5}]}, 0x1c}}, 0x0) fcntl$lock(r3, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x5, 0x0, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x325e, &(0x7f00000003c0)={0x0, 0xd914, 0x20, 0x1, 0x158, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000440)=0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd_index=0x9, 0x5, 0x0, 0x0, 0x8, 0x1, {0x0, r9}}, 0x8) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r10, &(0x7f00000002c0)=""/225, 0xe1) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x3, @none, 0x3, 0x3}, 0xe) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b000000080003", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:25:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="a3", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_io_uring_setup(0x2343, &(0x7f0000000100)={0x0, 0xb349, 0x10, 0x0, 0x34c, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) dup2(r2, r1) [ 2436.304787] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:25:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b000000080003", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:25:27 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4f80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2436.425525] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:25:27 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x56, &(0x7f0000000400)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x1c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @remote}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) syz_emit_ethernet(0x88, &(0x7f0000000000)={@remote, @broadcast, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@llc={0x4, {@snap={0xaa, 0x0, "8d", "dcaf17", 0x8917, "c3d1eabb8f7277c2f52f685a92eb667e10d777894712db4e50f2395a3f0d509ac6c9159e39417cc8afbaf70254c6c03fca985f575808993212a8541faf9d0297008cc202e050db55ad9c5df4ef8f3371f8a40140d152edfca98b0c8f34872a787fc38f97d8cf70b0f1c11b794e36"}}}}}, 0x0) 03:25:27 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, r8, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:27 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x44029, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, r4, 0x1) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:27 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f00000002c0)={0x0, 0xe928}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000006, 0x8010, r0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x400000) syz_io_uring_submit(r3, r2, &(0x7f0000000b00)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@xdp={0x2c, 0x8, 0x0, 0x9}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000d80)="74af0e6b536cb89cc96f0131901ac9dc95497c7c8a347293e58487ea78c9d795f08891aed30baafce5ae98dcbd2bca42713445f9c05773e1898d260bfb89fa16d0df635ec9db8f48ca1c0f83e30f0e61b1f9f69f3a78aa26f035c9025bb0d12bd7e52b38e411946a97dbab71776e41894d430de6af2c43fd", 0x78}, {&(0x7f0000000e00)="8083abdc95bfebf4fce2fb59af53c49f78230724775f1b9beadf16528de9ebe6380271550eabe46e6e2f8f5b2582da63fa1585dc6b283102fde60d70a822755cd41945251a975c22ad6a96b5533873b2174ee12216f4d30d6fe62c925032fd2b7e5fb440676b67ec39b571931808a321abe7aedd41abca2bacd8a229ae08b954ca1f5e09fdf046a3b2f25655fc5f1fa466102e501d81e90bf4ade89a9e1a9f6a3a0c42cf6630517e86335990fb8bba0613c8793b3a51fc75636056f0fe413f51d7e4bb1c39edb7ec47d5c1114dff6fda51eaa00f5d13841ce8c3ac07751034330cad7e8211bfc2cb2107ace893615fae579b05f3166e8bd795a11ee3a6c4e500000000", 0x103}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x610}, 0x0, 0x24000085}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000b40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd_index=0x7, 0x80000001, 0x1f, 0x2, 0x36, 0x0, {0x1}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c40)="1d72446cf3a9fee17908623da313bddf533a97d1f940584f0087841ee2164e2332e2aa005c1c9c66999481583778d16f9b04631fc200b1ce5a389382ffe5d0f37722c14e1261a0b56aa8401b663db55b8057a1123703a120947777eadd5bd6d8696579516d29adeac2b6e4472c0cd1e23b58f3704218741cd83dd0", 0x7b}], 0x1, &(0x7f0000000d00)=[{0x28, 0x113, 0x1, "3afff776c705ddb936ed61d8675981e55713c9"}], 0x28}, 0x4000010) r8 = syz_io_uring_complete(r6) openat(r8, &(0x7f0000000440)='./file0\x00', 0x80002, 0x110) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r9, {0xfc}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:27 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x2000000000000000) [ 2436.497823] loop6: detected capacity change from 0 to 19968 03:25:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcde}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="110d0000000000000000700000000c0099000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0x9, 0x3d0, 0x6, 0x61}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 03:25:27 executing program 4: syz_emit_ethernet(0x82, &(0x7f0000000080)={@link_local={0x11}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @rand_addr, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @local, {[@timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@private}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @broadcast, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "e9c9bc9c471c7567"}}}}, &(0x7f0000000040)={0x1, 0x2, [0x755, 0x81b, 0x533, 0x41a]}) [ 2436.565907] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2449.215261] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:25:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:25:40 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4fc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:25:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0x3}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000000c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x123501, 0x50) creat(&(0x7f0000000140)='\x00', 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) 03:25:40 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000400)=""/4096) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r4 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmat(r4, &(0x7f0000ffb000/0x1000)=nil, 0x6000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x7f382d8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r5, 0x0) io_uring_enter(r5, 0xee63, 0x5f9a, 0x3, 0x0, 0x70afa1c4) 03:25:40 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x1c23, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x27}, @loopback}, 0xc) 03:25:40 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040), 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3af0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000008, 0x10, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x4080030, r4, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:40 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r4, 0x80, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xad2, 0x3}}, 0x804) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10010, 0xffffffffffffffff, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r3}, 0xfffff801) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) write(r7, &(0x7f00000002c0)="858af52538be5c32ca0b42223a54b4156ae62a67b5d79f17a8b87c0a3013b9f65384ca120bff33698cbdf95cd969959eb07792ee3aa1cfa0161ea5eea37777196492e0611510af020b93ae2ddea5004f636c1c0f31c3ac746e4d9df0fc1dbba26836876d87d04f3d1ca5a654c640de66e70ada1571c641fbf3e076a35ce29b5738910d98e94c31a1477e5bd6e0b54c101790f4666ec7f745a9c36c736e866f3d8096fc259e04a340e78d9d99efdfa783ffe051b9e77853d4b6b0b6ff896c8393afbc8f5c76ee0a8020d38016054dabe1c18b182c9e6d11b4e7870277c0f60d0d18b288d72892c6fbfd364c8c830ceb735617c75fe989", 0xf6) 03:25:40 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x236a, &(0x7f0000000540)={0x0, 0x590a, 0x0, 0x1, 0x3a6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000680)) syz_io_uring_submit(r4, r3, &(0x7f0000000640)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@generic={0x1e, "669fa65bd23475476489086fa576f84f0bf482a8d1a40a8dc5650331abb0452aa886c9c3cc97a089b7e5a82a1bf398f11e40fa0a39a52a9579ff42b2aceb90fdc9018e7f006e84f29a642caf82f19fa53590c1f618c586f99f4ee46a74c15242b64dbfff92afa01dc8fe7afd85f87a543266ba7081948066ee4996f0c8b0"}, 0x0, 0x0, 0x1}, 0x1f) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x8, 0x0, 0xfffffffb}, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2449.242659] loop2: detected capacity change from 0 to 32768 [ 2449.252581] loop6: detected capacity change from 0 to 19968 [ 2449.260524] FAT-fs (loop2): Unrecognized mount option "@" or missing value [ 2449.271322] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (9 blocks) [ 2449.327407] loop6: detected capacity change from 0 to 19968 03:25:40 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x3, 0xfffffffffffffd9b, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x4, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000300)={0x800, 0x3, 0x7, 0xd7, 0x8000, 0x6}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r2}, &(0x7f0000000340)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000f81500410d000000d081dcbef400dd23000000000000dd1822f9d4b22259bc2f0766848432f20432c634861790f42dd7a3675833d5e110"], 0x14}}, 0x0) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x4}, &(0x7f0000000600)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:25:40 executing program 0: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2449.436861] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:25:40 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2449.479355] loop6: detected capacity change from 0 to 20480 03:25:40 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0x8000, 0x20}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x6282c2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000200)={0x1f, 0x7f, @any, 0x7}, 0xe) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x8000000) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) syz_io_uring_submit(r11, r9, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r9, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2449.494182] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (10 blocks) [ 2449.526471] loop6: detected capacity change from 0 to 20480 03:25:53 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0xc8714, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x109081, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r5, r5) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x3, 0xe3, 0x74, 0x3f, 0x0, 0x7fffffff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0xe7}, 0x11400, 0x7, 0x100, 0x1, 0x3, 0x82, 0xff9d, 0x0, 0x80000000, 0x0, 0x5}, r4, 0xf, r5, 0x8) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x3f, 0x4, 0x7, 0x2, 0x0, 0x200, 0x835, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x100000000, 0x2}, 0x800, 0xfff, 0x9, 0x4, 0x8, 0x8, 0xfe95, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x7, r4, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x47182000) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:53 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/1828], 0x724}}, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000bc0)={0x0, 0xfd3e, 0x0, 0x0, 0xfffffffe, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000c40), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfec4) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000012) pwritev2(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)='t', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r6, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804) r7 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001200)=ANY=[@ANYBLOB="7c050000", @ANYRES16=r6, @ANYBLOB="00080003000000000000000000000000000041a0303813b2d9a1ec67", @ANYRES32=r8, @ANYBLOB="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"], 0x57c}, 0x1, 0x0, 0x0, 0x84}, 0x84) 03:25:53 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240)={0x0, 0xacce}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x4, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200040e4}, 0x20066850) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic='\x00\x00\x00\x00\x00\x00']}, 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) read(r3, &(0x7f0000000080)=""/129, 0x81) ftruncate(r0, 0x24c2) shutdown(r3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:25:53 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5040, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2462.947825] netlink: 1792 bytes leftover after parsing attributes in process `syz-executor.4'. 03:25:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:25:53 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000340)=ANY=[@ANYBLOB="48f8ff6ff86041861bd8316bcae8c66e634f3a769fa1e041acfe38f3075e70f5e1ebfb6a8ca9997c01695a6913b620c7516e70ca931af85970421868bafa7b0dfbea4dc37fa6da0f8e0f6635aec355514a7548c3b5441f4c5a23d2a0a796018e037ce7e6bbd478be165ead3944de051971fd282ddcbc4d80ef3d0d8e2507312760bcee637ccc0950a9773d156641cdf109227ba2f71f2e17a493ae863b1d56e4ba1b6269495e0e01ab7230", @ANYRES32=r3, @ANYBLOB="c0010000010000002e2f66696c653000"]) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x0, r8}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x25}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x1, 0xffff, 0x100, 0x0, 0x100000001, 0x400c0040, r8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(r5) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:53 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9ff, 0x109001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd=r7, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000400)=""/138, 0x8a}], 0x2, 0x8, 0x0, {0x0, r8}}, 0x9) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x3}]}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2462.979768] loop6: detected capacity change from 0 to 20480 [ 2463.002563] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (10 blocks) [ 2463.004327] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:25:54 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r9, &(0x7f00000002c0)=""/225, 0xe1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x40008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r9, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0)="1e2c790b588fc53e492a4e940c5d8a4140e9a261c524a56b626b15cb679939ff1619ce2633724ff38a42170f9fcff977f57e95b7bd83e98e91b54a6cfe211e437ced2c937dd8fd985b146fcd0461518ebd91224df61173c5640b86d9ac8c41355113eb7b2cad849f10bcd7ddf4e669a4eca9044d3dbb2f22623336d1fc8f1a0f5303fdeb0686c950747e272f4dd7a58a94744b6bac2da98b7050fbeb95679158f6b94e54032f5365", 0xa8}, 0x68) 03:25:54 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5080, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:25:54 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0) r7 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x50482, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x49588b73, 0x3, 0x1, {0x0, r8, r9}}, 0x200) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2463.152580] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:25:54 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:25:54 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000002900)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x2000000, &(0x7f0000002a40)='seclabel[\xdf\x1b~\"_\"\xd9a\xdb~$\x17\x94\xd8\x96%P\xd2\xef\xd5\x84 5\x95**6\xd9\xcd4\xc8F\x16K\x8cN\xb6\xb2\xd4\"\xcf\xd6\xa5V\xe0r^\f\v\xce\x0eK\xdc\xf2\x82\xe2\xaf\xbc}\x1f\xdc,\xf5AQ\x8fS6q\xe6Lg\xfb\xe0bk\xe1\x9c\x7f\xe6+nZ\xa5\x84\xe8\xa3\xc6\x1e\xef\xd8dZ\xa1*\xcb\x8a\xee\xf7:\xc4\xcd\xf8\x19\xd8\xfe\xb1\xb3\xb5\xed*\x95,\x1d\xe1\x9a\x9c\xb5\xdf\x1b\x14\xdc\x05\x8f\x95\xa0\x0et\xb99\xe1\xdc\x93.\x0f\x03W|\xb2:\x0fx\x1a\xe8O|%\x9d\xab\x8e\xa1\x91\x9ef)\x11^\xaa\xad\x9fx\xb9\xbf\x1d\xfeD\xb8]\xf2.\xe3\xfaI$') 03:25:54 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x101}}, './file0\x00'}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {r6, 0xffffffffffffffff}}, './file0\x00'}) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2463.167443] loop6: detected capacity change from 0 to 20480 [ 2463.174251] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (10 blocks) [ 2463.201666] loop6: detected capacity change from 0 to 20480 [ 2463.209883] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (10 blocks) 03:25:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000b7667fb3ae132927e8e50000000000080000", @ANYRES32=r3, @ANYBLOB="14000280100003800c00018008000100ffff0000"], 0x34}}, 0x0) 03:25:54 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:54 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8914, &(0x7f0000000140)={'lo\x00'}) r10 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r9, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/182, 0xb6}], 0x1}, 0x0, 0x40000000, 0x1, {0x2, r11}}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:25:54 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x50c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2463.272215] loop6: detected capacity change from 0 to 20480 [ 2463.280952] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2463.282077] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (10 blocks) [ 2463.288396] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 03:26:08 executing program 7: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x100000001, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r3, 0x8000000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xee2ba5a8c83d73a6}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:26:08 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) r6 = syz_io_uring_complete(r4) openat(r6, &(0x7f0000000440)='./file0\x00', 0x80002, 0x110) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000200)=0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:26:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:26:08 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x0, 0x0, "d1e3092eb94018fff573e4cfd2821799ea8563bd475102d18fe15fe2967de5e944721a6b45d580e0fcbc9405653f2d27857f300011e33cd1799fbb2952bb6f8fdd3d3fb79348bd9e7f136d4c15eea87a"}, 0x10d) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000680)=ANY=[@ANYBLOB="0200ab191ae7488ddb7811529006169f3b3acb577a2b49e09f22294fd7c885854114ff3e792f546d12cc75a97fba9812f40ad8981c3e0728942bd72e977d2c5534d4645b72b9aa96cb1644b47cbf648088278e0c23713dc77b6633b8383e9de1f4945a48e70dd8d99d843e1d67edfc1b94a3f7702bba181df2f3e87e7b6ce1a8a2b0edf36dbcf84aa3ae36f39f1331c60f2167106ad51f2a7987b4a3ffa1545498e57f232dfa8b949033b5ce9eb66ac3d8e2984f5977b2e1d5620bec79f0b14f660c370ca96cc31e830d07c8556543d23a0b19a28fb8ce926cf0768211b9a164d64f582e9cb143d70244375bb7ed963ddea0900c27e0992bd597ca023912174245a5caccf193131b17fc11b6dca567caf2f55177c98a2377d2fc016c615800f1e14fb2aae0896bd4a9bbdb066e8d138e5985fa90487513543bf93a651e3c92e547e1247a9d7ffb0544d08e52cd6aef34419a7e26f7376a3f7d0268525052946727170855ba5f61dd4e0163ba60f33df716091b451fc1496a302da706b1141a20e2fd69e55db468d0dbedaa597d1fce00b8d2bd00053cd518af945158a61f7ce0d7ebf3ca8861f75b9daddd4d4bb445789c77b6732872d3139da2cbd4d6cc194dc6f6347540cae57de8e702324e2a81d4fde8c239959fa87ad66e74a0dcec9769785666a2249cbb0fee1c75fc000620543cc0e7437c3b44a79bfcc6b1ff9b613c9cc9f686d78cf6fc498e397cae048d9c41fb8576", @ANYRES32=r0, @ANYBLOB="05f26441240900000050d8da12122e00"]) sendto$inet6(r2, &(0x7f00000005c0)="cdf685287dfc5483f2a41ce85278e0923c8a6e5baa5fdbfe0db134e00c9be71bf762507f057f24207f1c863a22f76b5104e64560381e6bff25c1115d2d616e7f9a47e9d90daa52fb7a2414520a1196269c5fa018394fba4e7a6538f7fc9bfb5f7cc3c43f8e8f63eb4c6326207ae4645e3add330121016c0839944ed98f8cb362121467171831994ab8cc1c4f4892181c7be5", 0x92, 0x4000000, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @mcast2, 0x80000001}, 0x1c) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) connect(r4, &(0x7f0000000300)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x0, 0x0, "d1e3092eb94018fff573e4cfd2821799ea8563bd475102d18fe15fe2967de5e944721a6b45d580e0fcbc9405653f2d27857f300011e33cd1799fbb2952bb6f8fdd3d3fb79348bd9e7f136d4c15eea87a"}, 0x10d) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = epoll_create(0x8000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000010c0)={0xb0000008}) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0) 03:26:08 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000001440)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r3, 0x0, &(0x7f00000014c0)="f6e80c98ffb8a8ec0c5ba5b8b6e7961e6c389f7b132c0b97aaac6b55178bae9f00ea61603e4a11cb4725742a110a57e08263cac22b3c86968d1bfaadb7096e8d03afc9d4fec41ee409e27634b1298fd01ac58c0ee6483fd91c761b660f2313f64a9b38c7455b31be71ee22e311aba926261230adc3f163b4b617c2642e43d3cbf0eb2d59a128c273a401e21122ae6538f2e7d5d543d32c0c538b546daa27675b537aef5a83e3406e767a8b451ef3c41daa4bee7518915154a13e8700cce362aa454f5c6b859c6d3bd09063c4c8a6bc5a", 0xd0, 0x4040000, 0x0, {0x0, r9}}, 0x2) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r10, &(0x7f0000001480)={&(0x7f0000000040)={0xa, 0x4e22, 0x100, @empty, 0xb8db}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="2016afa918040ebb84", 0x9}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1190}, 0x1) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:26:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x5409, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) r2 = dup(r1) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x74e7}) 03:26:08 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5100, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) 03:26:08 executing program 5: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x503000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) [ 2477.126672] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 03:26:08 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getegid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3510ed6a733d7463702c706f72743d3078303030303030303030303030303030302c70726976706f72742c00"]) [ 2477.157230] loop6: detected capacity change from 0 to 20480 [ 2477.170390] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (10 blocks) 03:26:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x44540, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x5) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="1ab8ec59ef9ad6f09dbb72150088ccfdd922232f0039e14ab93fe3da1d6550eae6ad9ffce2ef62659a27cf83", 0x2c, 0x17) pread64(r3, &(0x7f0000000240)=""/9, 0x9, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x8081, 0x4) sendfile(r0, r1, 0x0, 0x100000001) [ 2477.204301] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2477.217124] 9pnet_virtio: no channels available for device 127.0.0.1 03:26:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r7, @ANYBLOB="e34af49713168b2160ca4ec1d53743b74fdb6249f99dbdbec03dc83ebec4f36178a79f1556af54c1ab56150d1c5acba0dd0945a44088be02c82923fee5b51d145210ef37b5dc897c22b19076b9700acfcdca8334f726b91234d4ad67648c89a84bb8fcc19def43c7cdc224ad412a4cf8f1aeae"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 03:26:08 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x5e93, &(0x7f00000002c0)={0x0, 0x6f5, 0x0, 0x1, 0x2c2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8003) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 03:26:08 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5140, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 2477.279912] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2477.292637] loop6: detected capacity change from 0 to 20480 [ 2477.298101] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (10 blocks) 2025/04/16 03:26:12 Manager.Poll call failed: read tcp 127.0.0.1:44138->127.0.0.1:37921: i/o timeout [ 2482.378433] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=119s [ 2482.379604] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2482.380397] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2482.381178] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 2482.382042] print_req_error: 374 callbacks suppressed [ 2482.382053] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2482.383909] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2482.385726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2482.387604] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2482.389869] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2482.389973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2482.391140] buffer_io_error: 6 callbacks suppressed [ 2482.391148] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2482.392290] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2482.396659] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2482.396726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2482.397920] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2482.400722] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2482.402996] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2482.404254] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2482.408600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2482.410103] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2482.412368] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2482.412437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2482.413602] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2482.416394] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2482.416462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2482.418495] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2482.418564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2482.420607] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2482.420690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2482.422787] Buffer I/O error on dev loop4, logical block 2096903, async page read VM DIAGNOSIS: 03:31:15 Registers: info registers vcpu 0 RAX=ffffffff83e8ee20 RBX=0000000000000000 RCX=ffffffff83e769bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8f428 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85678ec8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ee2e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559e6c7169ac CR3=000000001af46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=77a8583da17c62130dedc699cba10aee XMM02=51ed146ee6d3bef1d249fc50242c9de9 XMM03=0da46794a6050bbc80f251bd21a2487e XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=64707466730073254073250070746673 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e8ee20 RBX=0000000000000001 RCX=ffffffff83e769bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8f428 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85678ec8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ee2e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbd78f1d010 CR3=000000000dfd4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000000000 XMM02=00000000ff0000000000000000000000 XMM03=7500736461657268742e70756f726763 XMM04=00000000000000000000000000000002 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=703e2d73004c414954494e495f544e45 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000