ffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 17:58:57 executing program 5: openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011100)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5f5, 0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x8, 0x1) fcntl$setlease(r2, 0x400, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x8, 0x6, &(0x7f0000001340)=[{&(0x7f0000000240)="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", 0x1000, 0x5}, {&(0x7f00000000c0)='j4', 0x2, 0x5}, {&(0x7f0000000140)="30fb65196aeb85e9062166ff34744aa882970d181f636871f2f395aec06628ec9d648cc40993ef3e3e7e0c0d375413789933d3b46e72e8a27dc546ab6ecd94dc5cb232848359ca378305838ade14071ab5fe6ba15431195ca2b2a7fc92ba", 0x5e, 0x81}, {&(0x7f00000001c0)="38c51c0d48ddd31268ea13766b9a3fc9fe9f", 0x12, 0x5}, {&(0x7f0000001240)="5735bc6974e91ab33c89b5a68b349779bf1e747ed9a21f8a5d1f7a4bcbbad132bbea72cc7e2c08e1f48d396d1823af3d390999d819b805ae1a", 0x39, 0x20000000}, {&(0x7f0000001280)="f489b3e8667429a091ff50b891f547d55b39b237f140366028c87ce4f446db3d83b60090f65f90c5a5f893ba0f3f09b012157a3eac96246bea8f2f8ad56f43b79671636ebf79a2153f666f44363451813f98ce75769651089af7ac52816ca928c2f51073aa344ceecd0a3dd60b06c81dddee28d9f9bcc8279ab648de0abe32af48a13045911b5c8f039d5a366c23a436288e430031acd0e1605047e72968a97a2d2b31dd144a2e2789db2255ad55b305292b966f2687", 0xb6, 0xbc8a}], 0x10, &(0x7f0000001400)={[{@minixdf}, {@nouser_xattr}, {@stripe={'stripe', 0x3d, 0x7ff}}, {@delalloc}], [{@fsname={'fsname', 0x3d, '#]^]&'}}, {@uid_eq}, {@permit_directio}]}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000001540)) [ 1708.695514] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1708.697581] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 [ 1708.802857] ISOFS: Unable to identify CD-ROM format. [ 1708.814775] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1708.955740] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 17:59:11 executing program 4: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000480)={0x0, @loopback, 0x0, 0x3, 'lblcr\x00', 0x11, 0x80000000, 0x19}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000008c0)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000005c0)=""/168, &(0x7f0000000680)=0xa8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050006000040"], 0x24}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x1ff]}, 0x8, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0xd0}, {r0, 0x51a}], 0x2, &(0x7f00000002c0), &(0x7f0000000300)={[0x94b]}, 0x8) syncfs(r1) add_key(0x0, 0x0, &(0x7f0000000000)="89", 0x1, 0xfffffffffffffffb) r5 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000", 0xb9}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="004247eb764fcc8bb17587f0e2f9626d98090c7bd69183292e26e988e0b86a2a947ab104dc3bfbf458139cb505a275cb1f57f402edc6ea4c137ea90c24df7fc55649e57b61fcf6a98a5f1c2d1a550b3ee9c4d20578c4251300"/103]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r6 = dup(r5) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) 17:59:11 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 17:59:11 executing program 5: ioprio_set$pid(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) fork() r0 = open(&(0x7f0000000000)='./file0\x00', 0x18000, 0x43) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x57a, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x44011}, 0x8004) fork() 17:59:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x14, r4, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x44, r5, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}]}]}, 0x44}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 17:59:11 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xf, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce095132", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:59:11 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 17:59:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x6, 0x2e) ftruncate(0xffffffffffffffff, 0x1000003) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x13, r1, 0x0) syz_io_uring_complete(r2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1, 0x1}, 0x7ff) fcntl$dupfd(r0, 0x406, r0) r3 = socket$inet(0x2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) 17:59:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) [ 1723.211405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1723.219629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1723.230846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1723.239801] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1723.244421] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1723.245613] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 17:59:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 17:59:11 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 17:59:11 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xf, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce095132", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:59:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0) socket$netlink(0x10, 0x3, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1723.323636] isofs_fill_super: get root inode failed [ 1723.382684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1723.400805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 17:59:11 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x2082, 0x61) syz_open_dev$hidraw(&(0x7f0000000280), 0x80000001, 0x2cc101) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="000000000500"/28, @ANYBLOB, @ANYRES32, @ANYBLOB="000000000400"/25, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32]) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x60800) fallocate(0xffffffffffffffff, 0x0, 0x3, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r0) [ 1723.423529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1723.442751] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1723.443855] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 17:59:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000480)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x1a4098a6b4c09535, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xf88c) 17:59:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 17:59:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @mcast2, @private1, 0x0, 0x0, 0x3, 0x12d}}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002e00)={{}, r5, 0x6, @unused=[0x3, 0x0, 0x2, 0xfe], @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, r5, 0x0, @inherit={0x68, &(0x7f0000000340)={0x0, 0x4, 0x3b9e, 0x7fff, {0x22, 0x3c72, 0x2, 0x10000, 0x401}, [0x10001, 0x0, 0x6, 0x7fff]}}, @subvolid=0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) 17:59:26 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xf, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce095132", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:59:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000540)=[{&(0x7f00000018c0)=""/31, 0x1f}], 0x1, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10, 0x1000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000100)=""/209, 0xd1}) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20600) r5 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1f, 0x7f, 0x101, 0x20, 0x6, r5}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000001980)={'\x00', 0x8d0, 0x8d75, 0x400, 0x100000000, 0x92b, r5}) syz_open_procfs(r5, &(0x7f00000002c0)='net/arp\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x8) 17:59:26 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 17:59:26 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 17:59:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000001240)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x2}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r0, 0x80000001) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0xb9, 0x0, 0xff, 0x0, 0x0, 0x10281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x10000, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x3ff, 0x0, 0xffffffff, 0x0, 0x100000001}, 0x0, 0x7, 0xffffffffffffffff, 0x8) keyctl$assume_authority(0x10, r0) unshare(0x6a050580) fork() keyctl$invalidate(0x15, 0x0) r3 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000280)="58e7a9ca49a0b6bf5370a27bb46dcd69aebaa3af9d499cd106f0c5fec7756406a4be05d2bedc21ef9e1a0115527b92df16f02cdceae73c351e8d576a7fec157d3c531b0fd31f82ad1164803df67d32edba414bdb84be2079f1f89f379e1e2fd0343c4277b5f0ecebadbea82edb73785b60", 0x71, r0) keyctl$set_timeout(0xf, r3, 0x9) keyctl$get_security(0x11, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, r2, 0x15) ptrace(0x8, 0x0) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, &(0x7f0000001180)=[{&(0x7f0000001140)=""/21, 0x15}], 0x1, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r3) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x9) fallocate(r4, 0x0, 0x0, 0x8800000) waitid(0x2, 0x0, &(0x7f0000000080), 0x6000000d, 0x0) [ 1737.643550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1737.668928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1737.692661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1737.698524] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1737.700533] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 [ 1737.709500] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 17:59:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 17:59:26 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x40081271) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="04cde257b3d61ecd2d081f7fddce4767a48d52778ab7e6d041e48cf0c241d88ebb825a9d35b8914053fc64c5e6a16a973f58f8aa3a07e6016f1eb7c7ad1bd3d3060100922f", 0x45, 0x1}, {&(0x7f0000000100)="43e72a8dbf9257072e8bd52e9ca0269bf0140eeb9f27197e9660ae68828261fd98882a42207cafbce349269fc630dd249b1bd4bd79f54ec625b5eec446fe7b6598a31b8639332c04184f0694d97ea41c8b6679b0f029edadec3ac90499b512c302d29ecec97a71f1e7706accffe5b236b1a4dcb244db0cdf3b414705d3018f2f166e70d710e0dd1938152f3381193fd3e19b95fd0fa571b884803d416e333312c70345e6a536477981d104f179e421029080", 0xb2, 0x9}], 0x80000, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}], [{@hash}, {@measure}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000280)) 17:59:26 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000580)='\xcc\x00', 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000340), 0x4, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000004c0)=[r0, r0, r0, r1, r0, r0, r2], 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in=@remote, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000900)) fchown(r0, 0x0, r3) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x200) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), &(0x7f0000000180)) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000500)={0x0, 0xfb, 0x40, 0x6, 0x2, "3ea3b8f27da610f746d52217919f6cbb", "385b235f7f51dd578316e8b1e640c83efd07735c019514b2c670e6562a34e29f5c59e8f0d22d7a21529e54"}, 0x40, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="646520b504b5f2fb4990b8756c216c6c6f632c00"]) [ 1737.766415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 17:59:26 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 17:59:26 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:59:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) [ 1737.856686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 17:59:26 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, 0x0, r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 17:59:26 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x38, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffe) faccessat2(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 1737.876794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1737.894949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1737.911748] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1737.913788] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 17:59:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 17:59:26 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x24000000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x44003) bind$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffa, 0x2}, 0xe) inotify_init1(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 17:59:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) r4 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) mq_timedsend(r4, &(0x7f0000001e00)="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", 0x1000, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10041, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x7f, "9656c75f04ba4d"}) lseek(r1, 0x0, 0x2) r8 = timerfd_create(0x7, 0x80800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000002e00)={r7, 0x0, "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", "23be6336cd36609ae6d91b9b63dd1bab54b44f5a8c3c3cc15ac69edc53616fea8af183cec438d3922e725abebcfda9154e5a02799eeb5c817585ff16540029f8707f3f42b18f4cd7b3e961f2d32fab7f2239aeada5c5855d07e384947722d9f6fca3fe227c44058733873ba6aa6e4565ad571a7402324fd5208570652c2e9ddb093f475f84897bc27671adc0b1592c8b936dcdaca00854dbc78b9506c117e3f8acc13c04d5324bd82c6f584701208eff60bf819c2af7db26fac140392e4ebed7927b15cce8a62f507d36c644e4f3a1f1627062df0a9931541c32ea862e655f614795cc4a21dccb87e6c51b730ce980c4eca01c4ad6135a75f069bb1f7a18caa43d2a4e15b5f748598028a2dfa53028a0a90f679b93c76a2d0dd8f0713e396f3392b65c30e9a5ea13862403288103f830d13404dd359dc3da3b2292fa88bd78d7781b7bd507cf27f4bce272f8d0b6e8ac8bcd5836b78faaa614ec66afb6d1015ab4b5ee8c3241db3043ee16e2ad2a62bab661abd96e15c4f16b6cba2bfa3ffc18efd45d5f295e2db5b5381e80f34ad8de07411be8ef9e041e8956eba6789f84f568521a0b0db5ec62e51c530122f97e7d240aa37bd5922891e4925d5c78c0c8eef262c2b28f6ea39eec130d56bca8343513df532c510f48c173222505763dbad3027ac3b9da7b5f301efce51cb096a072080eb128a3136d3ca5338931b90bedc45428aa5456ee4c632578e29548e5d256e0b6d9351e15b081ea9b87f54716b9b16c22082a99dcd3aa42ef5b368fc2c9de46450fa8ee85a34bef2789755c4c05eb63c95575ecd82a68da79fd646b80609303b66b0009e3f4dac0909abad801cf0b6bef04256d182a917f3087ca8dd27d550f040f7ac96e0235f7e1cb69431c14ecab3a30701241a8f364c62a7628a3544a72f14efc4b85dfa33bb54e73801c43485d4783cc783b76b807ea48bed5241ea72f16ffbfd19213f3466ab1ca24fcef7b20222c1fbfdb195c19203908cabe2676460cd6c5e4de44c3235d7939845a843e745a3fd7b5ccd1bf3221e2d75ea2c94e40d02663c22f5726bbb403a633948f4c344512875befec99acfe7a8b51470a4d83d5c4d54c3115472466b111e306bc65d1f583c1db4e652eb7b1df6ce8e9081b22cf0213c3cb31efdc2c768a9bee24107412903184b90c89100a9a955edd11f28b80142c88474d1ad29698777c35259ebd51cb20f7513c7503637040eb01a2781bd28b97edd846386a70a2c503fc060f0c6b35f81fb382895afb0a4d6d3c4de621b018660dd51ce315f7c1b334a07acd65eec756cc72799c85aeae1f2969c9ce16b57e3b5c23e28ba46e9aff90d67ed35c1da23101acc256e25d4d5ef487b6a6ddccfc9a3584cc85c9d34b3347c6d6154ba46c00231293f9fb42dd6c845c388c7f8f432f76b9eb5a151dc75b76e39831a05bdc3319ae923c430eb6269fb211b357d7c1e8198480d12c0a5af34b1a36fdaf46875343efd0025a31bc6eba173bcf452521d5d0240fd951ddb656aaa3bc0b96e588dd8f22fb4fecc14927203b612d1e253b3344f1f6b2bc9a3c54a04ca1651a36d56a1bd5ab7393b42be15c4f8c05559686ea36a8d327108b58b757a5b20e9b24fd2574c1828827c5a63188cddb4c551b14237ec2fe71b1e37067997328b1af7725053e373ef75c125b2c3395337d83d1eed039c04d3a2d20698621f97535be1adbeb5486b562bb2c3828d10d2c8ed76b986b9f04e2ba38aec6917b097362e10d3c0fdcdd77314cf44a73d79b10490799a0b88503b6cfaf4ab65e89c7a595d3035cbc6bec72f3445edc9c7f958ac7489f1aadc62da2d9a7f4d9da228f2d32d683f680c333e099f1651224b171907d09860b6c3187b2f35fd46b41c83e56b02a85fdd6a2a1e441fa34b515f874f1fddbbc494a0ce649b703ef687cbbaf88957231ac9622318ba2b036258d9cab99253bdf0b219c301cd0d944c60ee719b55efad95862389bd68bd8f0f841a05fc1d4dd9d38c1f0a5b05fb59e4f411fadde4f5fe54c98dd8a4c0f7c4c79cf45ab65b331c3a3ae4c8c52108df58ad8615833f0cf4ff2e5217635519d9d605587c372910749b2c9c49abf1fd25df23c24d71d39f90d64b81f228d3db543fb34cdc9ef9512f97349e4f9c18c280ea77e1452697637cef06c2bff9f3b7d5d69dfc75396bb4b513eb9df4d771761df5d6c73fe68e6e4ebd11c5989838536f453cd61d9360afed31e2c0590b9a96d3d995aea8887db2176872f7fc581ae363d40ef9d01cad5406db473908efcf95fc18f2bf891a69258b7f062f99f238dc5b916072ecc63df6c331ac61ba303b7ad0a2a71a7d3a8496cc3324e106c33770296b2802623e9fa831bae2987477527688f46a3e45d6a57b9667bc7e3ebf59c20fec5707d80dafd759a19918ad43c09aab8a01a1be71180e9062ebf83f8ffe5c5b9d6e728ee5e89875539288df49d46ddf654b8fa3ad10db6056f268a4723e6e5788e7a09002473540d31e27a1e933e2026aa95a7f67a9e0c38feb28123f01d9f843adb1347d0ec47259f292d7939cc5ce7e38ad83d8855d6273d924094af334399072f7a9f8c40527d5670203c43bc33fc85ced7d53b17183be2fb097cc1069db7b171f6fbd28e75c12e0c33359530f9ec9bcab743979ed89d291f60028140583b5d0fc18258ee317365b78f9b78ca829e9438975bfe3a6363b4ddfafb3df41dbf2fdbe33850b2d0773064d5c35f934b6dd77bbe7cd4137f81f251cb6b896f5c1da43f17d65b461403b088ae2da2f88c897b801f05154d2e21313cc31577ed40cf463cc5b50c4d5ff427caf09fc8d92a8cc8be00dd4c5862e0b872c464807636d637f517bc0fafabeec65fcc3aa6d98534baae28e74f8359a1a60f6cc72d108b9af5f0400da9ab62b0e74b3ed4347e13295c9c3447389f3c390bc0a063cad76abd3c6b4d4acf909f89f1022dffb3819036d52c0798d8864eb6357692ae79f8ff2f315398c66a4e118b85c7f4ca09e9144536c5c35f72095d652d590bd371138d62cc631d4efee3f01756086cd81ae21fb6a8d00e29693dd90290bf401320aebed56cf512cd66fd0e828fb96db3a5aa32b61a1a646a13722857a7b02a577296d08c5d757c8952148133f582dfc765e830ec499dd0bd68b4fd0565a927d2ba68b2a290a94d83e5828148e84cdfc6cd24f76a40ee106eff7810924338362317ca6fdd0ceee2ead7d074110940b9398be8067c791c528113c91626b6aa4bc1d7c7d74aa5382e02e4c41e733331e3a9d1d7c92bb411d7528e93b1906f6a433db9fa37ea11858a92d0c0f5766298b53da9a8cdbe7537a61f5885950eaf7b4950e699fa1fb1df2c2b0c2d947f98b09426ed9a1eaac4d849126577870f3e07eae4e8a96d4e204a0d934cb92ffc8f5bd245a0cefa71eda4a0a6a4d50a2daa979d1b0b5d7c27e523709b6abbba3073b0fb84cf54ab43a443cb4ee57e39f07d99362eb94362e327111536f989335664dbe6bf876b826b5615b813272bb1aa5256856007bd248efb0a1f28ac992763bcf5459f9c3c0747db28054cbd48e53626e2481dbbeae4274624266021d0f040f619fc96b662374758cb6bb6fe57516662d4ac43a8e806aabb90f2aec728ccc6ae64d7eeba645053cbc43d435013e64faff6475b9611a710687ac7e49fee88d95b5f0a0b16e486ffa81163d7eb33a0aee826fc35b4e07e05b48cf3b5cf03745c6d7cb6ef296bcdb4cdd9c77bae66cf3b8e0577c2377834149a05e6f3bdc8276e5a7cdb1e62fbd3caea5491463389f33bbd2fbe9d1c0a8b37dc3bef6f36435efb30d797519d9c945253edbb4922b872efa6065f747cce83dc963c0a359cf70abeb872644018cd8899a8eb70874056ef61b070ae57d214ce4ece7464b7f6174208b3bf2e9f432774cc5f0a348965859cb722fd08664d5b12743cedf66c4acbca75f09395eec8eda1ff41aa8e3ad2492898f020706f2c87ee95bdd554bdca7f8a47e9419b112cd9d450488c4e5a62c52e3270d63792576d06e1fc184823c6d15cce9c8fbd14808e7ce8fe78e9c75cb080cc12918221d686c192ed8bfc3ba75f44aaeea260881eba5cf721070e077ee52a2a06b93d8eb601b673ecfbdbab40cdd9036c72af489a00a4e826715774866f5997d99eb995199ae5e45075e7620628ff56d3736d6745eac8006e835b48f5cc510e7779277dea97bb45327f18c876b7370b9f3b2d4c0e9b7848b5e04e6fad240648c5a3574cea851ca8e3b67fbd416f537ebc82b54e26cd86bbf36f1a088c0145eca050db39fdc04e59efcfa69f4520b610681d81d8bbf99fb7b7083bdceb83bc480f27c24f312bd1c91057e188c306a08c73d7dff8daaff244aa75e97ce97c29dd9d6ea2a3cf5067d05a68b4fbf48928eb27b675d3ce5eb4e2090165056bab0782b1e5ad79ff64b5c20c24d80a974df077e50f2839840dce1a5e5941fa92f9c6a77e9ae608702565188814b5d62f4aacd88fdda8f8f2065481372a3f2cbf261c88f9b3cd465a41100c63ed55f7620f49b4f6e4a9d0799f998ef6b34cd295a7d7e77cd0a92147c4f07d8d61382a4b6928bf8a2e6851e9b84c891ef9fbc72e46f2c61017fd64c543af134d9bd30c37d59261c5a1c2ba48bd5007fd75fcb24635aa10ad7b20d258b10463f6e3de514bebfd75c437a278d69113a246ab18c857b70f5d16c792fea63ed536f4c23ed8d3f54174ba7367db1cb9c479b481de21dfb26850fd212fb20da8fdc1b90e2de0942b85dc9ccb0de5ca431dc7da8ff11a8191414be8301cc32fe1d2f1d0ff6eafd13621f71646d37566a064f76d9b5fab53c0e5e197567e54c172a38befb2170c791d40afe819ac12e24575ada4d76f179b5e7c1daec66fff65f9e8519a804d05fd1bf5b918b7c74dd5d62a0f844cb4b2a7e3db5c4579067f573b328719f2eef431da51c58add59c7dba4bc12849b68b71075932e78c7bc1f53a02b3885faa53b9407495e38c05f9765692cd584a5105a7c906c6cff7e36db542ea2a07ce4d703db468b7e841ae266bd21b172e6512bd31e9cf974efecb58d1092d645215f738f808fc2af984314a1991f868b164331ebfcd93e071811c052603961a82f333e2091323125d3b26f557f9364f130d316bae2da18252d78050aa6199d0c96812e363b37a1aa696a08d7bccf998af90cdb59328d7e301ed99604a03869744e4e2322b2f44d59b8774e5804b3b74e01d92f0089a3fade1d8bbc7c624a15cf1559d263a1c449a4d3249a3e5d19dbf153ff85b8b1059ea69fc530c7b28b9936335d564cff985ac16b6db38a8d255590e15bed81eef881cf6070e6caed40bd452639719802bc4e220c20c0ae26a8216363c5266462b19043120606bad976758fc3da9c7369c5"}) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r1, 0x0, 0x200f5ef, 0x0) 17:59:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100), 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) r3 = fsopen(&(0x7f00000004c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000640)='.\\\xf0.,^\x00', &(0x7f0000000680), 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='?', 0x1) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r2, 0x6) syz_emit_ethernet(0x103, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd9d85ba1281b7e62844b62af59dea0d41a8bf85975eb4f9bdf14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e603a241d6ef082d57190e1d734636c11a41c1c545655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fc9c53d63e7dbf8b94e47c3f13463de034dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69"], &(0x7f0000000180)={0x0, 0x2, [0x7e7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file1\x00') unshare(0x4a060400) 17:59:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0f00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 17:59:44 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:59:44 executing program 5: lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:hald_mac_exec_t:s0\x00', 0x25, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x2, &(0x7f00000007c0)=[{&(0x7f0000000700), 0x0, 0xec}, {&(0x7f0000000740)='_', 0x1, 0x71ef}], 0x0, &(0x7f0000000800)={[{@nodots}, {@fat=@uid={'uid', 0x3d, 0xee01}}]}) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, 0x0) 17:59:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, 0x0, 0x0) 17:59:44 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, 0x0, r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 17:59:44 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x1}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) sendto$packet(r3, 0x0, 0xfffa, 0x20000040, &(0x7f0000000000)={0x11, 0x4305, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 17:59:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x8) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) [ 1756.255214] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1756.268429] FAT-fs (loop5): bogus number of reserved sectors [ 1756.269727] FAT-fs (loop5): Can't find a valid FAT filesystem 17:59:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1000000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1756.287484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1756.300350] SELinux: Context system_u:object_r:hald_mac_exec_t:s0 is not valid (left unmapped). [ 1756.311377] FAT-fs (loop5): bogus number of reserved sectors [ 1756.312829] FAT-fs (loop5): Can't find a valid FAT filesystem 17:59:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, 0x0, 0x0) [ 1756.331526] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1756.333562] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 17:59:44 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, 0x0, r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 1756.368392] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 17:59:44 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:59:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002bc0)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f00000016c0)=ANY=[@ANYBLOB="34000000750000290000148a50e521ef16394bc46ed41cf1b9a23445bdca8d33313707b6b37af614610d680a0000000000000000"], 0x34) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x42}}, './file0\x00'}) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x10, 0x3, 0x8}}}, 0x18) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) 17:59:44 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e3, &(0x7f0000000580)=0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) write$rfkill(r3, &(0x7f0000000140)={0x5, 0x6, 0x1, 0x1}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x4}, 0x6) io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0}, 0x0, 0x0]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 17:59:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, 0x0, 0x0) [ 1756.502541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1756.548003] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1756.550026] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1756.608291] audit: type=1400 audit(1703181585.050:255): avc: denied { map } for pid=11060 comm="syz-executor.2" path="pipe:[44790]" dev="pipefs" ino=44790 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 1756.653148] serio: Serial port tty25 [ 1756.727148] serio: Serial port tty25 [ 1758.378026] Bluetooth: hci7: command 0x0405 tx timeout 18:00:02 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:00:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x80) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4d1eae9f9df6"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) syz_io_uring_setup(0x4751, &(0x7f00000017c0)={0x0, 0x45b1, 0x0, 0x0, 0x290, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000001840), &(0x7f0000001880)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r4, 0x10000000) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 18:00:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@private0, @loopback, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400032, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x800}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'virt_wifi0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@private0, @loopback, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400032, r6}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') fsetxattr$trusted_overlay_opaque(r5, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x3) readv(r7, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) sendmsg$inet6(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="15e5c0d87e7449b299bc4ab6c14e8eda77566ebdba39020fda39dd85122c3d151f387886bb18d884d45991badc1e8d7727bf54ea44b45808a7f4e0a3c6794f63ad691fea7f80b043c9d5a69a7675b0518831fa02df5399a46f143afbcb196879c858b66973d1eae05bc6", 0x6a}, {&(0x7f0000000140)="90fc2590ef238d0d8fc790e2b45576ae114f788559483a2c76e51c444d81ec112d11f2a613f0ad2892f0dc81e847a5353da8111dd687aecbbd6f60e70e7e784963cc63350a09c36cd7ed9b03bfba1fed27e6c86b6e44b534985992c2c10c95c89839217a5119210c7be16f028ea29ad1f2067cddf275ff718aea365f159f0fa2b666daabedb54436e9ad3efa298cede7cee4b9", 0x93}, {&(0x7f0000000200)="cb6232528cd2274a9aa872dd60c2a316097cd3d0dc9f442b4c52f2310efdd7708bb6c43a76d529ff171f5a4194421a0b2fd9960b7214b277ab058e6577e2670ad96393669160bedad40d351e1cadbb392150ca0a011d2492dba06e2a4b350ab295092f60750c0706423d59d9afaf13fe98eb67ea8734dd4eb60d46d6bc6402c7ca2c188aa1249b4ff07bc4d857b4163d048645aab8dee18f80c3", 0x9a}], 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=r7, @ANYRES32=r3, @ANYBLOB="00000000242e000000b152aaccf0b70000000029000000320000ecfb000000000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x260}, 0x4008090) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) r8 = accept(r2, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) recvfrom$inet6(r8, &(0x7f0000000640)=""/21, 0x15, 0x40, 0x0, 0x0) 18:00:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 18:00:02 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x14) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={0x24, @none={0x0, 0xffff}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="040000000000000000fffffffffffffff70000000000000034ea6fb0590448d24cb9225ff0882d8eda60fb61a779f2d5"]) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @local}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = dup2(r1, r2) accept4$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)={'U-', 0x1f}, 0x16, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r4, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="200000000eab000000001000b40000030000000063bd01000100e9de7e31bdf4e60e0000ca779684bdfdc206ff0554a3982d024299ff"], &(0x7f0000000140), 0x0) 18:00:02 executing program 4: syz_emit_ethernet(0x56, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96363f", 0x20, 0x2c, 0x0, @private2, @mcast2, {[@dstopts={0x88, 0x1, '\x00', [@jumbo, @enc_lim]}], @mlv2_report}}}}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00050fddba0a59a01c5774180719197700"/32], 0x20) 18:00:02 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:00:02 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1774.208538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1774.284497] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1774.286544] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1774.287628] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1774.289371] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:00:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 18:00:02 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:00:02 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000002161083010d00010003c8280000ff000000"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:00:02 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1774.513355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1774.561770] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1774.563751] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1774.564844] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1774.566590] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:00:03 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200000, 0x61) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000080)=""/166, 0xa6, 0x1ff, 0x2}) finit_module(r1, 0x0, 0x0) stat(0x0, 0x0) [ 1774.648852] audit: type=1400 audit(1703181603.091:256): avc: denied { module_load } for pid=11119 comm="syz-executor.2" path="/syz-executor.2" dev="sda" ino=15936 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 [ 1774.678167] Module has invalid ELF structures [ 1774.709114] Module has invalid ELF structures 18:00:20 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x14) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={0x24, @none={0x0, 0xffff}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="040000000000000000fffffffffffffff70000000000000034ea6fb0590448d24cb9225ff0882d8eda60fb61a779f2d5"]) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @local}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = dup2(r1, r2) accept4$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)={'U-', 0x1f}, 0x16, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r4, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="200000000eab000000001000b40000030000000063bd01000100e9de7e31bdf4e60e0000ca779684bdfdc206ff0554a3982d024299ff"], &(0x7f0000000140), 0x0) 18:00:20 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3a00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:00:20 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x103) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="ddab82767945917c8ef3f5746d491210d833b106c3b096db35ebf09b6462e50b2b8eeb7aee50a6985ddf758b8742e2902f8019cf036e7487a36e06f264a072e7302aabf620d1f1648240b03068de42f99aa07f3421d6085fabf737fc80322ea9d302704a0cbf904db23225acdbfef5115d2e6eb74068796e15571d147e0a5ee081510e087b17fdf56a880289eeec6f4c848969", 0x93, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x8c, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20008841) r3 = openat(r1, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x100000001) 18:00:20 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:00:20 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:00:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 18:00:20 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) io_setup(0x73, &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000100)='./file1\x00') perf_event_open(0x0, 0x0, 0x5, r2, 0x0) io_destroy(r1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1274, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x7, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000280)="e2f170f5188339eeed3a54223b3b568a5f4111", 0x13, 0x4}, {&(0x7f0000000440)="b71fea32231c535e1d2f910d46cee71480a70714dc6c077586f4c42188190c5b5d0cff0c2415ed1427c5259ef9c087fafa6a54728292d08ed3658448b3b5f9820d756bb4229d729dab0d087376322e67efa464d31e5234ac466e4a16e8fe410c4ab3b5992c583528c53a7ffacae9053c91fae8f7128ea519c6ecf729c19d12a276d744cd913f407b50709066c2b43789e3dcc50364808c711bfded1687307f2a9db1f42b99971c538f7216c2f553a944454c65030e241ed0c5533a876ac9a8fda6e489803527bd403dd003749c84e5fb5abaf121b8e369d34db00ee0ab6dc128594c5d11daa73356c81c119ee4aa3bedb122ad378dcab1b7681ca0a0ee4312af2d543b25ce9b19432684dda48e62b3ccb0d9f5a98e3e07a679a29b16df81510f9f8816f2b62c55037dc348601a72afb6cf9ed1d9efa21ab5f1bb9c473b81b3de75a076026c00d9a3a6e798fe0bb86a1a3bf8026dd5d0bb9ce826f3846b6db730cac7357258e22bd8e67a1a8d1db6ae4ed97466f0529fda56407915933679a4afcefb6e5f02f42a1b100f60ea0ca214031e7a09fb59ccf70c383848c5b0e1abb9baf75392b012ea49da32b651694015d3c3c9021787b03c1c314e3b028344e12c325ee1d86d6fc762ea37a5bb66b06d90652556a6bf594b1c14db65742320e424519b6c44cc84d321ce39595ff1d92de5c09a5bfe720b1fee861b156ef8e229b3991490f479f986b9bd3c15114a5d758fad4a113140d32881c9615d3995e8da9ccee458a66547d55a9906fcf550132a5b8672fc3ea452c4042323a82bc02d304c68dcd9c4ecd1948aab0a3fd53529bc0801b0dbcd8ccb42eb45bdea2b7587b3213a262a268a292ed8cb79343953528137d8d1db11de5f57b2cdab9ca3a629110b5ad8808a053fb4021b65170f53bd739e19226ef1f1d283fe819557149f05252178892e2c99cb6aa21941acbff7df499a5d1fca71e4e5be30b825499f50aa4d5f8678632f70bdd80157b04806ec898072261b56f36713888d4ee26166597953e368aaf2e8e500d49b8ca54128295ba9c700179ed0c458f6ef1ebb4fe08f7104ca96b5c6f4958f5eaf619cdd0bc1a2276e00fe189e1897ca4b0df8c47fdbf25b1c7437ca4659fd136552ccd6f9be7ae43456c0051089ce1b220aa8e6a862113b83a8e383d7e5d7a88d2034c18cd6fc1be26e1513678e9e89fca74baa2d1948d8ea5c3cd6a969a60f686f2361798d285363fb30cfb96592cfa87b678f13baa46221c0eec4923e3363d576150bb61556e0e1aa2cb26f2d20f5a5bdb7ac5391079be83e9025daf1cb7629e6199463cc092060197bf703fc546752c80cc6172caf0f13629292235310bda5aad3b26655fef826d4ec69b5cf4b13197b6c437f7f90384e6e957a59e8922f999cafcd6d086d7d715d71a54cb5dc0c0dd4d56af109d41464bf54a94ee2aea2d022d50db921a444c89499cd4ea4d2ac90fd9d9f614fa3ce59cde1d7860de0f9b483b2b32a304883c141cadd8a9fa41a2840b741fa19a39f35cfc204d1955defe95c6407d88290f6fc1e03e1f6e204c62fa835a3ba6e00b0b4f7fe098c6015574739bc5cf58b8ed886346d6e177d9127d8c9cc5cf66167c4224754d634013aec69ae785ce027e500e893bc2c68e4033886f81e41cce446a249bd84f09f41c1aba1b0fc8de27c4d0f9d991a5db2a533b6bbe6d04409ea802b5b8644a2812c2b2d33cbfc46196aade7e7e53ea47082abc38b5047765990670a53ff54776ef5834d2f7e937c973cf22e5271dc866c2b6b91b02ff4c46d732e8ff6fa8c9d3f181f7f264e809462d1526f71848ac58e34a0df5af56b745e636e04ca40f7c93d0b7dd4034146a38bead016f57524d53f99966e4897e4180da4832bec6b34b3c38b743fa6cd82df6b55c26aa04c6d92c92a8b4c0ea5ac449649865b8db1e4f8778641b428cc8541645d956eb0b30f9d22242a61653ffd3c37e8e6ab4cbdffb3c71491f779a59fc51b71459c1be24d655f031d5df7119520bff16269a8cc169312408d9058bbbaaa18c9ff29115ed0eb7f3dcabd52ec5b29a62b55386cd96fc4c758b59b26de484ad2323ee3278b56fe0714fcd4a89a5b1001becdcea7d6a9d1e3a4e68039a05cfd8caf7148b47fb2c4a58eeb290ae72be60d9ed8da6de297b77737a19477cac3579176948fa871f28f9a93807147331497c111e065d20316ad189ef2458a2da8d2c95c5c95d8b7aaad99891e964f7085c5221b231f848aef7dbdd2c92f0bf86452217a21f4895d1181689f9881137c3773e93f69272af4f6bc7477cc5c6ee3b365663a8d4eef277e339c4a32d1b1c56be690082cef3c918a95ab031ddfe417f3286c7f6ba8ed179b8a536b2fb93831e799dfbe107b6cdde71ffabcf307b95c196da24fe85e87acae0d751607bd388d5e74191879b42010685d4c949511f70f4950b43503db6cd947874158808d65f33b3fab3af6602b7b628aff4101658220f63c37e6beb562630312b6e6dc6c7957e229e1d352ba05386f5205663a8cd907750e635bad75738840495dabee5d7b480fcc4111a2ef16ed1374bcc6c0b33d44792e026ff8c84b10a88730c3627d96d1a402633166af952c2f18a31cd74e15e2ec1c021549769161115ca92863795effbcd2c54f0917ef15fb5099881ebecf941199443bafdaabb4b984f115572652da5811c9d53e588fe6f1bc3e1a1e3512f769f6d1611e21646167ca2f41716677c83000ccf0ab571421ca5e15c7abd686ba1152eea229b0c8da6fb049860901ac65a1afb629aa76106ca42693b7ca2f89becfc3d1ae872a682fae8a8177f5fa51f44b81389be14f986c8d0f9cd24ff93205b956b0f1d7114378e0c18d1c9ef8771841b52e9a50678279f71553447734283301fbf2e1fc6419d624ee8fd0248c7934311c39b893194fe34c07a11247153cc392e2fe7ff5ca7a6ceb1b88b99a694e99557beccf3ea09ef4e28b2c16449b1ef3ce30b1d5791b2e47f1d4a78e45e23541c8fabadbf0b759281989934bbcda4422574d4859deb289e2a495e419fa66f1e32bd2ab25a181dec262d223e35be254fbad226e256b161039948a455cb06da697bd8c11f580a3ac54de249cf8717c5edc1b527beee534b525a332fead48bf52bd2dfa9257c953a4be97e42815e378e560cb07ea4478999e8e9f4170c5887cf5f4a560cbfd9ec4bcf2c5598e9f56d912441cb801a443ce6733f6e17acb8b882b1a9f9815c16c43ef2a98db7e802358559185e40516f9d71430866d2b5a01b0c287a81b146c961c748133708325e11b9bc384e6513d9400f3976a8e60219fac0877033e1cf5e02045dcf7eb5c891e1d8a45d58d61ab85a004a20698720983bef2001cb003048f7f549e9af73be11b1ee9aa4f2c556851643f9a71763482a8382353ee995feb49f59f9d56615ba4cd37ab6b112e42a3eeec92864a93958660f2b3f8fd1153d4d500433f5237a61cabc64f93b4c0a15b6b1105bdb1884cff72d07c1baee1a18506d449b0763cba1d6b185363577236413275085e4388fa7f3c35533d7194dc299c07808f4add5b8efb9b745eea76c1e91f032523bdf49aff05cea24245e9a8acfb58f031920ca826a112423c6c8d3a3e72351e5fdae1628882d0bef6403c0daf8d0944b9571924f6898b6e924a7aca9c96fe4b220cb4e778203310e744bc82338d2c6d81a60660b01bd2b2c1ceb32ff4072399269e8407fb829635cbfb0327b2120819fbb75addea3eacf1f4fc0f910068a955788d29c75f6e95531ac689e5e982a0478ca113887c97e4fcb536ed1954b5c3618bb8df1af60e1cd100e6fefe80448de1741276aada217ee58229afe6ccf004483514fac6ecfee007188d6f9b9212c43a1e4745d309d9b7f2d369f73b803790b7ee465a56b4835dfc7f360298d7c311376b30676b55619031005fe0ba4740ad41141a903a0cfca13332ebfc6b428ccc58044759ed0c7c64aabd94c1d88de1b17d936490b9f1e5f3d07036fee5039117f3b54303f74500673089fd2b8085492b97e4fac7dfad737f7f14f21678686052f1107c9a533e5232782ca04560c502f460646221d2ec3846ec515ae3759c37f64e31021d052b54d727bbb0001a20892738a069e2b4de9a01339a0f107b271cdd2b89e8104fa97b0a58d70118c679ea7538b21a02342829a05cfff352e2f974fba05876156839139861a78d48a98321482fe80d857f2e98147f02322db3764c44a2e22c4fdbe20be88b5645e3d7edf6525eab947bc77b42fd0ae16cc8e38475d72d0d50a2ff24ec2ec80dad78a686c4559881fec6edcc4715892e11b2b48f4883ec934cc1ade6d24c34e7f28d57d754918a098c945860dcf87f599f3646de622a62f4d01fad2509385727e36d3f18799a75373d3e82337b53a4a21eda541d8dc9bbe2c25656da48e7de6a8ab300986c8675ae05179a590cf474bd1648f25c1df325f3700b4873ff7b8359df9522e7d15555291364a588fc12ce68f7beb0a829cee090b98dd93e6909937d15d9ad12266700373ed0886fdc8bf19c94834c54a657f7dfb97bb250fbdb622bb32346ea1d0e223fdd7e11ebd048645dabb5fabc8c3a44e642ea6fbdda8a087c11c42d1c1fa1bc2f0cf3ae4a775e0352e02acd5a8e3ede00bf1df75f603eb240ce861c9948d763e5ec6b980d40be2fae0cacf8ea13a5caaaf8a8a00e4a2d98b2ddf77fa59391b8008d12adacc7da64c2578d1f6a9c8eb0d14e609e3217cecce951dab77e6e1919a94f26d4318205b88d2a7b440329b005a59ea993e4c4ac530482d82294cbceded573fd63527c7c19c966f6f68c64c48bbd07f22316bdb7b2097eeed6d30e9b87898329fc2d67cfebba57c598b4fec50b992c0aaaa5ef2d9ccc937843f9d3c1b3db57993b4dbde91d85948d420d6517787cd2920edaa154b891e2f4494e4806bb59018b68eb97e82cbc0e28bf7ee16b3f245ce3a965c3f803145dc6d684e3c4dbadc9f6c909bf0d24188d8deb49fa4a2ba53f5b9d2a54cf35046aa7a3b7cfc6f0f803f34620ffbc3ea693b17f9194e82fd9fb55a4aca6a266bdf7b5301a33428dd82f77d63923ca2fcae0916ecbe93673e55069f5b9955230a9a52f7b15bcfb3a454d16dce02f22af39b2345e2d569c27694b4e4bc0604a136505d0010959c132036c8c75dbf94edb65b737676b18b7622a9621e3369eb1640c56bdce4a1eeece18526052ff0f3d11513fc5cd39fe709057a8314f0566bef7ce2797dd124e74fc48d7ae3e25f894cfbaa6e896d1c38ea47532ae7383359b53a8399425ae94dac57d936ceb1bcf1612cedad45167416df92b6449fe67661a410b51311091d436945289016ba5789260fbd20e6eff53c454943ba2343312528b3af23aa012b1fa826976c8cb79b5466cca87b6fb490fc6a5aa73b64442fc61e7f1c9da9b9d9fb7280d570c4175f50aff1172f172bc557828d0c39e35b1c32b46418f0dad8d6da66580d9ffb46c1798a411d4738909539afcf96244753c1fe2627ebfcecda604b98214d4e45c8b7f8ff91f12febb14af236c2aac0d9bc0089101b85d36dcfbfcd1b8f03d43ceaa100373bb9a76276ad9cfc01c78f09269cedc27622cf7443c521819df7e7c63d10b1e4c21496c9a07c2531a9bf26b9303d24c995292c97c61a0a16317739601f0004f65b99e30218a731f98cd70b783a9d3821f91bdb0a85f02c8f77d556076663652d498d0eae50e56dfd0c05d33a75bd3145ef474160742c106a0ac2e76f0f21c30d81fc7344705292977", 0x1000, 0x5}, {&(0x7f0000001e00)="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", 0x1000, 0x9}], 0x400, &(0x7f0000000340)={[{@fat=@check_normal}], [{@fowner_lt={'fowner<', r3}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x5106}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffe}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x200) 18:00:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES32, @ANYRES16=r1, @ANYRES64], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) [ 1792.468552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:00:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:00:20 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4600000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1792.522360] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1792.523774] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1792.524557] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1792.525791] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:00:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x10, 0x0, 0x1000002) r2 = dup3(r0, r1, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) accept4$inet(r2, 0x0, &(0x7f0000000040), 0x800) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) fallocate(r2, 0x1b, 0x5, 0x3) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r1, &(0x7f0000000580)=""/192, 0xc0, 0x2, &(0x7f0000000640)={0x2, 0x4e24, @remote}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000440)=""/208, 0xd0}], 0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xb4, 0x0, 0xff, 0x0, 0x0, 0x580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x47bf}, 0x0, 0x401, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$unix(r1, &(0x7f00000000c0), &(0x7f0000000200)=0x6e) shutdown(r0, 0x1) unshare(0x48020200) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 18:00:21 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 1792.591334] blktrace: Concurrent blktraces are not allowed on loop0 18:00:21 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, 0x0, 0x0) [ 1792.637756] FAT-fs (loop0): Unrecognized mount option "fowner<00000000000000016877" or missing value 18:00:21 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:00:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 1792.682691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1792.719386] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1792.720839] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1792.721529] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1792.722637] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:00:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)={0x11cc, 0x28, 0x2, 0x70bd26, 0x25dfdbfb, {0x1c}, [@nested={0xe8, 0x92, 0x0, 0x1, [@generic="9354ef54040534c1666929b68cb8c5165c960e8ab4903035db7bdff9cf447b3de0d5243c278c6e7f5e1c72bac3e8cf01116dcf70895118d4f0168bdd031c547b0ed9ede6a267210f300296910b378a2d10d8c2dcd2c98422a1041297c1bd681cda46f1196d8f848ac7c04b9b912ae624688703cb7510625b9bea3ae88c65d879353145647ae60c0736987dbc16ce9661b04a889e5694fd980dc965608a799f0dd6e39a602373b16ed93a540a78b21c12fe1ff8c69d1467bdac63ac7bea6cc5904b181d00426836fc24f725cf21bb4bbc2fbe905627b5e03d0cddcb731313253f778f1088"]}, @generic="d8fff82d9fc0070933493aa4c763f14981b4cd3fc5fa52367983b26202e7afc86522a698225ef50d5ab348b3043f0392c4e04079bbf18dac8da81f47b72dc7b8370e78", @typed={0x4}, @generic="ffa8a2c63adb08333e5b284a888b470d6bdb18c735f84ac2ce81a7e0d3bbc9ca81e2edebcb54b309808e835d641c62b9482799f227cf8526a72a33597190d750d8ef08b3cd8456cbd998ad9081ab22b3b40053f31e98063de33823f3b8079bb50df66ca5f1ce9b5618adca0df1ff577030e59cfbd67697a8ec8b1741a7aad5e01008180b40d919391a11a59028cf5206d564c9e38f4eaa804064351caff25cdedc355e33e41876bf07edb9d25bdd973d5bfe63774c196bf28b452bfe31d93805334f0c955bdf1b42b9d4f6faf151d73cd18be4176f49a66e5c09a7b659977fed54037c2312cdda409bce1a0c28ced66a0c82ada450dabd1c3c29e9325c5047731b21e5da4e0ed3feb701ab776329e5212a832871a2be255d06f2e991567770db615a301dcd69b9b02bf837339898d12661906da17cfb8a8e85608752a2e059438f6d63c07f964fe3431ae4f6424092e8bea7609205e55847e26476b0add526318ca2e7f65a40a8374079c92e2b4234ac8dd0d23e6f76f13d5b2a448ccb591c31b721fe0a8b5b005f693726a86c8ecf3d6714d38d1ba334b52354f931f5014887371ac844c99b56e118bd214cea45540d2865d3b4c8e1b083896d4e444cfbea6d20f55f86ebfe87452cdf50a3b04dec36242b16a9aac39dc7a5664fe167b6e12254ee8b2780a545cb6581d8c871a453aeace559a4d8f30be71e66422d204d0d4efa1c0b5e846b3e71c68102e82b89ef087b24552e15f2d637f001835f44a3efdf7460fcab2305c00c0cce570b38ef99cfd16eb5e366806df9b4bdbd17741254c2b40e1d15c1c4b3b7563d9795cafc399543e42805bab49aa0b7a6e56f6456889290606e9a6e0d1997a20aaefe3cf5e2920da5691deea40276b8e85a9ceaf50db68f7bbb9e93228071cbde88a9a82d136458501426d91082a8899c91983943dea72c6fc8a011726f0d4dd1e57add17b4fc888b0de6dcd0d939193cb1d95386fa6103940ac5836338c830547a3f43a36c1b52bdf136fc82a673d04321f84e862efd3e3c375782c3fcb8d84af678b0b9bcb6861ed11b762a25852f9b9e88bbce8230e40a183ebc4eb313d4d7399d0ab78a694d5e935778f05dcab7f27f34c2638e235887b9b00e30348f0be6fc74b11bdfc16a58776cf4ca741c16b384b1a2b7dceed24d92c8b141c109c7cecae5e64b7d604462b36ef07ee0efe13f70f4e6126f54b728bf76148db252a1631e49994978b215b8d21158936a20898b9c0575add144ed3dc23786a8552d6ff01cf335bb1c6f46fc1c38991db106d152302a8a0170a3d2bc1194bc28f4c5c36e92d3d8cc2c9c4f8c02cd866ab95172c48192500349419e70816826850719b3e36bdd1c88338831d5d3793c74a094f375e0469960d4233c50c77c91fde10fabf7ec8e861dc4951112ca52fbb779200dd27cec7af841f4d04f629bb7cc0c3e4350e889cd0fdbab95b8bfe1206dd23d80231c8599f524ab5eade47e5500368aaa07963082af9ab34e6f316374abf7daf65bc7632a923e33aff680f7113995da9eef7bf656f66688d32cf26abbbc28df7009fcea33f49a777d50c037d92eefa771e3289c7dd61bea790c57d468eac5a25325c262ec8929ec121264f51618a076efe196d4f40f7ca2b3a32029b8f4a209eb2c079105897dd07d6411ddfc4dd5074369e8fb27c497b487fac2cb4856c9ab6ca8def72a615ebdfdbe2770daa0025c5b21c2be87339656e6088d700c28fcbf020d7f55d2293ec203ed73669cbce66b737c1f8973adc52d735176a08c13a66bac3c8f26d165c5f104d9b2dcc56ac4c6f1f24d59032ff5c97fde353f6b9005257bf42a3b0fc870de409f7e424558360291fb6360280510766950e3e101fc7306cdcb00e4b6b0acd8ef85c6b4277064d024ecd4781de749c5518111f62237bfc5753c7736c4d9264b93ec6aafb96ed0fcb7a9a707a2be5de7d610a7392837f9a799f018ebff0cf9747233bd65049d79d0894f99747ecb4a94458a7e58c08a35b6297493398cd1fe4ff0456bd26a79fe69d8b612eedc82eac23330d3025cdc3db747b45dce0e96194edd4670d659faa86b0f8af27841a3147476cfcf7f0345c08be7f726386b58778393a940141962566baf1e00b511ee9984be1f260d844dc2b8bea3a7a98ae45097ea84e532c980d869da3e1068f3fe01157e07a739467fbc378b73859d5d4d70943901465cc472aab809e6d246c44350a2b41319bab7e6ed2a777241fcc0fd284dc730cc74dee30c1ffeba5987027b45beeabad8c26ba09171a3a1d84e715edb1a14b41cc8c32e7602165dc54545a084bc0352ce8a1c8bac501fd32e40fcc669bc94ba8ffd395ec1a3af30209a9b99bf47e3a3973111fc776f2c51b3c407bcfffa8ac68290925664d3a5a56ae930f35ad17ce2af278e92596e73d4a146e277fa6712f368ac314c84ae9b7050dba42a81925b341ad8c11e9dfc90d1edde016a8f2786dac5e597a3bcaf6d7ecc1b47e8fb2a26b4d2f809bb6c4198b7af053e8ebf16e9d0fd225b5a550621a69fce6d2199d891ad502d89922c4412b8363aca52bbffd3a57781da48db18584d310cd1f3a3579dc7725385c032acc5883ca47003055390287ab5769d5260a697fbb5aa852a9c9e3dd15888854eb85c8ee12becc86c4a989d969e2c30678264f0fadc7d67275bf84af38759c854f1f74099d50db67fc45b819513e3538e3d4b823356460c3dd30c789b90f9ad658f6faf14d74a4872afcda957bea275cd9c5c00c9d0ab5081517b9cbda5c7511bda0f1cdc2fc2573eedbee79169965e8f10171bdb43043f5fd077ba2d91e42af31e9fb35c50e89d9ef3c518991f753bef264b2a466baa4cfed5b204328570cc59e62300b859ec4538eb6f92863c72072544f8aba58c882951f247bcd259ff98119cba7f74ae658670761e0183a92832fd3bce043177dddfc631cea2247ac79ad4c30f7e869d6548773600dedb8bb5db2ce1cac63e4d930988c373b636ff02395610044e40869afb1c152184709bd960ee29f76cf7d429eedeea513fd7dd1de967f2f6e98e5829edfb615c3fa7b8f903815dd8c9875e185d5933d8753b4cf9d07d06af8d7ff4536f5a0403d8ec7a7405cc644ac83617538f065d69a56bc35f33e7703d354e3b2e876b9605976480d43e543138d56222d0461342408c71aef542afafe4465cd80a6efbf38b07b766f0a5cda24ec04df7eaa7e581965c49aa1bedaa1b78feee4d28a946899b3494c4dbd5a0ff8c8ee9e94c4617b4cd1fb915cfcc75981999f18803829063e6b06903a58347ad0d0b5a19d8e619cbaa39da45c8c52e8e0dbbe233e26d064c0b9388bc1e844a4242dc99ce8560739eead3d6e446221dc49979cc7ddb5220719371d89159583f77b6a41caea833d3aec272b2f92d06a500e22da7c126e5edb190c8c1b125f901bf4027f65f4ccd459928cf922c782bb046e6146ef7611db1e95c522ab2ea4b31249dab422a797e0cf941d53174ffc2bd28f22bf423e0bfda9efb004498f3c7b64b603811cca256e264e0f91fbe48292f4c72d2ab6fd84f0b6fc3d59f5501847ffb31189ca2e54741086c2798b01355353c516397983f5c57b22bee1bec20e989071c42cf9a9eaafbc12559da5c16f7b0af1c68beac408b34d69b5e894f745edc8db3f5ddf5c76253081d13424d2d99a1e660695b42b676d9dfe444585080b8ec7ab853278d7fe143b8513e18f989786b6e42fa358613bd4be330711049ec6b67166f3f0654a62d44682d65cbd82a6bf5faf72b52813518a9f1af461bdb2b2b42740513a584a0ec16bc54b443884cfabc113ec6c55ba8c3034577045a4808a50d7a0d24610100e9e1249f92512deb405c3572de31dd2596932d7db2700bd5eeecb594e9ff1e11beaa2bded2dd61825bb9ac35ef903bba9eb73fa388b118c2c9870816f930c4cd3182e3e4ff2199267e8a2f88b10cf0113f4b45e058a10cb6dfb97f05887aeb2845b9c15897b17b1f0859c63c6a7dfd22094001598ad9ae9b6a29e8857e8b8ef254cd74620d0d7e91230dc1d30fcde764c356de0fd57932f3fb3bf0a6ae6045ea9cf86f3c2def743d2bd36579a6a04f36c66adfede603f4ce2977f7fd2ce482cc2b711902e986df15610480af61c709d736902b189668715c7119020552452b674ee4542a898be4a15ab94f30e84688f2a739224fdc71610d963cffedd8944abb1c61ee184ee9a06a2669a7f4d9a13d54215b74967824ab852bb813d98f8dd910f84455a030ab9e117aefcee33bab2603fe6f3af39f84035a831afad42b4edc08ff37e00f35b42a4472106d1c84f192e27e1bdf360eb20ce557a328dacbdc866f1d388d1a12cda1cf7408acaafaab5baa02e4b4c19c30a542d654bafe4e371f53056d21fa784822d7cbb79bba30ed64ddfec4914a02620e02111e3fd970b2b32ea5cbc205a7868c8728388d533e479fa2424f235d571a0f5dc632f0a748413efa32879038c74319eb7ed99360bbd8240d00010d788c39fa3ef2efb8768c568f6b2a3eae3e5ae4960afd587a6b6195fca1412dc89883d90b9c8dd471a35775c66935608b6168d6fad978057ffa235ea80807ff92602997d50cd13cd9e7fa2e486a998988da61504e177a25af3e2c11c2f1baeaf49bbb0bd7c953eff4e188c04c131abac4ef3628d0fd179459c19986f79f0c44aee4697dbdcf52ed1e927e86f17cc3a3ba71873c9e4c418c16060ca8011d034bb63f8b1ea390bb299c96aa18bc19552dc2879efeb200fb8289a98e89f1bd0a4510a9ac910aeb5ed3cd95ebf4bb9660e1a8906c9b888d8d41a7f1e661c3f27aebac1ba7b43c6c41a83e15ce296fe55c03a7bb0fd23917b78c6f5b244563483a33e01a1176de8414675e11eb49cb79da75641a850aca1d4bb4c2c84474bb53c2084d84b78dd79145edfe28cca77f989ab069f687f7163670f24d1844a7ac8cd4144d71645da524516f02abdea52bd47a20027be608ad371052ec3aae04067efbc4a21f43d2acc0307c2b0184577911d60e157e27a0ac3182a31fdc2811b3f34c3c0aa1619835673a16823155e4421301fb5dfcce0ae7e339fae1f834bcda13d7383a329533c1c9055466a594e5b9f96158ebe6ea29301d7f890cd841d11bbb899021620ba159351bf657b4f86b92f0f4eb54455ed7d57dfcccef52867dd63ab13f17b7427880e030b51c73cd6cd0e12b0706bfe84883b174ed5338c129d471ca10c444ebb4140f6b718bbd92449868b55c2d5863334da93cb0228fff5026c93d6bbf667c930ddc3c8a8d337af7a2601f840ef50a441400cad3413d706b49c2e7bd0ec1109755dd68609a955982a1de14654d15b57e4824fde4d0bd8302b32bd587998eb4e146a027c8c879913e7030bcaa02fc03d9dcaa18aae88d9780f8ba3f9ea69857323c3a06f4467751ee7ae954d89e73775c72ae6db910a690feed4a12935b8794a416b82012e1dc277c27739c5f129b82e44a3befb49392b656d773e456f4a7f2c2f3840c746b95998ee436764d80588adb9f70ca74b7f13bef0a9e35a3cfbdc31ca6286a1a5e6ed878fa9ade6bb09ff3e1c5c16d47bc281cce8ad32de14691dd8bd93eda1184fe507d42299f8c9863439eb41092f51b19478301a3adc506dae96e1fac7d09460d83bae686abe5fc2b0105219a1de47b74943ee91c4ccb9fb5a947b156a808e80f66df51a5c58f791e944aae0c69d8bbbedbbdcbdc11f47f5e8b94035d8b5cf6bb074f7c8ea139a21e997ffe9254e9910ced4c9132390a2e", @typed={0x1b, 0x87, 0x0, 0x0, @str='net/ip6_tables_matches\x00'}, @generic="ac2d530c8a1efd7b4ffda14a02d01c80c31d6f64ee4cbbd2676b150f418f41db270a0c4d90e12dfa22373e7f556d2fa47ab81bb617e93068ad81f9d41b479ff475272c5093a64c81317281eee1f0c043d9864da60dd57e020c99939f9ec7aaffe0234c13932ab38b", @typed={0x4, 0xf}]}, 0x11cc}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000500)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000440)={0x6, 0xc93, 0x0, 'queue0\x00', 0x5}) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x31b) close(r2) r5 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff810013a0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r5, r5, 0x2) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 18:00:37 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:00:37 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, 0x0, 0x0) 18:00:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:00:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000340)="17148c73933e8b57e1d697ff7ec9c9ab79434f08b5a1c41d96ad12b474b046e07c02283705fb06d5411f46a6bde5b5eab7f0b1776096c2eb1f2de69016b1b9bbae31fc1d9cd194479486d0f3be3178", 0x4f}], 0x2}, 0x81) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000300)=0x9, 0xfffffffffffffff9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006d26274e0000000000000000000000000440000009000080999e00009c000000848fc1a6fb61f1f07c07c9620d93535d11e3ea9932118f19ca7d07e5587fd2f69d3f44cecc4b4a23fb0b20d8619c8d4d73d6cfc929afab1520531f0424aaafc8e876160b24780cd9ac52c91a1f6591ba2e5b49e31de6af7b66f3dd9367797ec89c41f782d9ffffa176ab63f6a69924fd21ce4a83536e5449a9c59204d9aaa56ea1dbed22ebff0000000000000059ff15ab2a8160f6a707000000000000001e174c64b5ad6427c679738f08ba63bb63368da0ac9535d263abc1d3fa23e7b9bfbbbfcc0bb6a3a4e66aa2a8"], 0x24}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000040)=""/193, 0xc1}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r3, r2) ftruncate(0xffffffffffffffff, 0x1000003) ftruncate(r2, 0x3) acct(0x0) unshare(0x48020200) 18:00:37 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd2c, 0x25dfdbfc, 0xa000, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004800}, 0x8084) 18:00:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5300000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1808.619553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:00:37 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x8, 0x1, 0x2]}, &(0x7f0000000080)=0x44) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002000390a0000000000000000f00000000c0000800500000000008d43"], 0x20}}, 0x0) 18:00:37 executing program 2: mknod$loop(&(0x7f0000001d40)='./file0\x00', 0x6000, 0x0) acct(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file1\x00') 18:00:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x4686, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000340)={0x28, 0x18, 0x0, 0x9, 0x2, 0x84, 0x4, 0x62, 0x1}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8f6}) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x69e6, 0x40) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000140)={0x36, 0x35, 0x4, 0x8, 0xb, 0x0, 0x0, 0x53, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000080)) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x9, 0x0, 0x0, 0xc, 0x4, 0x0, 0x3, 0x0, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) [ 1808.654800] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1808.656154] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1808.656845] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1808.658038] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:00:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:00:37 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, 0x0, 0x0) 18:00:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5f00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:00:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, "19"}]}]}, 0x38}}, 0x0) flock(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000005c0)={{r0}, 0x4, &(0x7f0000000400)=[0x0, 0x6, 0x4, 0xf3], 0x6, 0x0, [0x100000, 0x9, 0x80000000, 0x1f9]}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x100, 0xff, 0xa, 0x7fbc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x7fffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/custom1\x00', 0x0, 0x0) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="a10bc996557fb09f331886026c6a89d3f78bb4e4a7d80e76e0683b29a293df5b3d22566002866b2dc2be05e249d20bfe81af5cef741f303d62a8fff4eef36eaa0d46cf3cbf3ec0fb40db830a13fd95109511353c93bf66c38b2d9f9327ecbf5b7bb1313f3a1dc45bd89950448b93d380e6ad1f5c1dfcd90f78a58f90c6d3d170522c1d4f4970f31099d040412cf3c39d0acc98dd64e127f112ede6c93c9175641f696ed0a07e7a598579482ea726bb72f485a24924d2b6345218d2bdbae6c44463e2d1262fc33aab0da1193dbc73170e61c4b0638c0bffffd3f27319b2a3a1fa6a2f49123a24e9fb7b535b9c6418567fe480e37c7ee8c0a954", 0xf9}, {&(0x7f00000002c0)="36e7877fbdb1b1c86663e4724ac68d006abaa654c1d30253e2de0d2df1934a4dd81f59effb99d1418ed22830776296d46a8d84e209e38f57a1fcfd11590e2f48eee6aa95411593e0c60c892a625b47ef2e8edbd63cca24c4f84ffda2d35562aac49a67691173176a79677f22f9bfde7300e773551954f4ed7edd646c32f177a5989a7a9e277ada1bee58129c37488b71da96ea0ae26b4df313c608d042f11014e36ef052b60f86905d4d16fc70c944ba88ddd89e9efe82c0ba22f9fa0bd493f9d2cb061c6685efdfd5f55e92275c4974e792422b7aee7ac1a1f147", 0xdb}, {&(0x7f00000004c0)="7537947e88ddab3209118d519e64ea0c3c6839eebd41e7c096fdb41835cfdb941ef8abb1293863e14e7b927c0d59149945b1f1714289b6cd1820fd8354ada275fa89cfc2f991af460e120f55b41183b03333db14a7e96347d2c657e798343c7d0211d1f5a71453af800f85f280b1bf8d4cdc8d77ebf9ab5b86b7dbbe6cae0d55ae526cc9877ce205607a44a9ee31bb5a58cf154e6d5ef5c558bf4388de608a34e88107e043b1776fb4f773e90a272a37d4c178a499fc4d84694f3a1e95", 0xbd}, {&(0x7f00000000c0)="3d79654840f851b1a80d32d3c248acc6fb2411787e8564eb4b194fc410a1290f5d6ba64839544fcf3ebcdd7e7ed1935b181e8ca54becca", 0x37}], 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 18:00:37 executing program 2: pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "afb6a5", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x5}}}}}}}, 0x0) futex(&(0x7f00000002c0), 0x8b, 0x0, 0x0, 0x0, 0x0) [ 1808.743851] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1808.769489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1808.788340] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1808.789314] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1808.789817] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1808.790687] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:00:37 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:00:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) [ 1808.869055] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:00:37 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:00:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001700)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/135, 0x87}], 0x1, 0x2, 0x76b) getpgrp(0x0) pidfd_open(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000380)={&(0x7f00000002c0)=""/153, 0x99, 0x7fff, 0x6}) mknodat$loop(r1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x17, {0x1f, 0x55, @l2={'ib', 0x3a, 'nr0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4) openat(r2, &(0x7f0000000440)='./file1\x00', 0x80100, 0x2cc) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfffffffb) [ 1808.908744] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1808.909741] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1808.910275] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1808.911132] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:00:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6900000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:00:37 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:00:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) [ 1808.979645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1809.014258] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1809.015230] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1809.015757] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1809.016620] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:00:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x300) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) mincore(&(0x7f0000b1c000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/108) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x81}, 0x24000050) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0xfffffffffffffff9, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000400)=""/118, 0x76}], 0x100000000000030a) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x6112102) keyctl$get_security(0x11, r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r2) 18:00:52 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011700)) 18:00:52 executing program 0: getxattr(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=""/106, 0x6a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x200, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x74288893e3f1755f}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2000}, 0x1}, 0x80000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}, 0x62) syz_io_uring_setup(0x4d4f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffe, 0xa7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x4000, 0x0, 0x1001, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000280)='oom_score\x00') sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r2, &(0x7f0000000000), 0x5ac, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0x401}) 18:00:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:00:52 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:00:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c000000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:00:52 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:00:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)=""/145, &(0x7f0000000300)=0x91) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) fdatasync(0xffffffffffffffff) r1 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x34) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) signalfd(r0, &(0x7f0000000180)={[0x80]}, 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x7f, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r2, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 1824.258496] ISOFS: Unable to identify CD-ROM format. [ 1824.281746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:00:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00e000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1824.355457] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1824.357419] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1824.358513] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1824.360625] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 1824.371370] ISOFS: Unable to identify CD-ROM format. 18:00:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, r5) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000180)={0xa42, {{0xa, 0x4e22, 0xcf5, @local, 0x6}}, 0x1, 0x1, [{{0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}]}, 0x110) r6 = open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x1000) openat(r6, &(0x7f00000000c0)='./file1\x00', 0x200000, 0x52) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14060000000000000000000007000000c4048f01000000001c00000000000000000000000800008b", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 18:00:52 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x0, 0x8800}, {&(0x7f0000000280)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824f76d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x0, &(0x7f0000000140)=ANY=[]) setxattr$trusted_overlay_origin(&(0x7f0000001f00)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="8c10cefece080fe02cd08f5ddfafd84f2b403de49c467d0f83162cb108a0e89ff73a4d6788f152bf1c48bf3daf6138c32bacad6a2617410a96d03a8f064ec80577047837659e9ec13147ed7447847f1ce6d85e3072feabd72813e21fc8b9898f4badbd54355a7dfdc7da7a2577ffdd4571ac2ac985df21fecb320c36", 0x7c, 0x1, 0x0, 0x0) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x300) 18:00:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:00:52 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r1, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r1, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 18:00:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="e03f030030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1825.139427] cgroup: fork rejected by pids controller in /syz0 18:01:08 executing program 2: syz_open_dev$evdev(&(0x7f0000002000), 0x4, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) listen(r0, 0x8001) 18:01:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:01:08 executing program 4: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x169582, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000001) 18:01:08 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c00002030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:01:08 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x130, r0, 0x10000000) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0xc00c, @fd_index=0x8, 0x4, 0x0, 0x0, 0xa, 0x0, {0x1}}, 0x1ff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00') getdents(r8, &(0x7f0000000000)=""/82, 0x18) getdents64(r8, &(0x7f0000000080)=""/172, 0xac) io_uring_enter(r8, 0x581b, 0xc853, 0x1, &(0x7f0000000080)={[0xd7]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x81, 0x1, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:01:08 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 1) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:01:08 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r1, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r1, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 18:01:08 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x13, 0xd, 0x5c, &(0x7f0000000080)}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x50, 0x4, 0x4, 0x4, 0x18, "93a669662cc30e0907e6278494c38f17dae089"}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000004c0)=0x2) [ 1840.205676] FAULT_INJECTION: forcing a failure. [ 1840.205676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1840.208549] CPU: 0 PID: 11427 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1840.210009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1840.211713] Call Trace: [ 1840.212264] dump_stack+0x107/0x167 [ 1840.213031] should_fail.cold+0x5/0xa [ 1840.213840] _copy_from_user+0x2e/0x1b0 [ 1840.214671] __copy_msghdr_from_user+0x91/0x4b0 [ 1840.215629] ? __ia32_sys_shutdown+0x80/0x80 [ 1840.216520] ? perf_trace_lock+0xac/0x490 [ 1840.217368] ? __lock_acquire+0xbb1/0x5b00 [ 1840.218246] sendmsg_copy_msghdr+0xa1/0x160 [ 1840.219121] ? do_recvmmsg+0x6d0/0x6d0 [ 1840.219905] ? perf_trace_lock+0xac/0x490 [ 1840.220735] ? SOFTIRQ_verbose+0x10/0x10 [ 1840.221575] ? __lockdep_reset_lock+0x180/0x180 [ 1840.222509] ? perf_trace_lock+0xac/0x490 [ 1840.223332] ? SOFTIRQ_verbose+0x10/0x10 [ 1840.224160] ___sys_sendmsg+0xc6/0x170 [ 1840.224955] ? sendmsg_copy_msghdr+0x160/0x160 [ 1840.225888] ? __fget_files+0x26d/0x4c0 [ 1840.226689] ? lock_downgrade+0x6d0/0x6d0 [ 1840.227536] ? find_held_lock+0x2c/0x110 [ 1840.228367] ? __fget_files+0x296/0x4c0 [ 1840.229184] ? __fget_light+0xea/0x290 [ 1840.230005] __sys_sendmsg+0xe5/0x1b0 [ 1840.230780] ? __sys_sendmsg_sock+0x40/0x40 [ 1840.231655] ? rcu_read_lock_any_held+0x75/0xa0 [ 1840.232599] ? fput_many+0x2f/0x1a0 [ 1840.233336] ? ksys_write+0x1a9/0x260 [ 1840.234123] ? __ia32_sys_read+0xb0/0xb0 [ 1840.234948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1840.236007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1840.237043] ? trace_hardirqs_on+0x5b/0x180 [ 1840.237921] do_syscall_64+0x33/0x40 [ 1840.238672] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1840.239703] RIP: 0033:0x7f119335cb19 [ 1840.240457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1840.244187] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1840.245738] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1840.247182] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1840.248630] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1840.250088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1840.251532] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 18:01:08 executing program 5: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9101) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = open(0x0, 0x4000, 0x80) stat(&(0x7f00000026c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, 0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)) getegid() r3 = semget$private(0x0, 0x2, 0x600) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x408101) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000300)=""/194, 0xc2}], 0x2) semctl$IPC_RMID(r3, 0x0, 0x0) semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x1}, {0x2, 0x20, 0x1000}, {0x3, 0x100, 0x800}, {0x0, 0x7fff}, {0x2, 0x800, 0x1800}, {0x2, 0x7ff, 0x400}, {0x1, 0x2, 0x800}, {0x4, 0x7ff, 0x1000}], 0x8, &(0x7f0000000080)={0x77359400}) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0) 18:01:08 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="00f0ff7f30003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:01:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 18:01:08 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, &(0x7f0000000240)) openat$cgroup(0xffffffffffffffff, &(0x7f00000017c0)='syz0\x00', 0x200002, 0x0) write$binfmt_elf64(r0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x15b0) 18:01:08 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000900), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 18:01:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r1, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'bridge_slave_0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)={0x11cc, 0x28, 0x2, 0x70bd26, 0x25dfdbfb, {0x1c}, [@nested={0xe8, 0x92, 0x0, 0x1, [@generic="9354ef54040534c1666929b68cb8c5165c960e8ab4903035db7bdff9cf447b3de0d5243c278c6e7f5e1c72bac3e8cf01116dcf70895118d4f0168bdd031c547b0ed9ede6a267210f300296910b378a2d10d8c2dcd2c98422a1041297c1bd681cda46f1196d8f848ac7c04b9b912ae624688703cb7510625b9bea3ae88c65d879353145647ae60c0736987dbc16ce9661b04a889e5694fd980dc965608a799f0dd6e39a602373b16ed93a540a78b21c12fe1ff8c69d1467bdac63ac7bea6cc5904b181d00426836fc24f725cf21bb4bbc2fbe905627b5e03d0cddcb731313253f778f1088"]}, @generic="d8fff82d9fc0070933493aa4c763f14981b4cd3fc5fa52367983b26202e7afc86522a698225ef50d5ab348b3043f0392c4e04079bbf18dac8da81f47b72dc7b8370e78", @typed={0x4}, @generic="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", @typed={0x1b, 0x87, 0x0, 0x0, @str='net/ip6_tables_matches\x00'}, @generic="ac2d530c8a1efd7b4ffda14a02d01c80c31d6f64ee4cbbd2676b150f418f41db270a0c4d90e12dfa22373e7f556d2fa47ab81bb617e93068ad81f9d41b479ff475272c5093a64c81317281eee1f0c043d9864da60dd57e020c99939f9ec7aaffe0234c13932ab38b", @typed={0x4, 0xf}]}, 0x11cc}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf32(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x31b) close(r3) r4 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff810013a0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r4, r4, 0x2) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 1841.124386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.126211] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1841.128322] Buffer I/O error on dev sr0, logical block 0, async page read [ 1841.129887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.131117] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 0 [ 1841.133175] Buffer I/O error on dev sr0, logical block 1, async page read [ 1841.134644] Buffer I/O error on dev sr0, logical block 2, async page read [ 1841.136079] Buffer I/O error on dev sr0, logical block 3, async page read [ 1841.138608] Buffer I/O error on dev sr0, logical block 4, async page read [ 1841.140130] Buffer I/O error on dev sr0, logical block 5, async page read [ 1841.141623] Buffer I/O error on dev sr0, logical block 6, async page read [ 1841.143075] Buffer I/O error on dev sr0, logical block 7, async page read [ 1841.144669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.145344] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1841.146444] Buffer I/O error on dev sr0, logical block 0, async page read [ 1841.147295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.147884] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1841.148984] Buffer I/O error on dev sr0, logical block 1, async page read [ 1841.149799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.150394] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1841.151547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.152146] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1841.153280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.153877] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1841.155031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.155616] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1841.156743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.157347] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1841.158489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.159098] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1841.160281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.160942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.161596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.162282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.162942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.163586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.164233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.165155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.166493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.168387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.172052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.173332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.175375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.176641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1841.177967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:01:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0x10003) sendfile(r4, r5, &(0x7f0000000140)=0x240000000, 0x3) sendfile(r0, r1, 0x0, 0x20d315) r6 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES64=r1, @ANYRESDEC=r6], 0xfdef) getpgid(0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f00000000c0)='./file0\x00', 0x108) socket$inet_udplite(0x2, 0x2, 0x88) 18:01:25 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000a003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:01:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r5, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x3, 0x6, &(0x7f0000000740)=[{&(0x7f00000008c0)="52b62f5258a6fced3b78d2ba13d14a63985cbf50e6431f9541808f8b7aaabfb4bd1faf68593a86a11ac9be045551fac8fae0ae6bfaa5caa8cc0081c0d9a27fa07c0da3a70d20db1b0ba189de97bdd935176729e0478f57e6306b191c32cf2e6d87e2ad120e0a484b8567593ff7bea9fa9e200bcbad9397376eb397774f70d4b42a92503cbbe0eb8a895ed3f0b6331abbd4b9a4ec7b09aa3ea024e3143cd4fe4320ac12ee07e3d1b5eeed21f8f7b26a89bf412c718e72e1757698bf332b720aed7bc9d6dd54fdcb44cb80fd5489a8baf3c1c5a864795d3690a306badd5fe98200038dd05c87ff9e4af69c2d6538eb1b342086c760a1a107", 0xf7, 0x4}, {&(0x7f0000000380)="1ed057dd10eb4d256e9a2a872a90d4d5b60c25cb05bf6ea24d21e674dfe27459dcd4e3d8ab952383ccf814063a5c42da1a01dcdada02c8419570b0d78927a7d2022e4d5c534148efa24d9077c366b7f89a47d85016dde20efbae5a0c1604483281943024eab24e3cc190390b5d853bf6d170eb261844260c3bf76361033b6e1e66e42605426eef75bd1104d651b28e91ceeff55e4b3092779a28f656db932bd2801f9da4ddf3fec69718a96792b75dd91c7ceaab486bf472b169caa680b36634da65d2ed3069f8fea0d03c8c56aa56c0c33bf97ce9f61642289727fa89c5cef1", 0xe0, 0x3ff}, {&(0x7f0000000480)="2ef968690f6e02d6c9eef24dd2c32fb975fce8fe8321a4906591aa1f6f8cce64d9df81a2adf11cd34769cf13586761f14883d75eb212eca473df81ee04949a5f01e8b6a225cd3c0a037d9bb85361a880682a", 0x52, 0x77}, {&(0x7f0000000500)="15e14e3fd804007fdc2fa9ca17f60b816cd12c9c77d92a85c4782b495d85f0edfe07a36e83dffc36262dc62ad6929619f0f075d1f66ed10210c997d830faaa8e909a8e727facad55c12165598d68e761c4d4703d14b91e8a1186962a540e314afd990559506d92a5ca8035725005079887c685258356acc784c37f7d83c4878b47a45f97be57763cbe37d023e678710f2f7985deb9defc8f360e84d403a51b2a75eece4ab8a5d601cc82b73f9d03774ccebe45ba43b2f5fbea3ff9e9ac1881128c2816035cf353dd7da5e36c45f77500e0", 0xd1, 0x7}, {&(0x7f0000000600)="729fb4ce20fb0a4e103fac685633a5bdc8812be85bcddf653888e66861cb2b0308a394020e4f3c0d914df83f53fff37705576ddd26da0c5857dd42efe0e063bb961a6fa1ab36c7625f7dbd7ac2e573550dee08ff1e149115b903c71111d101e2aa05103a83b3667af29c859954c266e6084b26d9b24afc87696b9d57b3141c5e2d4b480d2c8f9734bd1816b92db607af01d5ed4e23ef56099a1376e7674b1cedb1e0847da5d19a37bc7179d46144e7e6d3e248bebb58fc32ca78dbe463b1342198d45f5496d7f4557ec84ca854baa13be4d5869237e9196b4c1a", 0xda, 0xffffffffffff8000}, {&(0x7f0000000700)="11790849bd5f068aefae1c065be595da7f00e92fa3be", 0x16, 0x1}], 0x840, &(0x7f00000009c0)=ANY=[@ANYBLOB="73657373696f6e3d30783030303030523030303030300f3ceb8b2731426f423347f8303032322c6e6f6a6f6c6965742c646d6f65653d3078303030303030303030303030303030322c6e6f636f6d70726573732c686964652c6f76657272696465726f636b7065726d2c736d61636b6673726f6f743d736d6170735f726f6c6c7570002c646f6e745f61707072616973652c646566636f6e746578743d726f6f742c00b966e68dcd59eb5a911107f643fe2decbd7d38b92aef0561627344b3c17b00dba0693316055173cbb8af16f5433d43df1c1911900f428489e19b75a0c9deaa1c65c7a449c76115e211849fced34e5b4256598876dff7b524a3e390c4546a6e653505d1050eab43e3a84d02e917976f4adc8e2be032d65054b5d80d40f9101ab007e65c1f252d3d021f2ce3f107e95cc7ce8e70dedb2b588172f6fce7"]) readv(r6, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) sendfile(r6, r3, 0x0, 0x8) 18:01:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 18:01:25 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc0000, 0xc0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) flistxattr(r2, &(0x7f0000000080)=""/244, 0xf4) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) 18:01:25 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r1, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r1, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 18:01:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a08", 0x5e, 0xb800}], 0x0, &(0x7f0000011700)) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x6a0082, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000140)={0x1, 0xfffffefd, 0x583}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r1, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000180)={0x2, 0x0, 0x800, 0x40, 0x2, 0x1, 0x7, 0x6, 0x7ff, 0x8, 0x1, 0x1c, 0x1, 0x6}) pipe(&(0x7f00000000c0)) 18:01:25 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 2) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1856.926623] FAULT_INJECTION: forcing a failure. [ 1856.926623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.928880] CPU: 1 PID: 11473 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1856.930090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1856.931324] Call Trace: [ 1856.931728] dump_stack+0x107/0x167 [ 1856.932288] should_fail.cold+0x5/0xa [ 1856.932876] _copy_from_user+0x2e/0x1b0 [ 1856.933497] iovec_from_user+0x141/0x400 [ 1856.934153] __import_iovec+0x67/0x590 [ 1856.934741] ? __ia32_sys_shutdown+0x80/0x80 [ 1856.935399] ? perf_trace_lock+0xac/0x490 [ 1856.936017] import_iovec+0x83/0xb0 [ 1856.936583] sendmsg_copy_msghdr+0x131/0x160 [ 1856.937262] ? do_recvmmsg+0x6d0/0x6d0 [ 1856.937872] ? perf_trace_lock+0xac/0x490 [ 1856.938504] ? __lockdep_reset_lock+0x180/0x180 [ 1856.938838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=11479 comm=syz-executor.1 [ 1856.939208] ? perf_trace_lock+0xac/0x490 [ 1856.939222] ? SOFTIRQ_verbose+0x10/0x10 [ 1856.939240] ___sys_sendmsg+0xc6/0x170 [ 1856.939258] ? sendmsg_copy_msghdr+0x160/0x160 [ 1856.939275] ? __fget_files+0x26d/0x4c0 [ 1856.939298] ? lock_downgrade+0x6d0/0x6d0 [ 1856.945344] ? find_held_lock+0x2c/0x110 [ 1856.945991] ? __fget_files+0x296/0x4c0 [ 1856.946605] ? __fget_light+0xea/0x290 [ 1856.947213] __sys_sendmsg+0xe5/0x1b0 [ 1856.947800] ? __sys_sendmsg_sock+0x40/0x40 [ 1856.948450] ? rcu_read_lock_any_held+0x75/0xa0 [ 1856.949192] ? fput_many+0x2f/0x1a0 [ 1856.949761] ? ksys_write+0x1a9/0x260 [ 1856.950345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1856.951128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1856.951905] ? trace_hardirqs_on+0x5b/0x180 [ 1856.952554] do_syscall_64+0x33/0x40 [ 1856.953115] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1856.953895] RIP: 0033:0x7f119335cb19 [ 1856.954457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1856.957205] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1856.958377] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1856.959442] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1856.960519] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1856.961593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.962681] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1856.965345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=11479 comm=syz-executor.1 18:01:25 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000f003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:01:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 18:01:25 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:01:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xffff) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) write(r0, &(0x7f0000000180)="e127b4d0", 0x4) sendmsg$unix(r3, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) fallocate(r3, 0x0, 0xffff, 0x0) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xffffffffffffffff) dup2(r4, r2) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000002c0)="2f077a143bfa4bc36a610f6f180ff929a977b62bcdaceacde4230fa8261d055ab38336b65f5c3bc66f4672d07a4c845a6cde8d4621f47e6acfeafad9fa8f7b12c5fea17647a77539b8d320835cbc281c", 0x50, 0x0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) dup2(r6, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x0, @fd=r5, 0x20, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x0) pipe(&(0x7f0000000100)) syz_open_dev$ttys(0xc, 0x2, 0x1) [ 1857.086335] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1857.087734] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1857.088489] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1857.089643] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 1857.098884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=11497 comm=syz-executor.1 [ 1857.109746] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:01:25 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1b0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x3}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r6 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}, {r7, r8+60000000}}, &(0x7f0000000100)) r9 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r9, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r6, 0x0) [ 1857.141342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=11497 comm=syz-executor.1 18:01:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 1) 18:01:25 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1857.235685] FAULT_INJECTION: forcing a failure. [ 1857.235685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1857.237199] CPU: 1 PID: 11508 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1857.238075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1857.239102] Call Trace: [ 1857.239449] dump_stack+0x107/0x167 [ 1857.239912] should_fail.cold+0x5/0xa [ 1857.240386] _copy_from_user+0x2e/0x1b0 [ 1857.240889] __copy_msghdr_from_user+0x91/0x4b0 [ 1857.241465] ? __ia32_sys_shutdown+0x80/0x80 [ 1857.242022] ? perf_trace_lock+0xac/0x490 [ 1857.242561] ? __lock_acquire+0xbb1/0x5b00 [ 1857.243101] sendmsg_copy_msghdr+0xa1/0x160 [ 1857.243638] ? do_recvmmsg+0x6d0/0x6d0 [ 1857.244119] ? perf_trace_lock+0xac/0x490 [ 1857.244634] ? SOFTIRQ_verbose+0x10/0x10 [ 1857.245152] ? __lockdep_reset_lock+0x180/0x180 [ 1857.245771] ? perf_trace_lock+0xac/0x490 [ 1857.246300] ? SOFTIRQ_verbose+0x10/0x10 [ 1857.246832] ___sys_sendmsg+0xc6/0x170 [ 1857.247335] ? sendmsg_copy_msghdr+0x160/0x160 [ 1857.247930] ? __fget_files+0x26d/0x4c0 [ 1857.248455] ? lock_downgrade+0x6d0/0x6d0 [ 1857.248958] ? find_held_lock+0x2c/0x110 [ 1857.249493] ? __fget_files+0x296/0x4c0 [ 1857.250027] ? __fget_light+0xea/0x290 [ 1857.250537] __sys_sendmsg+0xe5/0x1b0 [ 1857.251040] ? __sys_sendmsg_sock+0x40/0x40 [ 1857.251598] ? rcu_read_lock_any_held+0x75/0xa0 [ 1857.252211] ? fput_many+0x2f/0x1a0 [ 1857.252691] ? ksys_write+0x1a9/0x260 [ 1857.253185] ? __ia32_sys_read+0xb0/0xb0 [ 1857.253738] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1857.254415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1857.255083] ? trace_hardirqs_on+0x5b/0x180 [ 1857.255632] do_syscall_64+0x33/0x40 [ 1857.256120] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1857.256785] RIP: 0033:0x7fe17b63eb19 [ 1857.257266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1857.259658] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1857.260636] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1857.261563] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1857.262486] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1857.263416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1857.264329] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 [ 1857.343286] EXT4-fs: failed to create workqueue [ 1857.344010] EXT4-fs (loop5): mount failed 18:01:44 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 3) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:01:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r5, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x3, 0x6, &(0x7f0000000740)=[{&(0x7f00000008c0)="52b62f5258a6fced3b78d2ba13d14a63985cbf50e6431f9541808f8b7aaabfb4bd1faf68593a86a11ac9be045551fac8fae0ae6bfaa5caa8cc0081c0d9a27fa07c0da3a70d20db1b0ba189de97bdd935176729e0478f57e6306b191c32cf2e6d87e2ad120e0a484b8567593ff7bea9fa9e200bcbad9397376eb397774f70d4b42a92503cbbe0eb8a895ed3f0b6331abbd4b9a4ec7b09aa3ea024e3143cd4fe4320ac12ee07e3d1b5eeed21f8f7b26a89bf412c718e72e1757698bf332b720aed7bc9d6dd54fdcb44cb80fd5489a8baf3c1c5a864795d3690a306badd5fe98200038dd05c87ff9e4af69c2d6538eb1b342086c760a1a107", 0xf7, 0x4}, {&(0x7f0000000380)="1ed057dd10eb4d256e9a2a872a90d4d5b60c25cb05bf6ea24d21e674dfe27459dcd4e3d8ab952383ccf814063a5c42da1a01dcdada02c8419570b0d78927a7d2022e4d5c534148efa24d9077c366b7f89a47d85016dde20efbae5a0c1604483281943024eab24e3cc190390b5d853bf6d170eb261844260c3bf76361033b6e1e66e42605426eef75bd1104d651b28e91ceeff55e4b3092779a28f656db932bd2801f9da4ddf3fec69718a96792b75dd91c7ceaab486bf472b169caa680b36634da65d2ed3069f8fea0d03c8c56aa56c0c33bf97ce9f61642289727fa89c5cef1", 0xe0, 0x3ff}, {&(0x7f0000000480)="2ef968690f6e02d6c9eef24dd2c32fb975fce8fe8321a4906591aa1f6f8cce64d9df81a2adf11cd34769cf13586761f14883d75eb212eca473df81ee04949a5f01e8b6a225cd3c0a037d9bb85361a880682a", 0x52, 0x77}, {&(0x7f0000000500)="15e14e3fd804007fdc2fa9ca17f60b816cd12c9c77d92a85c4782b495d85f0edfe07a36e83dffc36262dc62ad6929619f0f075d1f66ed10210c997d830faaa8e909a8e727facad55c12165598d68e761c4d4703d14b91e8a1186962a540e314afd990559506d92a5ca8035725005079887c685258356acc784c37f7d83c4878b47a45f97be57763cbe37d023e678710f2f7985deb9defc8f360e84d403a51b2a75eece4ab8a5d601cc82b73f9d03774ccebe45ba43b2f5fbea3ff9e9ac1881128c2816035cf353dd7da5e36c45f77500e0", 0xd1, 0x7}, {&(0x7f0000000600)="729fb4ce20fb0a4e103fac685633a5bdc8812be85bcddf653888e66861cb2b0308a394020e4f3c0d914df83f53fff37705576ddd26da0c5857dd42efe0e063bb961a6fa1ab36c7625f7dbd7ac2e573550dee08ff1e149115b903c71111d101e2aa05103a83b3667af29c859954c266e6084b26d9b24afc87696b9d57b3141c5e2d4b480d2c8f9734bd1816b92db607af01d5ed4e23ef56099a1376e7674b1cedb1e0847da5d19a37bc7179d46144e7e6d3e248bebb58fc32ca78dbe463b1342198d45f5496d7f4557ec84ca854baa13be4d5869237e9196b4c1a", 0xda, 0xffffffffffff8000}, {&(0x7f0000000700)="11790849bd5f068aefae1c065be595da7f00e92fa3be", 0x16, 0x1}], 0x840, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) readv(r6, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) sendfile(r6, r3, 0x0, 0x8) [ 1875.739779] FAULT_INJECTION: forcing a failure. [ 1875.739779] name failslab, interval 1, probability 0, space 0, times 0 [ 1875.742401] CPU: 1 PID: 11525 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1875.743796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1875.745478] Call Trace: [ 1875.746030] dump_stack+0x107/0x167 [ 1875.746792] should_fail.cold+0x5/0xa [ 1875.747594] ? __alloc_skb+0x6d/0x5b0 [ 1875.748407] should_failslab+0x5/0x20 [ 1875.749209] kmem_cache_alloc_node+0x55/0x330 [ 1875.750140] __alloc_skb+0x6d/0x5b0 [ 1875.750894] netlink_sendmsg+0x998/0xdf0 [ 1875.751733] ? netlink_unicast+0x7f0/0x7f0 [ 1875.752616] ? netlink_unicast+0x7f0/0x7f0 [ 1875.753482] __sock_sendmsg+0x154/0x190 [ 1875.754320] ____sys_sendmsg+0x70d/0x870 [ 1875.755155] ? sock_write_iter+0x3d0/0x3d0 [ 1875.756207] ? do_recvmmsg+0x6d0/0x6d0 [ 1875.757008] ? perf_trace_lock+0xac/0x490 [ 1875.757875] ? __lockdep_reset_lock+0x180/0x180 [ 1875.758832] ? perf_trace_lock+0xac/0x490 [ 1875.759682] ? SOFTIRQ_verbose+0x10/0x10 [ 1875.760518] ___sys_sendmsg+0xf3/0x170 [ 1875.761409] ? sendmsg_copy_msghdr+0x160/0x160 18:01:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000011003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:01:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 2) 18:01:44 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:01:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0x0) setfsgid(0xee01) mount$9p_unix(0x0, 0x0, &(0x7f0000000040), 0x3b175157a44ccfd3, &(0x7f0000000080)={'trans=unix,', {[{@access_user}, {@privport}, {@dfltgid}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}}) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rename(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00') mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1800000, &(0x7f00000003c0)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x3}}, {@mmap}], [{@subj_type={'subj_type', 0x3d, '@{'}}, {@smackfsdef}, {@appraise_type}, {@dont_measure}]}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001700), 0x101092, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x6, 'ip6gretap0\x00', {0xe6}, 0x200}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000700)={0x0, r2, "c619f635cb8eb4b0adc4ec1d696b87e6192bff1450d1abc67de826b9aacb0762b4f9d68e58efb6151a95db48cc8f6b17341d43aca666e0b976fcaf1f7372e8b34a2712626e798aa7554628a3e4c35529144e5cb179d216a6663ef21a3f4e7a121e03c14b47a638a6b9c7fd23d3814b539d780f4b18324ff0fae3a66c0292121600945f353bf5c9e0ee442a006e7fa88fc6f44edd3c8d98de58b85edeaae7e698fb9d8a2efb90d40e33d3b285a813f8eda9e53a4f6e7b727af19521095c7cb42b9199a4c4c0fe7a5525141ff0e372c3e1e58146f60151e89cbf4a93941425ff39058a75f98917c6af3035cacf8de4490b1e29c0afc71d6c8a2fc02f1dbd1332dd", "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"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) creat(&(0x7f0000000300)='./file0\x00', 0x0) 18:01:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x80801) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x300}]) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0xe) 18:01:44 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT]) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r1, &(0x7f00000017c0)=[{&(0x7f0000001340)=""/215, 0xd7}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001440)=""/191, 0xbf}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/78, 0x4e}, {&(0x7f00000016c0)=""/235, 0xeb}], 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001900), 0x202000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x80000, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r5, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0xa091dcc9ac511d3) [ 1875.762488] ? lock_downgrade+0x6d0/0x6d0 [ 1875.763610] ? find_held_lock+0x2c/0x110 [ 1875.764458] ? __fget_files+0x296/0x4c0 [ 1875.765276] ? __fget_light+0xea/0x290 [ 1875.766110] __sys_sendmsg+0xe5/0x1b0 [ 1875.766885] ? __sys_sendmsg_sock+0x40/0x40 [ 1875.767759] ? rcu_read_lock_any_held+0x75/0xa0 [ 1875.768726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1875.769793] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1875.770854] ? trace_hardirqs_on+0x5b/0x180 [ 1875.771752] do_syscall_64+0x33/0x40 [ 1875.772508] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1875.773558] RIP: 0033:0x7f119335cb19 ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000001940)={0x7, 'veth0_vlan\x00', {0x4}, 0x92}) openat(r0, &(0x7f00000018c0)='./file0\x00', 0x0, 0x40) open$dir(&(0x7f0000000040)='./file0\x00', 0x400201, 0x102) [ 1875.774329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1875.778162] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1875.779697] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1875.781134] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1875.782581] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1875.784014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.785448] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1875.830372] FAULT_INJECTION: forcing a failure. [ 1875.830372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1875.832806] CPU: 1 PID: 11539 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1875.834230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1875.835925] Call Trace: [ 1875.836474] dump_stack+0x107/0x167 [ 1875.837229] should_fail.cold+0x5/0xa [ 1875.838037] _copy_from_user+0x2e/0x1b0 [ 1875.838860] iovec_from_user+0x141/0x400 [ 1875.839702] __import_iovec+0x67/0x590 [ 1875.840496] ? __ia32_sys_shutdown+0x80/0x80 [ 1875.841395] ? perf_trace_lock+0xac/0x490 [ 1875.842270] import_iovec+0x83/0xb0 [ 1875.843020] sendmsg_copy_msghdr+0x131/0x160 [ 1875.843912] ? do_recvmmsg+0x6d0/0x6d0 [ 1875.844704] ? perf_trace_lock+0xac/0x490 [ 1875.845554] ? __lockdep_reset_lock+0x180/0x180 [ 1875.846500] ? perf_trace_lock+0xac/0x490 [ 1875.847349] ? SOFTIRQ_verbose+0x10/0x10 [ 1875.848182] ___sys_sendmsg+0xc6/0x170 [ 1875.848979] ? sendmsg_copy_msghdr+0x160/0x160 [ 1875.849923] ? __fget_files+0x26d/0x4c0 [ 1875.850737] ? lock_downgrade+0x6d0/0x6d0 [ 1875.851583] ? find_held_lock+0x2c/0x110 [ 1875.852421] ? __fget_files+0x296/0x4c0 [ 1875.853241] ? __fget_light+0xea/0x290 [ 1875.854066] __sys_sendmsg+0xe5/0x1b0 [ 1875.854844] ? __sys_sendmsg_sock+0x40/0x40 [ 1875.855721] ? rcu_read_lock_any_held+0x75/0xa0 [ 1875.856674] ? fput_many+0x2f/0x1a0 [ 1875.857415] ? ksys_write+0x1a9/0x260 [ 1875.858222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1875.859283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1875.860329] ? trace_hardirqs_on+0x5b/0x180 [ 1875.861213] do_syscall_64+0x33/0x40 [ 1875.861988] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1875.863026] RIP: 0033:0x7fe17b63eb19 [ 1875.863783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1875.867539] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1875.869112] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1875.870574] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1875.872030] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1875.873492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.874957] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:01:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000012003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1875.928417] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1875.930427] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1875.931501] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1875.933228] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:01:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) fchown(r0, r1, 0xee01) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fork() [ 1875.949097] cgroup2: Unknown parameter '‰6A: ÈÕìr3 âU¯IŽàÌXgâÊŠ®l§Æ/e¯ù×éï ýIÑ@t‘pYÓ' 18:01:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x80800) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000000000)='y', 0x1}], 0x2) fcntl$setpipe(r0, 0x407, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40d00, 0x108) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000001180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:01:44 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:01:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000013003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:01:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 3) 18:01:44 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r9, &(0x7f0000000800)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/101, 0x65}, {&(0x7f0000000940)=""/234, 0xea}], 0x8, &(0x7f0000000a40)=""/135, 0x87}, 0x10100) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd_index=0x7, 0x8, 0x2, 0x14, 0x0, 0x0, {0x0, r8}}, 0xffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:01:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c65312073797a5f74756e002073797a5f74756e0020737937d5c86bf58028f30797fe002073797a5f74756e0020207b205d2a2d2e29205b7b9f29742d5fd0837aba86b27953374b86027e9c3e2caa465a13482b8ca23eafa18323b0d2f63c5d732efd328fb0c0c679"], 0x78) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r0) [ 1876.306180] FAULT_INJECTION: forcing a failure. [ 1876.306180] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.308936] CPU: 1 PID: 11578 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1876.310599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.312582] Call Trace: [ 1876.313133] dump_stack+0x107/0x167 [ 1876.314091] should_fail.cold+0x5/0xa [ 1876.314890] ? __alloc_skb+0x6d/0x5b0 [ 1876.315765] should_failslab+0x5/0x20 [ 1876.316651] kmem_cache_alloc_node+0x55/0x330 [ 1876.317703] ? lock_downgrade+0x6d0/0x6d0 [ 1876.318706] __alloc_skb+0x6d/0x5b0 [ 1876.319556] ? security_socket_getpeersec_dgram+0x8c/0xb0 [ 1876.320861] netlink_sendmsg+0x998/0xdf0 [ 1876.321832] ? netlink_unicast+0x7f0/0x7f0 [ 1876.322891] ? netlink_unicast+0x7f0/0x7f0 [ 1876.323868] __sock_sendmsg+0x154/0x190 [ 1876.324822] ____sys_sendmsg+0x70d/0x870 [ 1876.325755] ? sock_write_iter+0x3d0/0x3d0 [ 1876.326783] ? do_recvmmsg+0x6d0/0x6d0 [ 1876.327586] ? perf_trace_lock+0xac/0x490 [ 1876.328445] ? __lockdep_reset_lock+0x180/0x180 [ 1876.329495] ? perf_trace_lock+0xac/0x490 [ 1876.330455] ? SOFTIRQ_verbose+0x10/0x10 [ 1876.331421] ___sys_sendmsg+0xf3/0x170 [ 1876.332368] ? sendmsg_copy_msghdr+0x160/0x160 [ 1876.333459] ? lock_downgrade+0x6d0/0x6d0 [ 1876.334474] ? find_held_lock+0x2c/0x110 [ 1876.335422] ? __fget_files+0x296/0x4c0 [ 1876.336383] ? __fget_light+0xea/0x290 [ 1876.337299] __sys_sendmsg+0xe5/0x1b0 [ 1876.338147] ? __sys_sendmsg_sock+0x40/0x40 [ 1876.339026] ? rcu_read_lock_any_held+0x75/0xa0 [ 1876.340204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1876.341287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1876.342599] ? trace_hardirqs_on+0x5b/0x180 [ 1876.343625] do_syscall_64+0x33/0x40 [ 1876.344521] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1876.345696] RIP: 0033:0x7fe17b63eb19 [ 1876.346496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.350562] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1876.352106] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1876.353604] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1876.355224] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1876.356812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1876.358350] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:01:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000014003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:01:59 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 4) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:01:59 executing program 0: statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x8, 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9101) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) dup(r0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x4482, 0x102) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00200000000000002e3d236474b6b02e1c2f66696c653100"]) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 18:01:59 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:01:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r5, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x3, 0x6, &(0x7f0000000740)=[{&(0x7f00000008c0)="52b62f5258a6fced3b78d2ba13d14a63985cbf50e6431f9541808f8b7aaabfb4bd1faf68593a86a11ac9be045551fac8fae0ae6bfaa5caa8cc0081c0d9a27fa07c0da3a70d20db1b0ba189de97bdd935176729e0478f57e6306b191c32cf2e6d87e2ad120e0a484b8567593ff7bea9fa9e200bcbad9397376eb397774f70d4b42a92503cbbe0eb8a895ed3f0b6331abbd4b9a4ec7b09aa3ea024e3143cd4fe4320ac12ee07e3d1b5eeed21f8f7b26a89bf412c718e72e1757698bf332b720aed7bc9d6dd54fdcb44cb80fd5489a8baf3c1c5a864795d3690a306badd5fe98200038dd05c87ff9e4af69c2d6538eb1b342086c760a1a107", 0xf7, 0x4}, {&(0x7f0000000380)="1ed057dd10eb4d256e9a2a872a90d4d5b60c25cb05bf6ea24d21e674dfe27459dcd4e3d8ab952383ccf814063a5c42da1a01dcdada02c8419570b0d78927a7d2022e4d5c534148efa24d9077c366b7f89a47d85016dde20efbae5a0c1604483281943024eab24e3cc190390b5d853bf6d170eb261844260c3bf76361033b6e1e66e42605426eef75bd1104d651b28e91ceeff55e4b3092779a28f656db932bd2801f9da4ddf3fec69718a96792b75dd91c7ceaab486bf472b169caa680b36634da65d2ed3069f8fea0d03c8c56aa56c0c33bf97ce9f61642289727fa89c5cef1", 0xe0, 0x3ff}, {&(0x7f0000000480)="2ef968690f6e02d6c9eef24dd2c32fb975fce8fe8321a4906591aa1f6f8cce64d9df81a2adf11cd34769cf13586761f14883d75eb212eca473df81ee04949a5f01e8b6a225cd3c0a037d9bb85361a880682a", 0x52, 0x77}, {&(0x7f0000000500)="15e14e3fd804007fdc2fa9ca17f60b816cd12c9c77d92a85c4782b495d85f0edfe07a36e83dffc36262dc62ad6929619f0f075d1f66ed10210c997d830faaa8e909a8e727facad55c12165598d68e761c4d4703d14b91e8a1186962a540e314afd990559506d92a5ca8035725005079887c685258356acc784c37f7d83c4878b47a45f97be57763cbe37d023e678710f2f7985deb9defc8f360e84d403a51b2a75eece4ab8a5d601cc82b73f9d03774ccebe45ba43b2f5fbea3ff9e9ac1881128c2816035cf353dd7da5e36c45f77500e0", 0xd1, 0x7}, {&(0x7f0000000600)="729fb4ce20fb0a4e103fac685633a5bdc8812be85bcddf653888e66861cb2b0308a394020e4f3c0d914df83f53fff37705576ddd26da0c5857dd42efe0e063bb961a6fa1ab36c7625f7dbd7ac2e573550dee08ff1e149115b903c71111d101e2aa05103a83b3667af29c859954c266e6084b26d9b24afc87696b9d57b3141c5e2d4b480d2c8f9734bd1816b92db607af01d5ed4e23ef56099a1376e7674b1cedb1e0847da5d19a37bc7179d46144e7e6d3e248bebb58fc32ca78dbe463b1342198d45f5496d7f4557ec84ca854baa13be4d5869237e9196b4c1a", 0xda, 0xffffffffffff8000}, {&(0x7f0000000700)="11790849bd5f068aefae1c065be595da7f00e92fa3be", 0x16, 0x1}], 0x840, &(0x7f00000009c0)=ANY=[@ANYBLOB="73657373696f6e3d30783030303030523030303030300f3ceb8b2731426f423347f8303032322c6e6f6a6f6c6965742c646d6f65653d3078303030303030303030303030303030322c6e6f636f6d70726573732c686964652c6f76657272696465726f636b7065726d2c736d61636b6673726f6f743d736d6170735f726f6c6c7570002c646f6e745f61707072616973652c646566636f6e746578743d726f6f742c00b966e68dcd59eb5a911107f643fe2decbd7d38b92aef0561627344b3c17b00dba0693316055173cbb8af16f5433d43df1c1911900f428489e19b75a0c9deaa1c65c7a449c76115e211849fced34e5b4256598876dff7b524a3e390c4546a6e653505d1050eab43e3a84d02e917976f4adc8e2be032d65054b5d80d40f9101ab007e65c1f252d3d021f2ce3f107e95cc7ce8e70dedb2b588172f6fce7"]) readv(r6, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) sendfile(r6, r3, 0x0, 0x8) 18:01:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 4) 18:01:59 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x6f) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="b01600000d01928626005a00000000000000000000000008", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x16b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044110) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r5}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:01:59 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc0000, 0xc0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r1, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xfffffffffffffe6f) getsockopt$sock_buf(r4, 0x1, 0x3b, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xc, 0x20, 0x81, 0x3, 0x0, 0x10000, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1f7, 0x2}, 0x4420, 0x101, 0x2, 0x7, 0x2f, 0x0, 0x5, 0x0, 0x10000, 0x0, 0x7fff}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1890.824441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1890.844642] FAULT_INJECTION: forcing a failure. [ 1890.844642] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.848327] CPU: 0 PID: 11596 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1890.850032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1890.852056] Call Trace: [ 1890.852688] dump_stack+0x107/0x167 [ 1890.853560] should_fail.cold+0x5/0xa [ 1890.854336] ? create_object.isra.0+0x3a/0xa20 [ 1890.855243] should_failslab+0x5/0x20 [ 1890.855262] kmem_cache_alloc+0x5b/0x310 [ 1890.855288] create_object.isra.0+0x3a/0xa20 [ 1890.855319] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1890.858724] kmem_cache_alloc_node+0x169/0x330 [ 1890.859640] __alloc_skb+0x6d/0x5b0 [ 1890.860367] netlink_sendmsg+0x998/0xdf0 [ 1890.861177] ? netlink_unicast+0x7f0/0x7f0 [ 1890.862048] ? netlink_unicast+0x7f0/0x7f0 [ 1890.862913] __sock_sendmsg+0x154/0x190 [ 1890.863719] ____sys_sendmsg+0x70d/0x870 [ 1890.864558] ? sock_write_iter+0x3d0/0x3d0 [ 1890.865414] ? do_recvmmsg+0x6d0/0x6d0 [ 1890.866225] ? perf_trace_lock+0xac/0x490 [ 1890.867075] ? __lockdep_reset_lock+0x180/0x180 [ 1890.868012] ? perf_trace_lock+0xac/0x490 [ 1890.868851] ? SOFTIRQ_verbose+0x10/0x10 [ 1890.869682] ___sys_sendmsg+0xf3/0x170 [ 1890.870480] ? sendmsg_copy_msghdr+0x160/0x160 [ 1890.871402] ? lock_downgrade+0x6d0/0x6d0 [ 1890.872248] ? find_held_lock+0x2c/0x110 [ 1890.873079] ? __fget_files+0x296/0x4c0 [ 1890.873903] ? __fget_light+0xea/0x290 [ 1890.874717] __sys_sendmsg+0xe5/0x1b0 [ 1890.875483] ? __sys_sendmsg_sock+0x40/0x40 [ 1890.876348] ? rcu_read_lock_any_held+0x75/0xa0 [ 1890.877306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1890.878365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1890.879394] ? trace_hardirqs_on+0x5b/0x180 [ 1890.880266] do_syscall_64+0x33/0x40 [ 1890.881014] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1890.882040] RIP: 0033:0x7f119335cb19 [ 1890.882801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1890.886502] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1890.888030] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1890.889456] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1890.890895] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1890.892328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.893761] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 18:01:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1890.948644] FAULT_INJECTION: forcing a failure. [ 1890.948644] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.950984] CPU: 0 PID: 11611 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1890.952389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1890.954076] Call Trace: [ 1890.954617] dump_stack+0x107/0x167 [ 1890.955371] should_fail.cold+0x5/0xa [ 1890.956154] ? create_object.isra.0+0x3a/0xa20 [ 1890.957091] should_failslab+0x5/0x20 [ 1890.957857] kmem_cache_alloc+0x5b/0x310 [ 1890.958694] ? find_held_lock+0x2c/0x110 [ 1890.959516] create_object.isra.0+0x3a/0xa20 [ 1890.960401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1890.961428] kmem_cache_alloc_node+0x169/0x330 [ 1890.962353] ? lock_downgrade+0x6d0/0x6d0 [ 1890.963199] __alloc_skb+0x6d/0x5b0 [ 1890.963940] ? security_socket_getpeersec_dgram+0x8c/0xb0 [ 1890.965050] netlink_sendmsg+0x998/0xdf0 [ 1890.965875] ? netlink_unicast+0x7f0/0x7f0 [ 1890.966769] ? netlink_unicast+0x7f0/0x7f0 [ 1890.967624] __sock_sendmsg+0x154/0x190 [ 1890.968446] ____sys_sendmsg+0x70d/0x870 [ 1890.969268] ? sock_write_iter+0x3d0/0x3d0 [ 1890.970140] ? do_recvmmsg+0x6d0/0x6d0 [ 1890.970923] ? perf_trace_lock+0xac/0x490 [ 1890.971771] ? __lockdep_reset_lock+0x180/0x180 [ 1890.972706] ? perf_trace_lock+0xac/0x490 [ 1890.973539] ? SOFTIRQ_verbose+0x10/0x10 [ 1890.974376] ___sys_sendmsg+0xf3/0x170 [ 1890.975170] ? sendmsg_copy_msghdr+0x160/0x160 [ 1890.976094] ? lock_downgrade+0x6d0/0x6d0 [ 1890.976934] ? find_held_lock+0x2c/0x110 [ 1890.977765] ? __fget_files+0x296/0x4c0 [ 1890.978594] ? __fget_light+0xea/0x290 [ 1890.979392] __sys_sendmsg+0xe5/0x1b0 [ 1890.980156] ? __sys_sendmsg_sock+0x40/0x40 [ 1890.981024] ? rcu_read_lock_any_held+0x75/0xa0 [ 1890.981981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1890.983040] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1890.984086] ? trace_hardirqs_on+0x5b/0x180 [ 1890.984966] do_syscall_64+0x33/0x40 [ 1890.985731] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1890.986772] RIP: 0033:0x7fe17b63eb19 [ 1890.987527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1890.991288] RSP: 002b:00007fe178b72188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1890.992812] RAX: ffffffffffffffda RBX: 00007fe17b7520e0 RCX: 00007fe17b63eb19 [ 1890.994251] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1890.995682] RBP: 00007fe178b721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1890.997108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.998571] R13: 00007ffc7e7f69df R14: 00007fe178b72300 R15: 0000000000022000 18:01:59 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:01:59 executing program 5: flock(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x100, 0xff, 0xa, 0x7fbc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x7fffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/custom1\x00', 0x0, 0x0) openat(r0, &(0x7f0000000600)='./file0\x00', 0x402002, 0x8) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="a10bc996557fb09f331886026c6a89d3f78bb4e4a7d80e76e0683b29a293df5b3d22566002866b2dc2be05e249d20bfe81af5cef741f303d62a8fff4eef36eaa0d46cf3cbf3ec0fb40db830a13fd95109511353c93bf66c38b2d9f9327ecbf5b7bb1313f3a1dc45bd89950448b93d380e6ad1f5c1dfcd90f78a58f90c6d3d170522c1d4f4970f31099d040412cf3c39d0acc98dd64e127f112ede6c93c9175641f696ed0a07e7a598579482ea726bb72f485a24924d2b6345218d2bdbae6c44463e2d1262fc33aab0da1193dbc73170e61c4b0638c0bffffd3f27319b2a3a1fa6a2f49123a24e9fb7b535b9c6418567fe480e37c7ee8c0a954", 0xf9}, {&(0x7f00000002c0)="36e7877fbdb1b1c86663e4724ac68d006abaa654c1d30253e2de0d2df1934a4dd81f59effb99d1418ed22830776296d46a8d84e209e38f57a1fcfd11590e2f48eee6aa95411593e0c60c892a625b47ef2e8edbd63cca24c4f84ffda2d35562aac49a67691173176a79677f22f9bfde7300e773551954f4ed7edd646c32f177a5989a7a9e277ada1bee58129c37488b71da96ea0ae26b4df313c608d042f11014e36ef052b60f86905d4d16fc70c944ba88ddd89e9efe82c0ba22f9fa0bd493f9d2cb061c6685efdfd5f55e92275c4974e792422b7aee7ac1a1f147", 0xdb}, {&(0x7f00000004c0)="7537947e88ddab3209118d519e64ea0c3c6839eebd41e7c096fdb41835cfdb941ef8abb1293863e14e7b927c0d59149945b1f1714289b6cd1820fd8354ada275fa89cfc2f991af460e120f55b41183b03333db14a7e96347d2c657e798343c7d0211d1f5a71453af800f85f280b1bf8d4cdc8d77ebf9ab5b86b7dbbe6cae0d55ae526cc9877ce205607a44a9ee31bb5a58cf154e6d5ef5c558bf4388de608a34e88107e043b1776fb4f773e90a272a37d4c178a499fc4d84694f3a1e95", 0xbd}, {&(0x7f00000000c0)="3d79654840f851b1a80d32d3c248acc6fb2411787e8564eb4b194fc410a1290f5d6ba64839544fcf3ebcdd7e7ed1935b181e8ca54becca", 0x37}], 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x6, &(0x7f0000000400)=[{0x4, 0xff, 0x81, 0x5}, {0x5, 0x3f, 0x0, 0xffffffff}, {0x9, 0x0, 0xff, 0x81}, {0x100, 0xff, 0xff, 0x100}, {0x3, 0x4, 0x7f, 0xa36f}, {0x1, 0x4, 0xf7, 0xff}]}) [ 1891.132780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1891.154452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1891.165464] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1891.167457] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1891.168539] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1891.170296] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:01:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000016003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:01:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 5) 18:01:59 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 5) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:01:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0xce, 0x8, 0x2, 0x7a, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r5, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5}, 0x1) pwrite64(r1, &(0x7f00000000c0)="a3", 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0), 0xca680, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x80000000, &(0x7f0000000240)=[r8, r1, r9, r7, 0xffffffffffffffff, r1, r1, r6, r6], 0x9, 0x0, 0x1, {0x0, r10}}, 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000200)="c0", 0x1}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) [ 1891.367737] EXT4-fs (loop5): unsupported inode size: 0 [ 1891.369061] EXT4-fs (loop5): blocksize: 2048 [ 1891.423443] FAULT_INJECTION: forcing a failure. [ 1891.423443] name failslab, interval 1, probability 0, space 0, times 0 [ 1891.426052] CPU: 0 PID: 11634 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1891.427477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1891.429180] Call Trace: [ 1891.429730] dump_stack+0x107/0x167 [ 1891.430488] should_fail.cold+0x5/0xa [ 1891.431286] should_failslab+0x5/0x20 [ 1891.432078] __kmalloc_node_track_caller+0x74/0x3b0 [ 1891.433107] ? netlink_sendmsg+0x998/0xdf0 [ 1891.433974] __alloc_skb+0xb1/0x5b0 [ 1891.434735] netlink_sendmsg+0x998/0xdf0 [ 1891.435563] ? netlink_unicast+0x7f0/0x7f0 [ 1891.436436] ? netlink_unicast+0x7f0/0x7f0 [ 1891.437296] __sock_sendmsg+0x154/0x190 [ 1891.438110] ____sys_sendmsg+0x70d/0x870 [ 1891.438940] ? sock_write_iter+0x3d0/0x3d0 [ 1891.439790] ? do_recvmmsg+0x6d0/0x6d0 [ 1891.440581] ? perf_trace_lock+0xac/0x490 [ 1891.441425] ? __lockdep_reset_lock+0x180/0x180 [ 1891.442381] ? perf_trace_lock+0xac/0x490 [ 1891.443219] ? SOFTIRQ_verbose+0x10/0x10 [ 1891.443466] EXT4-fs (loop5): unsupported inode size: 0 [ 1891.444036] ___sys_sendmsg+0xf3/0x170 [ 1891.444059] ? sendmsg_copy_msghdr+0x160/0x160 [ 1891.444086] ? lock_downgrade+0x6d0/0x6d0 [ 1891.444110] ? find_held_lock+0x2c/0x110 [ 1891.445268] EXT4-fs (loop5): blocksize: 2048 [ 1891.446012] ? __fget_files+0x296/0x4c0 [ 1891.446045] ? __fget_light+0xea/0x290 [ 1891.451015] __sys_sendmsg+0xe5/0x1b0 [ 1891.451784] ? __sys_sendmsg_sock+0x40/0x40 [ 1891.452656] ? rcu_read_lock_any_held+0x75/0xa0 [ 1891.453616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1891.454686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1891.455732] ? trace_hardirqs_on+0x5b/0x180 [ 1891.456613] do_syscall_64+0x33/0x40 [ 1891.457367] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1891.458431] RIP: 0033:0x7f119335cb19 [ 1891.459187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1891.462902] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1891.464439] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1891.465880] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1891.467338] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1891.468763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.470214] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1891.496967] FAULT_INJECTION: forcing a failure. [ 1891.496967] name failslab, interval 1, probability 0, space 0, times 0 [ 1891.499387] CPU: 1 PID: 11641 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1891.500799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1891.502504] Call Trace: [ 1891.503047] dump_stack+0x107/0x167 [ 1891.503796] should_fail.cold+0x5/0xa [ 1891.504592] should_failslab+0x5/0x20 [ 1891.505372] __kmalloc_node_track_caller+0x74/0x3b0 [ 1891.506406] ? netlink_sendmsg+0x998/0xdf0 [ 1891.507269] ? lock_downgrade+0x6d0/0x6d0 [ 1891.508110] __alloc_skb+0xb1/0x5b0 [ 1891.508861] netlink_sendmsg+0x998/0xdf0 [ 1891.509687] ? netlink_unicast+0x7f0/0x7f0 [ 1891.510579] ? netlink_unicast+0x7f0/0x7f0 [ 1891.511431] __sock_sendmsg+0x154/0x190 [ 1891.512247] ____sys_sendmsg+0x70d/0x870 [ 1891.513071] ? sock_write_iter+0x3d0/0x3d0 [ 1891.513934] ? do_recvmmsg+0x6d0/0x6d0 [ 1891.514726] ? perf_trace_lock+0xac/0x490 [ 1891.515582] ? __lockdep_reset_lock+0x180/0x180 [ 1891.516513] ? perf_trace_lock+0xac/0x490 [ 1891.517361] ? SOFTIRQ_verbose+0x10/0x10 [ 1891.518202] ___sys_sendmsg+0xf3/0x170 [ 1891.519001] ? sendmsg_copy_msghdr+0x160/0x160 [ 1891.519927] ? lock_downgrade+0x6d0/0x6d0 [ 1891.520783] ? find_held_lock+0x2c/0x110 [ 1891.521612] ? __fget_files+0x296/0x4c0 [ 1891.522446] ? __fget_light+0xea/0x290 [ 1891.523238] __sys_sendmsg+0xe5/0x1b0 [ 1891.524021] ? __sys_sendmsg_sock+0x40/0x40 [ 1891.524889] ? rcu_read_lock_any_held+0x75/0xa0 [ 1891.525860] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1891.526925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1891.527974] ? trace_hardirqs_on+0x5b/0x180 [ 1891.528853] do_syscall_64+0x33/0x40 [ 1891.529612] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1891.530670] RIP: 0033:0x7fe17b63eb19 [ 1891.531432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1891.535120] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1891.536676] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1891.538139] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1891.539602] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1891.541036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.542505] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:02:00 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:02:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000018003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1891.589387] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1891.591389] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1891.592470] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1891.594263] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:02:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r5, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x3, 0x6, &(0x7f0000000740)=[{&(0x7f00000008c0)="52b62f5258a6fced3b78d2ba13d14a63985cbf50e6431f9541808f8b7aaabfb4bd1faf68593a86a11ac9be045551fac8fae0ae6bfaa5caa8cc0081c0d9a27fa07c0da3a70d20db1b0ba189de97bdd935176729e0478f57e6306b191c32cf2e6d87e2ad120e0a484b8567593ff7bea9fa9e200bcbad9397376eb397774f70d4b42a92503cbbe0eb8a895ed3f0b6331abbd4b9a4ec7b09aa3ea024e3143cd4fe4320ac12ee07e3d1b5eeed21f8f7b26a89bf412c718e72e1757698bf332b720aed7bc9d6dd54fdcb44cb80fd5489a8baf3c1c5a864795d3690a306badd5fe98200038dd05c87ff9e4af69c2d6538eb1b342086c760a1a107", 0xf7, 0x4}, {&(0x7f0000000380)="1ed057dd10eb4d256e9a2a872a90d4d5b60c25cb05bf6ea24d21e674dfe27459dcd4e3d8ab952383ccf814063a5c42da1a01dcdada02c8419570b0d78927a7d2022e4d5c534148efa24d9077c366b7f89a47d85016dde20efbae5a0c1604483281943024eab24e3cc190390b5d853bf6d170eb261844260c3bf76361033b6e1e66e42605426eef75bd1104d651b28e91ceeff55e4b3092779a28f656db932bd2801f9da4ddf3fec69718a96792b75dd91c7ceaab486bf472b169caa680b36634da65d2ed3069f8fea0d03c8c56aa56c0c33bf97ce9f61642289727fa89c5cef1", 0xe0, 0x3ff}, {&(0x7f0000000480)="2ef968690f6e02d6c9eef24dd2c32fb975fce8fe8321a4906591aa1f6f8cce64d9df81a2adf11cd34769cf13586761f14883d75eb212eca473df81ee04949a5f01e8b6a225cd3c0a037d9bb85361a880682a", 0x52, 0x77}, {&(0x7f0000000500)="15e14e3fd804007fdc2fa9ca17f60b816cd12c9c77d92a85c4782b495d85f0edfe07a36e83dffc36262dc62ad6929619f0f075d1f66ed10210c997d830faaa8e909a8e727facad55c12165598d68e761c4d4703d14b91e8a1186962a540e314afd990559506d92a5ca8035725005079887c685258356acc784c37f7d83c4878b47a45f97be57763cbe37d023e678710f2f7985deb9defc8f360e84d403a51b2a75eece4ab8a5d601cc82b73f9d03774ccebe45ba43b2f5fbea3ff9e9ac1881128c2816035cf353dd7da5e36c45f77500e0", 0xd1, 0x7}, {&(0x7f0000000600)="729fb4ce20fb0a4e103fac685633a5bdc8812be85bcddf653888e66861cb2b0308a394020e4f3c0d914df83f53fff37705576ddd26da0c5857dd42efe0e063bb961a6fa1ab36c7625f7dbd7ac2e573550dee08ff1e149115b903c71111d101e2aa05103a83b3667af29c859954c266e6084b26d9b24afc87696b9d57b3141c5e2d4b480d2c8f9734bd1816b92db607af01d5ed4e23ef56099a1376e7674b1cedb1e0847da5d19a37bc7179d46144e7e6d3e248bebb58fc32ca78dbe463b1342198d45f5496d7f4557ec84ca854baa13be4d5869237e9196b4c1a", 0xda, 0xffffffffffff8000}, {&(0x7f0000000700)="11790849bd5f068aefae1c065be595da7f00e92fa3be", 0x16, 0x1}], 0x840, &(0x7f00000009c0)=ANY=[@ANYBLOB="73657373696f6e3d30783030303030523030303030300f3ceb8b2731426f423347f8303032322c6e6f6a6f6c6965742c646d6f65653d3078303030303030303030303030303030322c6e6f636f6d70726573732c686964652c6f76657272696465726f636b7065726d2c736d61636b6673726f6f743d736d6170735f726f6c6c7570002c646f6e745f61707072616973652c646566636f6e746578743d726f6f742c00b966e68dcd59eb5a911107f643fe2decbd7d38b92aef0561627344b3c17b00dba0693316055173cbb8af16f5433d43df1c1911900f428489e19b75a0c9deaa1c65c7a449c76115e211849fced34e5b4256598876dff7b524a3e390c4546a6e653505d1050eab43e3a84d02e917976f4adc8e2be032d65054b5d80d40f9101ab007e65c1f252d3d021f2ce3f107e95cc7ce8e70dedb2b588172f6fce7"]) readv(r6, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) sendfile(r6, r3, 0x0, 0x8) 18:02:00 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r1, 0x9e46, 0x0) getdents64(r1, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r4 = accept(r3, &(0x7f0000000280)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000300)={0x7fff, 0x9}) dup(r3) ppoll(&(0x7f0000000100)=[{r2, 0x3000}, {r1, 0x8600}, {r0, 0x4234}], 0x3, &(0x7f0000000140), &(0x7f0000000180)={[0x1000]}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x3a}}) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 18:02:00 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x40) write$P9_RREADLINK(r1, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x2f40, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0) [ 1891.773717] 9pnet: Insufficient options for proto=fd 18:02:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 6) 18:02:15 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 6) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:02:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x3, 0x6, &(0x7f0000000740)=[{&(0x7f00000008c0)="52b62f5258a6fced3b78d2ba13d14a63985cbf50e6431f9541808f8b7aaabfb4bd1faf68593a86a11ac9be045551fac8fae0ae6bfaa5caa8cc0081c0d9a27fa07c0da3a70d20db1b0ba189de97bdd935176729e0478f57e6306b191c32cf2e6d87e2ad120e0a484b8567593ff7bea9fa9e200bcbad9397376eb397774f70d4b42a92503cbbe0eb8a895ed3f0b6331abbd4b9a4ec7b09aa3ea024e3143cd4fe4320ac12ee07e3d1b5eeed21f8f7b26a89bf412c718e72e1757698bf332b720aed7bc9d6dd54fdcb44cb80fd5489a8baf3c1c5a864795d3690a306badd5fe98200038dd05c87ff9e4af69c2d6538eb1b342086c760a1a107", 0xf7, 0x4}, {&(0x7f0000000380)="1ed057dd10eb4d256e9a2a872a90d4d5b60c25cb05bf6ea24d21e674dfe27459dcd4e3d8ab952383ccf814063a5c42da1a01dcdada02c8419570b0d78927a7d2022e4d5c534148efa24d9077c366b7f89a47d85016dde20efbae5a0c1604483281943024eab24e3cc190390b5d853bf6d170eb261844260c3bf76361033b6e1e66e42605426eef75bd1104d651b28e91ceeff55e4b3092779a28f656db932bd2801f9da4ddf3fec69718a96792b75dd91c7ceaab486bf472b169caa680b36634da65d2ed3069f8fea0d03c8c56aa56c0c33bf97ce9f61642289727fa89c5cef1", 0xe0, 0x3ff}, {&(0x7f0000000480)="2ef968690f6e02d6c9eef24dd2c32fb975fce8fe8321a4906591aa1f6f8cce64d9df81a2adf11cd34769cf13586761f14883d75eb212eca473df81ee04949a5f01e8b6a225cd3c0a037d9bb85361a880682a", 0x52, 0x77}, {&(0x7f0000000500)="15e14e3fd804007fdc2fa9ca17f60b816cd12c9c77d92a85c4782b495d85f0edfe07a36e83dffc36262dc62ad6929619f0f075d1f66ed10210c997d830faaa8e909a8e727facad55c12165598d68e761c4d4703d14b91e8a1186962a540e314afd990559506d92a5ca8035725005079887c685258356acc784c37f7d83c4878b47a45f97be57763cbe37d023e678710f2f7985deb9defc8f360e84d403a51b2a75eece4ab8a5d601cc82b73f9d03774ccebe45ba43b2f5fbea3ff9e9ac1881128c2816035cf353dd7da5e36c45f77500e0", 0xd1, 0x7}, {&(0x7f0000000600)="729fb4ce20fb0a4e103fac685633a5bdc8812be85bcddf653888e66861cb2b0308a394020e4f3c0d914df83f53fff37705576ddd26da0c5857dd42efe0e063bb961a6fa1ab36c7625f7dbd7ac2e573550dee08ff1e149115b903c71111d101e2aa05103a83b3667af29c859954c266e6084b26d9b24afc87696b9d57b3141c5e2d4b480d2c8f9734bd1816b92db607af01d5ed4e23ef56099a1376e7674b1cedb1e0847da5d19a37bc7179d46144e7e6d3e248bebb58fc32ca78dbe463b1342198d45f5496d7f4557ec84ca854baa13be4d5869237e9196b4c1a", 0xda, 0xffffffffffff8000}, {&(0x7f0000000700)="11790849bd5f068aefae1c065be595da7f00e92fa3be", 0x16, 0x1}], 0x840, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) readv(r5, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 18:02:15 executing program 0: r0 = fork() ptrace(0x10, r0) waitid(0x1, r0, &(0x7f00000001c0), 0x4, &(0x7f00000003c0)) waitid(0x2, r0, &(0x7f00000000c0), 0x1, &(0x7f0000000240)) r1 = getpgrp(r0) move_pages(r1, 0x5, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x80, 0x1, 0x6}, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}]) r2 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$peeksig(0x4209, r2, &(0x7f0000000000)={0xc00000000, 0x0, 0x8}, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}]) 18:02:15 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000019003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:02:15 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000080)={0xa68, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_TID_CONFIG={0xa40, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x92}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf}]}, {0x540, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x81}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x524, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff9, 0x1000, 0x565c, 0x401, 0x1, 0x20, 0x400]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x3, 0x7}, {0x4, 0x3}, {0x7, 0x2}, {0x5, 0x7}, {0x7}, {0x5, 0x3}, {0x5}, {0x5, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x7, 0x3}, {0x6, 0x5}, {0x1, 0x9}, {0x5, 0x2}, {0x0, 0x3}, {0x3, 0x3}, {0x2, 0x3}, {0x4, 0x8}, {0x3, 0x8}, {0x1, 0x2}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x7}, {0x6, 0x3}, {0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {}, {0x4}, {0x6, 0x9}, {0x7, 0x2}, {0x5, 0x7}, {0x5, 0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x3, 0xa}, {0x4, 0xa}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x1}, {0x3, 0x8}, {0x2}, {0x7, 0x5}, {0x4, 0x7}, {0x7, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3eb, 0x2a0b, 0x8, 0x3, 0xab, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x0, 0x7, 0xceba, 0x1, 0x3, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d, 0x401, 0x3ef0, 0x1, 0x6, 0xb74, 0x5, 0x78b7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x6, 0xa}, {0x5, 0x7}, {0x7, 0x2}, {0x5, 0x6}, {0x7}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x5}]}]}, @NL80211_BAND_5GHZ={0xf0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x2}, {0x7, 0x1}, {0x2, 0x2}, {0x1, 0x4}, {0x7}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x1}, {0x1, 0x9}, {0x7, 0x5}, {0x3, 0x9}, {0x2, 0x6}, {0x7, 0xa}, {0x7}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x4}, {0x5, 0x7}, {0x2, 0x6}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x0, 0x9}, {0x5}, {0x2}, {0x7, 0x6}, {0x4, 0x5}, {0x2, 0x4}, {0x6, 0x3}, {0x7, 0x7}, {0x2, 0x4}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0xa}, {0x2, 0x2}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x6}, {0x1, 0xa}, {0x3}, {0x0, 0x4}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x1}, {0x4, 0x5}, {0x7, 0x6}, {0x1, 0x3}, {0x3, 0x2}, {0x1, 0x9}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x8}, {0x6, 0x4}, {}, {0x7, 0x4}, {0x5, 0x4}, {0x6, 0x2}, {0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x9}, {0x1, 0x7}, {0x1, 0x7}, {0x6}, {0x2, 0x9}, {0x2, 0xa}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x8}, {0x4}, {0x3, 0x7}, {0x0, 0x3}, {0x7, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x7}, {0x2, 0x10}, {0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x1}, {0x2, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x5}, {0x7}, {0x7, 0x5}, {0x5, 0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x7}, {0x2}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x1}, {0x5, 0x7}, {0x6, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x6}, {0x7, 0x1}, {0x2, 0x9}, {0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x9}, {0x3, 0x4}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x4}, {0x6, 0xa}, {0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x6}, {0x0, 0x3}, {0x2}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x8}, {0x7, 0x7}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x8}, {0x4}, {0x6, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x1}, {0x1}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x6, 0x9}, {0x3, 0x8}, {0x3, 0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x9}, {0x6, 0x9}, {0x2, 0x7}, {}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x6, 0x3}, {0x5, 0x2}, {0x6}, {0x6, 0x5}, {0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x3, 0x7}, {0x6, 0x4}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x1}, {0x4, 0x1}, {0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0x4}, {0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x4}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x5}, {0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x6, 0x3}, {0x3, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x2, 0xf}, {}, {0x5, 0x3}, {0x2, 0xa}, {0x4, 0x4}, {0x4, 0x5}, {0x4}, {0x0, 0x5}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x6}, {}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x5}, {0x7, 0x9}, {0x5, 0x6}, {0x7, 0x5}, {0x6, 0x9}, {0x7, 0xa}, {0x1, 0x3}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x5}, {0x5, 0x5}, {}, {0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x3, 0xa}, {0x4, 0x1}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0x2}, {0x2, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {}, {0x0, 0x3}, {0x5, 0x1}, {0x6, 0x4}, {0x2, 0x4}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0x4}, {0x2, 0x3}, {0x6, 0x2}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0xa}, {0x4, 0x2}, {0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {}, {0x7, 0x3}, {0x0, 0x7}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x7}, {}, {0x4, 0xa}, {0x0, 0x1}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x2, 0x8}, {0x5, 0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x2}, {0x1}, {0x5, 0x7}, {0x2, 0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x8}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x3}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x3}, {0x3, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x3}, {0x5}, {0x3, 0x8}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x6, 0x1}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x3}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x3}, {0x6, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x8}, {0x1}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x9}, {0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x5}, {0x5, 0x5}, {0x5, 0xa}, {}, {0x6, 0x6}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {}, {0x6, 0x1f}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x7}, {0x6, 0x8}, {0x7, 0xa}, {0x7, 0x6}, {0x5, 0x9}, {0x1, 0x3}, {0x5, 0xa}, {0x3, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x5, 0xa}, {0x6, 0x2}, {0x6, 0xa}, {0x3, 0x4}, {0x3}, {0x6, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x36, 0x9, 0x1, 0x1b, 0xc, 0x5, 0x6, 0x16, 0x9, 0xc, 0x18, 0x18, 0x4, 0x16, 0x1b, 0x36, 0x24, 0x6, 0x48, 0x18, 0x30, 0x30, 0x6c, 0x0, 0x24, 0x2, 0x5, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x1}, {0x0, 0x8}, {0x3}, {0x5, 0x9}]}]}, @NL80211_BAND_6GHZ={0x110, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf20, 0x3485, 0x7, 0xffe0, 0x1, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x8}, {0x6, 0x8}, {0x2, 0x6}, {0x7, 0x3}, {0x5, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x6}, {0x2}, {0x2, 0x6}, {0x3, 0x3}, {0x3, 0x7}, {0x4, 0x9}, {0x7, 0x5}, {0x3, 0x9}, {0x6, 0x5}, {0x6, 0xa}, {0x5, 0xa}, {0x6, 0xa}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x9}, {0x3, 0x2}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x6}, {0x4, 0x4}, {0x1}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x4}, {0x3, 0xa}, {0x6, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x7, 0xa}, {0x6, 0x1}, {0x5, 0x4}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x5}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x1}, {0x3, 0x2}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0x5}, {0x1, 0x7}, {0x7, 0x4}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0xa}, {0x7, 0xa}, {0x0, 0x4}, {0x4, 0xa}, {0x4, 0x4}, {0x4, 0x8}, {0x5, 0x3}, {0x7, 0x8}, {0x3, 0x9}, {0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x1}, {0x5, 0x7}, {0x6, 0x6}, {0x0, 0x4}, {0x4, 0x1}, {0x6, 0xa}, {0x2, 0x2}, {0x7, 0x8}, {0x5}, {0x4, 0x1}, {0x2, 0x3}, {0x6, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x1}, {0x6}, {0x6, 0x6}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0xa}, {}, {0x5, 0xa}, {0x0, 0x3}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x3, 0x5}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x7}, {0x3}, {0x1, 0x5}, {0x2, 0xa}, {0x3, 0x9}, {0x4}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x4}, {0x6, 0x9}, {0x3, 0x2}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x8}, {0x6}, {0x0, 0x2}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x93, 0xfffc, 0x5, 0x8, 0x1, 0x4, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x2}, {0x4, 0x7}, {0x6, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x4}, {0x3, 0x8}, {0x5, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {}, {0x0, 0x3}, {0x6, 0x9}, {0x7, 0xa}, {0x5, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x4}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x2}, {0x6, 0xa}, {0x0, 0x7}, {0x4}, {0x1, 0x9}, {0x1}, {0x3, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x80, 0x0, 0x7, 0x7fff, 0x7, 0xfff, 0xa62]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x3, 0x5}, {}, {0x1, 0x6}, {0x7, 0x1}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x4}, {0x6}, {0x5, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x3}, {0x2, 0x4}, {0x6, 0xa}, {0x3, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x1, 0x3}, {0x2, 0x4}, {0x6}, {0x5, 0x3}, {0x5, 0x1c}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x7}, {0x0, 0x6}, {0x2}, {0x0, 0x5}, {0x4, 0x3}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x4}, {0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x9}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x2, 0xe}, {0x7, 0x8}, {0x4, 0x9}, {}, {0x6, 0x9}, {0x2, 0x4}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x4}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0x6}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x26c2, 0x2, 0x8001, 0x90, 0x9b5a, 0x81, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x60, 0xc56f2b0863e7d205, 0x9, 0x1b, 0x24, 0x6, 0x9, 0x24, 0x6c, 0x60, 0x18, 0x6c, 0x1b, 0x2, 0x1, 0x60, 0xf, 0x16, 0x10edaa033b5b8d7d, 0x1b, 0x6, 0xb, 0x30, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x7, 0x800, 0x84, 0x4, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x101, 0x5, 0x80, 0x8a2f, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x2}, {0x1, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff, 0x7, 0x1ff, 0x0, 0x7b, 0x1, 0x6]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3f, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff9, 0xfffc, 0x5, 0x38f, 0xc9, 0x99c, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4c, 0xb, 0x36, 0x24, 0x12, 0xb, 0x48, 0x60, 0xc, 0x9, 0x60, 0x1b, 0x36, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x3a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3ff, 0x1, 0xb82, 0xf405, 0x1, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x5}, {0x7, 0x8}, {0x7, 0x4}, {0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x7, 0x9}, {0x5}, {0x0, 0x7}, {0x2, 0x3}, {0x4, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x2, 0xa}, {0x4, 0x2}, {0x3, 0x3}, {0x5}, {0x0, 0xa}, {0x7, 0x2}, {0x7}, {0x5, 0xa}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0x6}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x6}, {0x4, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x1}, {0x4}, {0x2, 0x3}, {0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x7}, {0x3, 0x6}, {0x3, 0x9}, {0x7}, {0x5, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x6, 0x8}, {0x6, 0x7}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x3, 0x5}, {0x2, 0x4}, {0x7, 0xa}, {0x4, 0xa}, {}, {0x6, 0x1}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x401, 0x1000, 0x2, 0x9, 0x1, 0xa40e, 0x4]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x9}, {0x5}, {0x1, 0x8}, {}, {0x3}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x6}, {0x7, 0x2}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0x3}, {0x5, 0x4}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x6}, {0x4, 0x9}, {0x6}, {0x4, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x9, 0x18, 0x1, 0x30, 0x48, 0x5, 0x36, 0x2, 0x5, 0x16, 0x4, 0x6c, 0xc, 0x6, 0x18, 0x60, 0x3, 0x16, 0x6dca9af6f7450fe2, 0x1, 0x6, 0x24, 0x2, 0x1, 0x30, 0x9, 0x30, 0x0, 0x18, 0x36]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x104, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x100, 0x1, 0x87, 0xffff, 0xd6, 0x9, 0xff]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x6, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x6}, {0x1, 0x9}, {0x2, 0x6}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0xa}, {0x3, 0x6}, {0x0, 0x7}, {0x6}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x5}, {0x7, 0x5}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x7}, {0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0xa}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0x7}, {0x4, 0x2}, {0x0, 0x1}, {0x5, 0x7}, {0x7, 0x3}, {0x3, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe01, 0x100, 0x400, 0x20, 0x5, 0x9, 0x5, 0x200]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x1}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x8}, {0x1, 0x18}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x6, 0x5}, {0x2, 0x3}, {0x2, 0x5}, {0x3, 0xa}, {0x2, 0x2}, {}, {0x4, 0x5}, {0x1, 0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {0x3, 0x4}, {0x6, 0x9}, {0x6, 0x9}, {0x1, 0xa}, {0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x2}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x9}, {0x1}, {0x2, 0x8}, {0x6, 0x5}, {0x4, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x4}, {0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x7}, {0x2, 0x5}, {0x2, 0x7}, {0x1}, {0x7, 0x3}, {0x1}, {0x6, 0x4}, {0x6, 0x5}, {0x3, 0x6}, {0x3, 0x9}, {0x3, 0x8}, {0x4}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x6}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x6}, {0x4, 0x6}, {0x5, 0x1}, {0x5, 0x5}, {0x6}, {0x1, 0x9}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x9}, {0x3, 0xa}, {0x5, 0x8}, {0x7, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x2, 0x5}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x7}, {}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x4, 0x3, 0x4, 0x865, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x1b, 0x36, 0x6, 0x18, 0x6c, 0x5f, 0x9, 0x12, 0x30, 0x71, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x108, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x60, 0x9, 0xc, 0x30, 0x30, 0xc, 0x24, 0x60, 0x13, 0x3, 0x12, 0x18, 0x16, 0x6c, 0x12, 0x1b, 0x18, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8d, 0xfff8, 0x8000, 0x39aa, 0x9, 0x0, 0x5, 0x7]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x5}, {0x7, 0x1}, {0x4}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0xa}, {0x3, 0x3}, {0x2, 0x6}, {0x7}, {0x0, 0xa}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x6}, {0x4, 0x6}, {0x1}, {0x2, 0x9}, {0x0, 0x1}, {0x2}, {0x2, 0x3}, {0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x6}, {0x6, 0x7}, {0x3, 0x4}, {0x4, 0xa}, {0x5, 0x8}, {0x0, 0x8}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0x7}, {0x6, 0x1}, {0x3}, {0x5}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0x6}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0xa}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x4}, {0x3, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x9}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x5, 0x3}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3a, 0x16, 0xe, 0x6c, 0x18, 0x16, 0x7e, 0x63501598ed8fa8e6, 0x2, 0x4, 0x6c, 0x30, 0x2]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0xa}, {0x2, 0x9}, {0x1, 0x4}, {0x5, 0x1}, {0x5}, {0x3, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x3}, {0x6, 0x9}, {0x7, 0x6}, {0x1, 0x2}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x4, 0x5}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x3, 0x9, 0xc6, 0x100, 0x0, 0x54f]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5}, {0x4, 0x6}, {0x1, 0xa}, {0x2, 0x7}, {0x5, 0x5}, {0x5, 0x2}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0xa}, {0x3, 0x7}, {}, {0x6}, {0x3, 0x9}, {0x6, 0x7}, {0x7, 0xa}, {0x7, 0x9}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x2, 0x4}, {0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0xa}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x4}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8, 0x4, 0x737, 0x7, 0x5f, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x16, 0x24, 0x48, 0x5, 0x16, 0x39, 0xc, 0x36, 0x60, 0x3, 0x5, 0x6, 0x4, 0x12, 0x36, 0x3, 0x60, 0x60, 0x3, 0x16, 0x24, 0xc, 0x30, 0x36, 0x36, 0x9, 0x36, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xf9, 0x1, 0x0, 0x7, 0x1f, 0x3f]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x8}, {0x5, 0x2}, {0x7, 0x5}, {0x5, 0xa}, {0x6}, {0x2, 0x3}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0xa}, {0x4}, {0x7, 0xa}, {0x1, 0x5}, {0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x4}, {0x2, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0xf}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x1}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x8}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x24, 0x48, 0x18, 0x36, 0x12, 0x9, 0x36, 0x5, 0x54, 0x12, 0xb, 0x9, 0x4, 0xc, 0x30, 0x44, 0x2, 0xb, 0xc, 0x9c, 0x2d, 0x5, 0x9, 0x4, 0x6c, 0x6c]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000001}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x831}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb71c, 0x2, 0x0, 0x6, 0x4f89, 0x0, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x3, 0x9, 0x4, 0x6, 0x24, 0xc, 0x30, 0x3, 0x1b, 0x12, 0x1]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0xff31, 0x7, 0x1000, 0x3ff, 0x282, 0x7f, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f0, 0x4, 0xfffc, 0x1, 0x4, 0x160, 0x0, 0x8]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x5, 0x100, 0x4, 0x9, 0xffff, 0x5]}}]}]}]}]}]}, 0xa68}}, 0x4004844) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, r1, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000850}, 0x20040000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r2) recvmmsg$unix(r2, &(0x7f0000002680)=[{{&(0x7f0000000d40), 0x6e, &(0x7f0000001000)=[{&(0x7f0000000dc0)=""/36, 0x24}, {&(0x7f0000000e00)=""/250, 0xfa}, {&(0x7f0000000f00)=""/207, 0xcf}], 0x3, &(0x7f0000001040)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001080)=""/125, 0x7d}], 0x1, &(0x7f0000001140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/102, 0x66}, {&(0x7f0000002240)=""/104, 0x68}], 0x3, &(0x7f0000002300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002380), 0x6e, &(0x7f0000002500)=[{&(0x7f0000002400)=""/19, 0x13}, {&(0x7f0000002440)=""/45, 0x2d}, {&(0x7f0000002480)=""/122, 0x7a}], 0x3, &(0x7f0000002540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x4, 0x8000, &(0x7f0000002780)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x30, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x480d0}, 0x20000040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002900), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x88, r8, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:wtmp_t:s0\x00'}]}, 0x88}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r11, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x54, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:urandom_device_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x20004000) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x28, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x15}, @void, @val={0xc, 0x99, {0x4, 0x6d}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x24000040) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), r9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002d40)={'wlan0\x00', 0x0}) [ 1907.394827] FAULT_INJECTION: forcing a failure. [ 1907.394827] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.397853] CPU: 0 PID: 11675 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1907.399287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.401311] Call Trace: [ 1907.401864] dump_stack+0x107/0x167 [ 1907.402785] should_fail.cold+0x5/0xa [ 1907.403575] ? create_object.isra.0+0x3a/0xa20 [ 1907.404683] should_failslab+0x5/0x20 [ 1907.405461] kmem_cache_alloc+0x5b/0x310 [ 1907.406335] create_object.isra.0+0x3a/0xa20 [ 1907.407253] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1907.408300] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1907.409356] ? netlink_sendmsg+0x998/0xdf0 [ 1907.410241] __alloc_skb+0xb1/0x5b0 [ 1907.411156] netlink_sendmsg+0x998/0xdf0 [ 1907.411996] ? netlink_unicast+0x7f0/0x7f0 [ 1907.412888] ? netlink_unicast+0x7f0/0x7f0 [ 1907.413768] __sock_sendmsg+0x154/0x190 [ 1907.414605] ____sys_sendmsg+0x70d/0x870 [ 1907.415452] ? sock_write_iter+0x3d0/0x3d0 [ 1907.416328] ? do_recvmmsg+0x6d0/0x6d0 [ 1907.417140] ? perf_trace_lock+0xac/0x490 [ 1907.418004] ? __lockdep_reset_lock+0x180/0x180 [ 1907.418982] ? perf_trace_lock+0xac/0x490 [ 1907.419848] ? SOFTIRQ_verbose+0x10/0x10 [ 1907.420698] ___sys_sendmsg+0xf3/0x170 [ 1907.421509] ? sendmsg_copy_msghdr+0x160/0x160 [ 1907.422473] ? lock_downgrade+0x6d0/0x6d0 [ 1907.423357] ? find_held_lock+0x2c/0x110 [ 1907.424207] ? __fget_files+0x296/0x4c0 [ 1907.425043] ? __fget_light+0xea/0x290 [ 1907.425859] __sys_sendmsg+0xe5/0x1b0 [ 1907.426674] ? __sys_sendmsg_sock+0x40/0x40 [ 1907.427582] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.428572] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.429651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.430723] ? trace_hardirqs_on+0x5b/0x180 [ 1907.431639] do_syscall_64+0x33/0x40 [ 1907.432417] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1907.433473] RIP: 0033:0x7f119335cb19 [ 1907.434244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.438053] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1907.439902] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1907.441370] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1907.442830] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.444292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1907.445742] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1907.457545] FAULT_INJECTION: forcing a failure. [ 1907.457545] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.459969] CPU: 0 PID: 11679 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1907.461426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.463170] Call Trace: [ 1907.463730] dump_stack+0x107/0x167 [ 1907.464523] should_fail.cold+0x5/0xa [ 1907.465335] ? create_object.isra.0+0x3a/0xa20 [ 1907.466342] should_failslab+0x5/0x20 [ 1907.467147] kmem_cache_alloc+0x5b/0x310 [ 1907.468037] create_object.isra.0+0x3a/0xa20 [ 1907.468964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1907.470060] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1907.471105] ? netlink_sendmsg+0x998/0xdf0 [ 1907.471985] __alloc_skb+0xb1/0x5b0 [ 1907.472745] netlink_sendmsg+0x998/0xdf0 [ 1907.473595] ? netlink_unicast+0x7f0/0x7f0 [ 1907.474505] ? netlink_unicast+0x7f0/0x7f0 [ 1907.475371] __sock_sendmsg+0x154/0x190 [ 1907.476194] ____sys_sendmsg+0x70d/0x870 [ 1907.477043] ? sock_write_iter+0x3d0/0x3d0 [ 1907.477910] ? do_recvmmsg+0x6d0/0x6d0 [ 1907.478715] ? perf_trace_lock+0xac/0x490 [ 1907.479578] ? __lockdep_reset_lock+0x180/0x180 [ 1907.480539] ? perf_trace_lock+0xac/0x490 [ 1907.481402] ? SOFTIRQ_verbose+0x10/0x10 [ 1907.482246] ___sys_sendmsg+0xf3/0x170 [ 1907.483062] ? sendmsg_copy_msghdr+0x160/0x160 [ 1907.484010] ? lock_downgrade+0x6d0/0x6d0 [ 1907.484868] ? find_held_lock+0x2c/0x110 [ 1907.485720] ? __fget_files+0x296/0x4c0 [ 1907.486487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1907.486589] ? __fget_light+0xea/0x290 [ 1907.489088] __sys_sendmsg+0xe5/0x1b0 [ 1907.489871] ? __sys_sendmsg_sock+0x40/0x40 [ 1907.490759] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.491763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.492848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.493897] ? trace_hardirqs_on+0x5b/0x180 [ 1907.494806] do_syscall_64+0x33/0x40 [ 1907.495583] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1907.496629] RIP: 0033:0x7fe17b63eb19 [ 1907.497393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.501209] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1907.502799] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1907.504289] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1907.505799] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.507298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1907.508787] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f00000056c0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005680)={&(0x7f0000002d80)={0x28f8, r12, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x2, 0x6}}}}, [@NL80211_ATTR_NAN_FUNC={0x230, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x20}, @NL80211_NAN_FUNC_SRF={0x13c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "7d53bb4beb7a6338799368ae1443d93682c760c7a3d05b2671e8fb7e2c38f5349b3a13b7912ff63ea3a0677583557ae10510f44701eda793f81400d6e2e2cbbc85110feefb14b9d10c02b02388a617d0ca98ace655c1bbc91f71698f119a8e5e066576f0dd1cf335c64c2e6681f3fcbd255faf30f35a26894105c0206fc88db4a45ac596d4c541a6d3f198066b4de9114a9ff712cfa855bf351fea10019ce407f51e9776b02cac6b866bba85eecdff77c5ec9626a69a95aa51c06e6ab4e355381423455ef1c8585a0a0dd4980d896d6bfa8d2e0af54a0346341d6e0299f9e0bc75c6a69cc1b25bd5b9e7d6c7e8d0880e6514e1a834cd3bfc24d536e21c6ea7"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc9, 0xb, "ec06ac9387a668deda2d204813cf75150267ff88d026c2a24ca22f1582c389ba309e8cf38a53bb5666a1d9b94a532e524857fc39ae27f771570d8ffd8004969ff527221517ab21dfac903758158b7d17712c47ac40799b0a71be9ddc3696177237bf829bf2d97a2fb3b2a480219b2bb7c605c431b97ff5d26d5bdb38730f345b8a91282f21f8a890c461ca090dbd4ab01fa63b049dff08d3ea3d24ed09a5069aa2ee882112ed7bfb96490ae0c9e3ad7d593e4fcc7fec34eec95b964f95b647e8585a1f7ff1"}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b03a6dad89c0"}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1a3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe3, 0xb, "ade0e62e7cfc6d83782d3d503bc5acb04728c2165cc14c1b95b5254bfc4f1462e90afe334d8df1286bc2ca36f21cf746a1e97893751a24de509b9be38c60d27a925e6e95cb4e43c07c2ae50828277afedbfd36e5ae195babba96f487cd4998a62468805628759bf87cb2bb4e05107f20408b8677fc626a39626e375c08ff6eb5ebbb912675b5426a44d376603fcb1f3c881aac9b8506c7b55dc9df0708495c60740afade7ebaa0b35cdfc2deca4d60432fe11c6dc9a07fd193e5a8d3c57803310022af70f3e172872727d4feaafaacbfc042c83d11949df94ff0751ef84ca9"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x11fc, 0xd, 0x0, 0x1, [{0x102, 0x0, "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"}, {0x35, 0x0, "c300a97a83ded1a8ebe0b537635f3f3bf753e7b4c40075bdba875f91be9d54fe6d1e2c03ab35453e3a42d3e1e8c9fe8a02"}, {0x61, 0x0, "cff54e67144cbdc428e2bfc90ad0fa565396562521aac696d7056a2f772106bb5e1b1dfc38a22b6f8cccc78aece37736426dbdf72a903bc4db4f9fa7aa364153e47b499162796863a819339aa1a7d9ada485dd6001d4140f7674ece918"}, {0x53, 0x0, "38df5d76272b0e7e0bc6744e5a4e196820a428633e275536eac9be21e9b33158170bdb9bc19cd3460a974fcd2d86ff19ac1cf0be6888ceeda7649bbe3ea395e7f6e2df915a23c68ac7c07050755bba"}, {0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc8, 0xb, "65e5a71d63c63509f05e7e01d0167a163fad7160cfa8832553e3c9671d49254490ee50e77eaf6fff683e6be076a5384163fe3e89b40d01f84b54b40831c5a68ccf57f66b914b25d23c416d06eb00063d3f027c5f61b9c0b63d8c7e7b34f7002b6c85d041cd46a7b0ae247315fcc4e3720972a26098e54b0f59b7375c70051f6c83dabaa1e524aebf7a415cdd5e6da5caf21401e4b52e56b5368bcd5065c27f5d08ca0af51c206e1d4fdfb823d8df3b9b7a70abd931c31c442d69845122ad3d2636e63651"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x668, 0xe, 0x0, 0x1, [{0xfc, 0x0, "92816623ec867c73068c858648ca513def2a3fac700966e684576636835e1444ea38c0d73426a94ac73b5c4e115f5d4e2252347518677c2ce997fd736b059a31447c2514df8a1ef76472ec183d9a62369a2ece465ce7ef7877e1bb72572ad31b10da81ea888338de8ca289d52511264aed1e418fe12690f85a82bef3911c22911158ffe5acb89c082e7cb0c2c6eb409cc4fa9e2f0d9e1e29ec9b40fa2d6e67cb0efa71f1a5bc71cc4fdc0a5f2f39f244d95aa3fe187f29ceb1aa6d9223d0a35c3427719f2d14477f2863cbef8dac4b6a264abe855692fafa0fa0e26f7b99238ff428d9aecf7ca20238371f9d250c8a36e08720b9e08da293"}, {0x29, 0x0, "5c448e9e934dc2b89b324d3f221adce8ed97e86b1d6ddec4d544b96e40be81a0140d250f57"}, {0xcc, 0x0, "9f7089ae3f30020cbc525e7e459d66ddc18cff761b9cca2865d752498f879ccf4f91fc894bd90168174cc4276cbf1e523d7e2da10dab7b5e5f0e2eb69b86911d90fe3e19b25d4e9b9326ad97b915b1562c1b895531d683d79b12e55555d36bebf5de01a021bac72613f08f5ad0fc26cfdbb59fdd806b491093808d61bc7933e3af173c82bfa99c6dd00a79dae796ddfed4ca8d66bf6c31323e988e62d4c4bf0cf825a816ffdd48a3e09ea22d5ca033518682a4c22ca94e6388f6a5c6f27c57be677fdfe2b0b5234a"}, {0xd9, 0x0, "72b3eeab74db97b783701ce3ee18e391bf00fa266e34c4e4f6d41cbfd0fb71ab2f5e6524614007cf0a3fa3cd74396ed2a144334c847836daa20f325c04c87b335b7078420f1b62e0034c463925d6b0a0f2db8d13a7c2513f9869b54fe93486bd26f4fabb3f3e2265c2bff9fb99b2e713f23b9258c903b4e9d7fdb84d894ddb26a5ed78a2e765759c10729385cce784cbe0befb1e6877d7669134d1f9ed475b6dbc4f98d48cdc740b2654f96b9015a3395b1a1e334da2b71b1acd80abc24ed4bea369ab5b90d3afdae97cb87eaa8c64636bcfbb8b77"}, {0x97, 0x0, "7b205cda1d44fb54b8667be49ba81c00dab4389d87da153d3c800332678917eaea278294d5d3919b81aa02c0d9101e1cee58cc255ae392e47f3e887f3ac7f176b5f53d9217fc10e8cfabd1dcc6e7b5993051e7429b9ec077dd8d872d30947c55a9c91832bec5659b3e42ed67e7b274c69f2785de774aaffe72b0792fb987ed8d8326c0468f902e956e0736a694779bddf854e2"}, {0x5c, 0x0, "423ade591b0a525aa865190691abe936f50099888555fee522c8a5e4ca0f036d8ce82b96a4a59f1d2ee5e44a2c2131bd7f881dde937431b99aa94b37d6e3098c9e29d016284e0d8f6b452fb7816358ad579c61efaf639778"}, {0xee, 0x0, "5a4fc1f9aa99a9850d298510de2b41457915c2fcd714cc853a0ea82f8e06b22ff0afe64a96671b05556f4214ca44926e8400e418f11fe0b3d2d3287e6ab5e4514f07744a98e7857f83ac8cecf9d2a70cf1c190b949cbef3fa7f924b44d83a067dbbb1de1f553e7dba4305979cef3159f3cd212fd5f314a59dae3dfdda06fde253b1c2302bd21d0179dd5be98538fc3b3eafd9daae78b11e73df80a70713fa4d74e9128bcdd3cfb8b8a4bb79dc84f54e3269dbe7ca47be5292549f5281c9e87d832f01c837978d0632764304127912017267f7baf9c048d77a7f1e55754bb94eb1ffcbfd1264a6e1d2bdd"}, {0xd6, 0x0, "f5fcd70447de68f37beb0d078a05f816cb749eea0621a015d8876050c6b6dcb59f8f47c863e10f0e46967fbc0bddc5b00c253711e0644fec33166ee0a21cd5611feb4047bbd773db272ca968ada4e0e8cbc99e1f176693d7fccda053d340b989a2f4b8b3cfda6c965f6900640a9685360a78c07c1c309d2f7a103b75451128a1e4623074835cd9ee90f7a50b0db16c7befb4790e92019298d371c5cd07603544b2b7d69dce057efbe035b9c4176578eaa745ce7ddb3367c6d9d9b3ad00ae0456a0e83760d38eb902e341237b08840aeaf3a3"}, {0xd5, 0x0, "ac7aa57bf3bf404f5d4d3ece2e5e71e16082d7ed0358c605086bc625f22b29cbbd156534740c189b4b2519b56bc608cddee6b809d53bebbbd4114e551a3e263783fdcd45b66ca40b8ac2b4ab94ea9fa9266bd66d83186b9ba7c5a2fdd4b08f77b4b3e5b3aea1ef27f2d13ee3b799fe42e26065cf0989ee54ab452978df718ced9b2934bb15aedc5c624b2377f6bc7855433b9346cce1adb9a4e4f2b6b25d6884f1a489ef104336d7cbb01f3abc5430fd236989b96a034bc3579294497a0beb77de430039b9d55244dbfff0999100b2e245"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xa6}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0x4a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x464, 0xe, 0x0, 0x1, [{0xba, 0x0, "417148020358693170a69e8b409ffaae0cd2beb90b61a947c36dd20b2ce3bcb2d12f0e63700c4dcf07aeaaaa8cb2cd441ead71b51def5ba4cb0b025d831311cefdb5dee36d600d3e4cd88d67c14aa81c2dc0bdda7f6886373b461aa7f328d7ea0d7d185c8e2dcb9be30d83be6359342cba1a946d76ca882345faee08e6e4f1e7301a20a31d3139d7695c87d8ade343d3db04517ec79e0aed69e75eb63a0fa49e0fb0f79389de130bfa6d84f246e77b4c6dfbfba24cea"}, {0x41, 0x0, "432017fd9be5f2b964d69db8a847427a232533cd62d089742f15068c4c1ea84fb778885ea0d4489c6c16239c4c2a8cb9c973d02c6e0830d66a7b212db8"}, {0xd6, 0x0, "32fec1e64003427d138baeba6f54eaa15d5bd21715000105e6998cad792aa9763342982958d68f658506243b82ad216879228be12fa0efc4f2e43bd25f75b0b3f779f2374ad63d7332549019d7239da9a82cc739c3bdabc25319171388c4493bd298fd366be6f55d7c36cbeda8ea2631b5dd827ef81dc182f904381ffc781e6528fc31006ba90c2229b03cd1e7e915fab822d59fc91863857e9709e1f34bdb83f20cbbb24d903e19f1d3c60317c3ba1885321c95cb294cd7c47259d8dc1a3e962ad931ffca637f94f073578f3503150fd036"}, {0xba, 0x0, "883f2672124a8e3d7bb8c717dddb74ec0e5906c605f4fa93927778f731d4fa7eb281ca358f6249fe4f068a588f3ee66068faafef5edb97f854ad9bd54aade726e9ebe58917b5f4a255d3b961ea6d3c7696acfa342af876c4539df8f83303d626baece28c7dcfb1cc9701e3845bceafe1e7c24b7bc229470069a660ddc3120111f06d3fc336ff22e011445f6e3982c6c1032b8489beb21404e83681a5cff525f15607c4f939c0b3160aee68aeb18d5c8dced0c90ce7ca"}, {0x71, 0x0, "1ade7221c6fb7dce7b47d4456c290c861f8a7dad85c393bce3e26e5a0c252b0f397b6f270fa7a0280e0c1ebfb7e3f06f4099ad27b87aa36056665b9a7e97ca56944c9438da4a1d14b8517d3deaf900b8675279dd41e8c21790ce99223b20be8ba31b2f593b8b19466fad64ab34"}, {0xac, 0x0, "2968845dc58cc4a214548fe5ca53f7538be1324ad078a0bc9c1eb80f524980c80312bec3a2942dcc91d919d523368aeb5f9c517c23f918dc79afee4cb13dcd40d06fec4956380c193798249dc370ebb431382b03157a6829aef819336868461ec6547f257c1cfa338aeac43d6c1676843984cba79db83203e95b8a372aceaafea6848b765c2bff7ce7e21c902c794ade517c2180b30c9b6c5d7a5afb4b26a464b4af94f94f0ee853"}, {0x59, 0x0, "d3c0e348286fd9ddaad06ca6b796dfbe2946a56164858cdd6c16b6f744f06dc072ee39b76faab27fdb8053df7a00a693fb5700f6a05a04fa59e69f3a9338a21cd557306bdc62bf7fcbf8831975a62d2c7a3df0ac6e"}, {0x4e, 0x0, "87711fc4b9d553ab53d1763f49cf1f64a0bd52ebbabefc53c2b60a7623bd2708d6bfb22d884689a1baecba9afeea14a6775ace54d29c3b1465604baaaa83eaff0dd70d4265c5a86fa13b"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x81}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ce3db2f406ed"}]}, @NL80211_ATTR_NAN_FUNC={0x4d8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SRF={0x138, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7f}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1a0, 0xe, 0x0, 0x1, [{0x4}, {0x1f, 0x0, "1e3347cfd23a89f049eb4845c674b0c954906a52de0be2ca9b0b61"}, {0x1b, 0x0, "b851538db8879d7b58204d76f7b7c5f28717f720c454df"}, {0x92, 0x0, "79b5b6ebe7bbc90c2dd3bd1218e91ea8fd4eca7da04ccf551e740559fb830b58129d49f2806c23e3ad3796c327174ea4c9253c6fbe2a79653a3be27db167533f88559550ed1e16b31a4c4bc70498de47f7f9ec22280efefcb63fc41c8d9b3003b133c934a33c7a0a827dc584cd28a0220e49087b065e7aeb2eb0acd9afd2e2269583f19a99a72980289002fc29b2"}, {0xc7, 0x0, "9bf4a6af2c93de139f9fe3e71aab2bbdaf2870c885691ccdbf09d49e9f213f2d2b2179d564164e7d7a598e8aff99f2dfea7e38781a230a955e891c974d9c4951f62151e36ffd13d280bf4acf09f5e1ed529b37bae3008d3313ee9db9366bfece22016220814132a6112b2d38dbaa5c9b912156dcab7da8553cc0426f795519b7efff2ca33f58b10732d7252bc7b129e928e409ce5000be4065bdf4bed6abcd2a9ac926428ef1fc166b324b92e4e907a1b8fb81747349876ef62b8b3175fc232e68c68f"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc0, 0xb, "3898ef6885d676dd2251110182834848bfc7471ea18fa5c1338431ef9abb811badff2cb2a18d1eb5271865bc2cf8badeb7ea172910122d3d29d4be42a905cca01f13fdd916d7e649c383f171dff626a7b682efafa2c1d481911996490c5a6da85ecd2727044f559a573001fc9ac81997cd76647d3d3fafda94d9a9a6ad8fd29d124d29502ff3166db0ff77a10279ab4f1b21205f0c4994954bfaed99105270d7f682947f88034387d3936f347191358995e1d6fac67ad499790ef5bf"}, @NL80211_NAN_FUNC_SRF={0x124, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x78, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x74, 0xd, 0x0, 0x1, [{0x70, 0x0, "e637411b7fac9e1fe11e65de0a1fb76fc3e2a10f42c7cff5b8d64bc1cf8ae9be94f42bfa9983a52b54928d67014364872810a383eece53644f0f357aa499ce4952e2a26b6d508d3ce06000c0a255f5346662b501952221221f1bea9f274843855c8974bafc5ef2f7ee9a8922"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xde}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x230, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7f}, @NL80211_NAN_FUNC_SRF={0x210, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "ccbb428f07846cc891fd748ed6fa54b8b6add474cf584ab7a76dd23040d342c394891b267e8bad1d55df167155ba85bfa7200cd191f1523ec60bf7466ae7be2b9917734f6d9db71e513e5995a709ba96112096b5bc7b19702ec7757e52e16ac19665b40dc5a1ca65191165462b4bea269b55b9bb3c8c5fc6e74fdfca0b38c6963bbac2550a995150d416a8587b516c900455e829dc933f8e94f4389c3f97f726946a1b8556d20aa139688a1efc2f6b74cadd33cfb52cc4028984b9a06127e1c787ca95d2aaf24842b36cb2adb55447d6ac00a9511566d85067ddd8f771f833e4fc9e2ce5f1c891ebb756784691eadd856df36a3bad1631f1a7d6cd5368fab9"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xff}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x4}]}]}, 0x28f8}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000000) preadv(r10, &(0x7f0000009a00)=[{&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/113, 0x71}, {&(0x7f0000007780)=""/218, 0xda}, {&(0x7f0000007880)=""/224, 0xe0}, {&(0x7f0000007980)=""/118, 0x76}, {&(0x7f0000007a00)=""/4096, 0x1000}, {&(0x7f0000008a00)=""/4096, 0x1000}], 0x8, 0x3, 0x7ff) 18:02:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="000002000000000000"], 0x28}}, 0x48000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x18d8, r7, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xe}, @void, @val={0xc, 0x99, {0xffff, 0x79}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x18b0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xc4, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1ff}, {0x8, 0x0, 0xbe}, {0x8}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x7}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x1f}]}, @NL80211_ATTR_IE={0x36, 0x2a, [@mic={0x8c, 0x10, {0xc91, "58e7719acc61", @short="522293ec95fee206"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mic={0x8c, 0x10, {0x36e, "12f045980d09", @short="7a1f34639f6bde95"}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x1, 0x7f, 0x8}}, @ssid]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x44, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="07732f0fc690"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9d5}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="c1a65445bb71ea4ebda17d855c"}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x188, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x84, 0x2d, 0x0, 0x1, [{0x15, 0x0, @random="b2c69f858381e3d5405df34d3687cb27d9"}, {0xa, 0x0, @default_ap_ssid}, {0xe, 0x0, @random="c614681d5a18682aa90c"}, {0x1a, 0x0, @random="163e4a2c02401f18051c8e83aff506b9d0f11296e860"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x20}}, @NL80211_ATTR_IE={0xd5, 0x2a, [@cf={0x4, 0x6, {0x81, 0x2, 0x0, 0x5}}, @preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x8, 0x1, 0xffffffff, @device_a, 0x200, @device_b, 0x7fffffff, 0x7, 0x1, [{{0x1}, @broadcast, 0x3}]}}, @ssid={0x0, 0xd, @random="03418812739186fb6cbcbffd20"}, @link_id={0x65, 0x12, {@random="39b36352939f", @device_a, @broadcast}}, @channel_switch={0x25, 0x3, {0x0, 0x9d, 0x3f}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x4a}}, @random_vendor={0xdd, 0x3b, "fdb1ee7e9f001097fac2592600e273a17f0d11c4b87b79d5866d817587cf23a200f921899eaa000e389db9024d745196a10dc6627d6ca9b2a254f4"}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x3}}, @measure_req={0x26, 0x22, {0x81, 0x40, 0x86, "95f00f2cb92b1b13df144ed39baadcbeb0d1e1ffb0fcdd7481972cd3924639"}}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0xb5}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x2}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}, {0x8, 0x0, 0x1}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xa0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x46, 0x6, "7dd926d322359d97b788a5575b9a33451cce32ff393c83a88e82415ebcacdd5beaac083a74960bfb3f0c60f0ca3f0522a5538eab4ef7520e839b155b458c26e2820d"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xfff}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x33, 0x8, {0x200, 0xfffffff7, "55a724e3cf61e791f7369604c4924e38022a2676809e9ed9625378b7bc123b40730d8ebe5d76fa"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0xfff, 0xffe00000, 0x3}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x1}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x15b4, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x134, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @cf={0x4, 0x6, {0x5, 0x5, 0x7f, 0x3}}, @mesh_chsw={0x76, 0x6, {0x0, 0x1, 0x26, 0x8}}, @mesh_chsw={0x76, 0x6, {0x5, 0x6, 0x14, 0x1000}}, @mesh_chsw={0x76, 0x6, {0x0, 0x2, 0x22, 0x7}}, @measure_req={0x26, 0xe4, {0x0, 0x1f, 0x80, "f537047eac55605bb01fe3fd1f9ac16f02c7ba3c2d87b3085bee5b58b7e03fee230415185927440a2a876359fda9f1945159b9301eb7dc416a914c7ebf46e91348e2a290de6dea7378c3210e4d2de351a1cc46392f87e03d42bb1da79ed54a93a1331c28b3e1c0a571be7d3dfd760b933d1c53c4ae23ddbd434e6b5422548ad03b604daedeb5981328e571c6b9a9e827cd1e380311cb4046c532cf2357d242ddf1c90956552959cccadb4eb8161060d20809d855beebd661ec3f871499cf5f08fe90fe01b8e5c98e48205fc6b469bfd9f756e135d92f92d2fce7ad6c79eaa595f4"}}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x1f, @broadcast, 0x9, @device_b, 0x9, 0x4, @broadcast, 0x101}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x69e}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x80}, {0x8, 0x0, 0x43f67796}, {0x8, 0x0, 0x40}, {0x8, 0x0, 0xfffffff7}, {0x8, 0x0, 0xfff}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xe00}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xf5f0}, @NL80211_ATTR_IE={0x18e, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x6, 0x8}}, @dsss={0x3, 0x1, 0xae}, @fast_bss_trans={0x37, 0x77, {0x6, 0x2, "b78a82ea050a3f370cb4d2ae4aa01fbe", "514ace6b6d3bb26ec230359656a8861b91959d675b8939c4b31253bacca6b718", "17bb7caa5f25948452d337e7e477290db5de853b5eaecdfe4058f81b38248953", [{0x2, 0x20, "6d43fbcab12b3150dfe9f167df12b09753da89732d317f1c27891dc7634a0d8b"}, {0x4, 0x1, 'Q'}]}}, @perr={0x84, 0x107, {0x4, 0xf, [@not_ext={{}, @broadcast, 0x8, "", 0x2e}, @ext={{}, @device_b, 0xffffffff, @device_b, 0x5}, @ext={{}, @broadcast, 0x2, @broadcast, 0x27}, @ext={{}, @broadcast, 0x7, @device_a, 0x15}, @ext={{}, @broadcast, 0x8000, @device_a, 0x36}, @ext={{}, @device_b, 0x4e, @device_a, 0x32}, @ext={{}, @device_a, 0x6, @device_a, 0x11}, @ext={{}, @device_a, 0x4, @device_a, 0x1a}, @not_ext={{}, @device_a, 0x8, "", 0x1a}, @ext={{}, @broadcast, 0xd, @device_a, 0x26}, @ext={{}, @device_b, 0x5, @broadcast, 0x9}, @ext={{}, @device_a, 0xf402}, @ext={{}, @broadcast, 0x47, @broadcast, 0x3e}, @not_ext={{}, @device_b, 0x5, "", 0x14}, @not_ext={{}, @device_a, 0x6, "", 0x16}]}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1298, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x91, 0x3, "317ba01eee66235e255b162b4b32356804f73467f2192f717bee8616558c24cc161a1cad286d0a78a3412704a491a6059f29850b083e36a7cc01a02c837947712c7fb523da1336f684e22bc5068469ea2bea987162eeabca09ada4c8f3c59ae160680b5ac2b89e2a49ef0476b8d013b6d9003c445140d0767bea3043d999a4fcd6bc299b4c8b2a02cb758a4202"}, @NL80211_BAND_60GHZ={0xd, 0x2, "9d48e6728363c3c481"}, @NL80211_BAND_6GHZ={0x10, 0x3, "1a17e8f83536353e10aa64fb"}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x53, 0x1, "7b278baefb4019e9d5d5cdc222e7bb006a14d2773da2d0cba44f73424f22f93ea7b5b39f405c4d77d2d03e549b1aa3481bded8d36bd052580bbcf2054044bb084d0d068dd3a2acec757690961b6757"}, @NL80211_BAND_6GHZ={0xc6, 0x3, "f0045b8956fd73a1820cf2595684434d6d8d8e4aeb43b0da43762027a1c1c0f968c7e1cc48de784cf36a0b203ab53ce4818e1357b78b2566c0c59464ea390ff1dd48bc24fbe87284284dd63607193aaf318bc0dfcaf267f0afab8a0ff1c83af71ced1f6de487740b80d98014e8aae71e70fca173a1024f3b04f7c7056111eb0fd6c623a4882888781ab70f5003e8c32dbd2e86fbd384fb4702496ef48a37ef3ecbda130e3eeca438fbc3c719004b1b3ac2fc1b3703a7af51bcd33dfd0be92afc3e18"}, @NL80211_BAND_2GHZ={0x14, 0x0, "9eee9047695ce1bfa692a5452752cc5c"}, @NL80211_BAND_60GHZ={0xa5, 0x2, "b7ab52af7fffe3f6c937ed5eb10bf2a94aa3a6cda4931ae2cacb77807aafdfe427f838de498368dcb767e81b07ba9d81c47f878a1497bff04cbf9589a3e726b4153e7a72f25e63d5ef91f229bea251867680bcd61c78484f5e8141edbc4508563f29f646ede87128925726194264c6c6459c2359e9da13620cd1a984630281394ea3b328bf27d2e421d96b9d32a0657eed060d360acc965191edaec20184b87951"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}]}]}, 0x18d8}, 0x1, 0x0, 0x0, 0x4048881}, 0x4000025) 18:02:15 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 18:02:15 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:02:15 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x110) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/56) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2080}, {r1}, {r2, 0x4020}], 0x3, 0xfd) write(0xffffffffffffffff, &(0x7f0000000140)="1b351c356c63c0aeadf9910145c1a8bd20b2f91d06f4f0895e70df0c6844186c6e310a2002dad58cf5e1eb08179903f2c64bc7320ddcf9fbe2a012bb2052c4491e8dc4a142b9790248996ec05b97249a2b1cd3a4e4bb38269d030d4d459cec1cdd2d0dffbfea125981dff709b252978de14f8d56d22988c3a421", 0x7a) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000200)={{r3}, r4, 0xa, @unused=[0xffffffffffff8000, 0x0, 0x10000, 0x1000000000], @devid}) fcntl$getownex(r0, 0x10, &(0x7f0000001200)) getgroups(0x2, &(0x7f0000001300)=[0xee01, 0xffffffffffffffff]) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001340)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000001440)=0xe8) mount$9p_xen(&(0x7f0000001240), &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0), 0x218a010, &(0x7f0000001480)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@version_9p2000}, {@aname}, {@access_uid={'access', 0x3d, r6}}, {@msize={'msize', 0x3d, 0xa10f}}], [{@measure}, {@pcr={'pcr', 0x3d, 0x15}}]}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001540)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000001580)=""/91) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x40010, r7, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000016c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000001600)=0x80, &(0x7f0000001640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}, 0x0, 0x80800, 0x1, {0x0, r9}}, 0x1) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001700)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r10) [ 1907.580450] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1907.582487] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1907.583575] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1907.585330] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:02:16 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 7) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1907.751432] FAULT_INJECTION: forcing a failure. [ 1907.751432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1907.754200] CPU: 0 PID: 11704 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1907.755591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.757217] Call Trace: [ 1907.757738] dump_stack+0x107/0x167 [ 1907.758479] should_fail.cold+0x5/0xa [ 1907.759240] _copy_from_iter_full+0x201/0xa60 [ 1907.760114] ? __virt_addr_valid+0x128/0x350 [ 1907.760979] ? __check_object_size+0x319/0x440 [ 1907.761890] netlink_sendmsg+0x879/0xdf0 [ 1907.762702] ? netlink_unicast+0x7f0/0x7f0 [ 1907.763544] ? netlink_unicast+0x7f0/0x7f0 [ 1907.764370] __sock_sendmsg+0x154/0x190 [ 1907.765147] ____sys_sendmsg+0x70d/0x870 [ 1907.765953] ? sock_write_iter+0x3d0/0x3d0 [ 1907.766786] ? do_recvmmsg+0x6d0/0x6d0 [ 1907.767569] ? perf_trace_lock+0xac/0x490 [ 1907.768405] ? __lockdep_reset_lock+0x180/0x180 [ 1907.769329] ? perf_trace_lock+0xac/0x490 [ 1907.770158] ? SOFTIRQ_verbose+0x10/0x10 [ 1907.770988] ___sys_sendmsg+0xf3/0x170 [ 1907.771767] ? sendmsg_copy_msghdr+0x160/0x160 [ 1907.772700] ? lock_downgrade+0x6d0/0x6d0 [ 1907.773530] ? find_held_lock+0x2c/0x110 [ 1907.774387] ? __fget_files+0x296/0x4c0 [ 1907.775192] ? __fget_light+0xea/0x290 [ 1907.775990] __sys_sendmsg+0xe5/0x1b0 [ 1907.776748] ? __sys_sendmsg_sock+0x40/0x40 [ 1907.777610] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.778569] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.779619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.780641] ? trace_hardirqs_on+0x5b/0x180 [ 1907.781517] do_syscall_64+0x33/0x40 [ 1907.782258] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1907.783298] RIP: 0033:0x7f119335cb19 [ 1907.784042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.787709] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1907.789230] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1907.790655] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1907.792071] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.793485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1907.794915] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1907.881796] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1907.883794] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1907.884867] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1907.886587] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:02:33 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 8) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:02:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001c003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:02:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x1c280, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xffff, 0x3, 0xbef7}) timer_create(0x3, &(0x7f0000000000)={0x0, 0x30, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00f0ff000000000000f20000000000000000e88c95ce5cae611180fad973057856722989f142f549d238e38f6024b091d2fea92a6c3f078b40c757052df02f24e98d33fa0698f834a9d6e7f119cbe8daac378329e019fd65", @ANYRES32=r5, @ANYBLOB="0cf098000101aac3a19cd34c"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2800) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{r6, r7+60000000}}, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000640)={{r8, r9+60000000}, {r10, r11+10000000}}, &(0x7f0000000680)) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/87, 0x57}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f0000000340)=""/93, 0x5d}], 0x3) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:02:33 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 18:02:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 7) 18:02:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x3, 0x6, &(0x7f0000000740)=[{&(0x7f00000008c0)="52b62f5258a6fced3b78d2ba13d14a63985cbf50e6431f9541808f8b7aaabfb4bd1faf68593a86a11ac9be045551fac8fae0ae6bfaa5caa8cc0081c0d9a27fa07c0da3a70d20db1b0ba189de97bdd935176729e0478f57e6306b191c32cf2e6d87e2ad120e0a484b8567593ff7bea9fa9e200bcbad9397376eb397774f70d4b42a92503cbbe0eb8a895ed3f0b6331abbd4b9a4ec7b09aa3ea024e3143cd4fe4320ac12ee07e3d1b5eeed21f8f7b26a89bf412c718e72e1757698bf332b720aed7bc9d6dd54fdcb44cb80fd5489a8baf3c1c5a864795d3690a306badd5fe98200038dd05c87ff9e4af69c2d6538eb1b342086c760a1a107", 0xf7, 0x4}, {&(0x7f0000000380)="1ed057dd10eb4d256e9a2a872a90d4d5b60c25cb05bf6ea24d21e674dfe27459dcd4e3d8ab952383ccf814063a5c42da1a01dcdada02c8419570b0d78927a7d2022e4d5c534148efa24d9077c366b7f89a47d85016dde20efbae5a0c1604483281943024eab24e3cc190390b5d853bf6d170eb261844260c3bf76361033b6e1e66e42605426eef75bd1104d651b28e91ceeff55e4b3092779a28f656db932bd2801f9da4ddf3fec69718a96792b75dd91c7ceaab486bf472b169caa680b36634da65d2ed3069f8fea0d03c8c56aa56c0c33bf97ce9f61642289727fa89c5cef1", 0xe0, 0x3ff}, {&(0x7f0000000480)="2ef968690f6e02d6c9eef24dd2c32fb975fce8fe8321a4906591aa1f6f8cce64d9df81a2adf11cd34769cf13586761f14883d75eb212eca473df81ee04949a5f01e8b6a225cd3c0a037d9bb85361a880682a", 0x52, 0x77}, {&(0x7f0000000500)="15e14e3fd804007fdc2fa9ca17f60b816cd12c9c77d92a85c4782b495d85f0edfe07a36e83dffc36262dc62ad6929619f0f075d1f66ed10210c997d830faaa8e909a8e727facad55c12165598d68e761c4d4703d14b91e8a1186962a540e314afd990559506d92a5ca8035725005079887c685258356acc784c37f7d83c4878b47a45f97be57763cbe37d023e678710f2f7985deb9defc8f360e84d403a51b2a75eece4ab8a5d601cc82b73f9d03774ccebe45ba43b2f5fbea3ff9e9ac1881128c2816035cf353dd7da5e36c45f77500e0", 0xd1, 0x7}, {&(0x7f0000000600)="729fb4ce20fb0a4e103fac685633a5bdc8812be85bcddf653888e66861cb2b0308a394020e4f3c0d914df83f53fff37705576ddd26da0c5857dd42efe0e063bb961a6fa1ab36c7625f7dbd7ac2e573550dee08ff1e149115b903c71111d101e2aa05103a83b3667af29c859954c266e6084b26d9b24afc87696b9d57b3141c5e2d4b480d2c8f9734bd1816b92db607af01d5ed4e23ef56099a1376e7674b1cedb1e0847da5d19a37bc7179d46144e7e6d3e248bebb58fc32ca78dbe463b1342198d45f5496d7f4557ec84ca854baa13be4d5869237e9196b4c1a", 0xda, 0xffffffffffff8000}, {&(0x7f0000000700)="11790849bd5f068aefae1c065be595da7f00e92fa3be", 0x16, 0x1}], 0x840, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) 18:02:33 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @private=0xa010102, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200000000", 0xc7, 0xb800}], 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}]}) 18:02:33 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0xc00, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x1}}, 0x14) sendmmsg$sock(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) [ 1924.958304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1924.993553] FAULT_INJECTION: forcing a failure. [ 1924.993553] name failslab, interval 1, probability 0, space 0, times 0 [ 1924.995252] CPU: 0 PID: 11717 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1924.996069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1924.997044] Call Trace: [ 1924.997361] dump_stack+0x107/0x167 [ 1924.997800] should_fail.cold+0x5/0xa [ 1924.998254] ? __alloc_skb+0x6d/0x5b0 [ 1924.998711] ? __alloc_skb+0x6d/0x5b0 [ 1924.999167] should_failslab+0x5/0x20 [ 1924.999615] kmem_cache_alloc_node+0x55/0x330 [ 1925.000144] ? lock_downgrade+0x6d0/0x6d0 [ 1925.000643] __alloc_skb+0x6d/0x5b0 [ 1925.001077] tcf_action_add+0x1c5/0x440 [ 1925.001547] ? tca_action_gd+0xdd0/0xdd0 [ 1925.002026] ? avc_has_extended_perms+0xf40/0xf40 [ 1925.002601] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1925.003274] ? __nla_parse+0x3e/0x50 [ 1925.003833] tc_ctl_action+0x345/0x450 [ 1925.004292] ? tcf_action_add+0x440/0x440 [ 1925.004776] ? rtnetlink_rcv_msg+0x38a/0xbb0 [ 1925.005305] ? tcf_action_add+0x440/0x440 [ 1925.005802] rtnetlink_rcv_msg+0x41e/0xbb0 [ 1925.006303] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1925.006787] ? perf_trace_lock+0xac/0x490 [ 1925.007279] ? __lockdep_reset_lock+0x180/0x180 [ 1925.007837] netlink_rcv_skb+0x14b/0x430 [ 1925.008314] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1925.008792] ? netlink_ack+0xab0/0xab0 [ 1925.009251] ? netlink_deliver_tap+0x1ae/0xcd0 [ 1925.009795] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1925.010330] ? is_vmalloc_addr+0x7b/0xb0 [ 1925.010823] netlink_unicast+0x549/0x7f0 [ 1925.011305] ? netlink_attachskb+0x870/0x870 [ 1925.011824] ? __virt_addr_valid+0x128/0x350 [ 1925.012348] netlink_sendmsg+0x90f/0xdf0 [ 1925.012827] ? netlink_unicast+0x7f0/0x7f0 [ 1925.013332] ? netlink_unicast+0x7f0/0x7f0 [ 1925.013831] __sock_sendmsg+0x154/0x190 [ 1925.014299] ____sys_sendmsg+0x70d/0x870 [ 1925.014798] ? sock_write_iter+0x3d0/0x3d0 [ 1925.015293] ? do_recvmmsg+0x6d0/0x6d0 [ 1925.015756] ? perf_trace_lock+0xac/0x490 [ 1925.016247] ? __lockdep_reset_lock+0x180/0x180 [ 1925.016792] ? perf_trace_lock+0xac/0x490 [ 1925.017280] ? SOFTIRQ_verbose+0x10/0x10 [ 1925.017760] ___sys_sendmsg+0xf3/0x170 [ 1925.018224] ? sendmsg_copy_msghdr+0x160/0x160 [ 1925.018772] ? lock_downgrade+0x6d0/0x6d0 [ 1925.019261] ? find_held_lock+0x2c/0x110 [ 1925.019745] ? __fget_files+0x296/0x4c0 [ 1925.020219] ? __fget_light+0xea/0x290 [ 1925.020682] __sys_sendmsg+0xe5/0x1b0 [ 1925.021129] ? __sys_sendmsg_sock+0x40/0x40 [ 1925.021628] ? rcu_read_lock_any_held+0x75/0xa0 [ 1925.022187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1925.022810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1925.023408] ? trace_hardirqs_on+0x5b/0x180 [ 1925.023914] do_syscall_64+0x33/0x40 [ 1925.024350] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1925.024949] RIP: 0033:0x7f119335cb19 [ 1925.025385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1925.027521] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1925.028402] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1925.029231] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1925.030058] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1925.030899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.031725] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1925.057003] FAULT_INJECTION: forcing a failure. [ 1925.057003] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.059599] CPU: 1 PID: 11728 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1925.061092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1925.062859] Call Trace: [ 1925.063428] dump_stack+0x107/0x167 [ 1925.064212] should_fail.cold+0x5/0xa [ 1925.065022] ? create_object.isra.0+0x3a/0xa20 [ 1925.066000] should_failslab+0x5/0x20 [ 1925.066814] kmem_cache_alloc+0x5b/0x310 [ 1925.067690] create_object.isra.0+0x3a/0xa20 [ 1925.068619] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1925.069695] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1925.070968] ? netlink_sendmsg+0x998/0xdf0 [ 1925.072017] __alloc_skb+0xb1/0x5b0 [ 1925.072894] netlink_sendmsg+0x998/0xdf0 [ 1925.073872] ? netlink_unicast+0x7f0/0x7f0 [ 1925.074927] ? netlink_unicast+0x7f0/0x7f0 [ 1925.075939] __sock_sendmsg+0x154/0x190 [ 1925.076886] ____sys_sendmsg+0x70d/0x870 [ 1925.077860] ? sock_write_iter+0x3d0/0x3d0 [ 1925.078874] ? do_recvmmsg+0x6d0/0x6d0 [ 1925.079819] ? perf_trace_lock+0xac/0x490 [ 1925.080818] ? __lockdep_reset_lock+0x180/0x180 [ 1925.081922] ? perf_trace_lock+0xac/0x490 [ 1925.082923] ? SOFTIRQ_verbose+0x10/0x10 [ 1925.083902] ___sys_sendmsg+0xf3/0x170 [ 1925.084839] ? sendmsg_copy_msghdr+0x160/0x160 [ 1925.085940] ? lock_downgrade+0x6d0/0x6d0 [ 1925.086964] ? find_held_lock+0x2c/0x110 [ 1925.087843] ? __fget_files+0x296/0x4c0 [ 1925.088662] ? __fget_light+0xea/0x290 [ 1925.089461] __sys_sendmsg+0xe5/0x1b0 [ 1925.090237] ? __sys_sendmsg_sock+0x40/0x40 [ 1925.091124] ? rcu_read_lock_any_held+0x75/0xa0 [ 1925.092087] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1925.093166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1925.094228] ? trace_hardirqs_on+0x5b/0x180 [ 1925.095113] do_syscall_64+0x33/0x40 [ 1925.095872] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1925.096918] RIP: 0033:0x7fe17b63eb19 [ 1925.097688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1925.101408] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1925.102986] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1925.104438] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1925.105890] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1925.107365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.108799] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:02:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/248, 0xf8}], 0x1) fcntl$getflags(r0, 0x68c8c5ed239ff773) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x8020200) 18:02:33 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x2}}, @isdn={0x22, 0x5, 0x0, 0x1f, 0x2}, @ax25={0x3, @bcast, 0x4}, 0x8, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)='veth0_macvtap\x00', 0x6, 0x2, 0x5033}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x600, 0x108, 0x9}, 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000004c0)={0x0, 0x1, 0x9, 0x19, 0x63, &(0x7f00000000c0)="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"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)) 18:02:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:02:33 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 9) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1925.277521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1925.280114] FAULT_INJECTION: forcing a failure. [ 1925.280114] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.281544] CPU: 0 PID: 11756 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1925.282320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1925.283266] Call Trace: [ 1925.283578] dump_stack+0x107/0x167 [ 1925.283987] should_fail.cold+0x5/0xa [ 1925.284412] ? create_object.isra.0+0x3a/0xa20 [ 1925.284923] should_failslab+0x5/0x20 [ 1925.285349] kmem_cache_alloc+0x5b/0x310 [ 1925.285825] create_object.isra.0+0x3a/0xa20 [ 1925.286320] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1925.286890] kmem_cache_alloc_node+0x169/0x330 [ 1925.287426] __alloc_skb+0x6d/0x5b0 [ 1925.287837] tcf_action_add+0x1c5/0x440 [ 1925.288293] ? tca_action_gd+0xdd0/0xdd0 [ 1925.288767] ? avc_has_extended_perms+0xf40/0xf40 [ 1925.289322] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1925.289970] ? __nla_parse+0x3e/0x50 [ 1925.290405] tc_ctl_action+0x345/0x450 [ 1925.290870] ? tcf_action_add+0x440/0x440 [ 1925.291351] ? rtnetlink_rcv_msg+0x38a/0xbb0 [ 1925.291871] ? tcf_action_add+0x440/0x440 [ 1925.292343] rtnetlink_rcv_msg+0x41e/0xbb0 [ 1925.292835] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1925.293308] ? perf_trace_lock+0xac/0x490 [ 1925.293785] ? __lockdep_reset_lock+0x180/0x180 [ 1925.294329] netlink_rcv_skb+0x14b/0x430 [ 1925.294815] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1925.295286] ? netlink_ack+0xab0/0xab0 [ 1925.295743] ? netlink_deliver_tap+0x1ae/0xcd0 [ 1925.296278] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1925.296806] ? is_vmalloc_addr+0x7b/0xb0 [ 1925.297278] netlink_unicast+0x549/0x7f0 [ 1925.297748] ? netlink_attachskb+0x870/0x870 [ 1925.298252] ? __virt_addr_valid+0x128/0x350 [ 1925.298785] netlink_sendmsg+0x90f/0xdf0 [ 1925.299262] ? netlink_unicast+0x7f0/0x7f0 [ 1925.299753] ? netlink_sendmsg+0x15/0xdf0 [ 1925.300229] ? netlink_unicast+0x7f0/0x7f0 [ 1925.300725] __sock_sendmsg+0x154/0x190 [ 1925.301202] ____sys_sendmsg+0x70d/0x870 [ 1925.301675] ? sock_write_iter+0x3d0/0x3d0 [ 1925.302152] ? do_recvmmsg+0x6d0/0x6d0 [ 1925.302615] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1925.303251] ___sys_sendmsg+0xf3/0x170 [ 1925.303697] ? sendmsg_copy_msghdr+0x160/0x160 [ 1925.304242] ? lock_downgrade+0x6d0/0x6d0 [ 1925.304718] ? find_held_lock+0x2c/0x110 [ 1925.305198] ? clockevents_program_event+0x14b/0x360 [ 1925.305792] ? __fget_files+0x296/0x4c0 [ 1925.306258] ? __fget_light+0xea/0x290 [ 1925.306722] __sys_sendmsg+0xe5/0x1b0 [ 1925.307164] ? __sys_sendmsg_sock+0x40/0x40 [ 1925.307669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1925.308271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1925.308865] ? trace_hardirqs_on+0x5b/0x180 [ 1925.309369] do_syscall_64+0x33/0x40 [ 1925.309796] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1925.310390] RIP: 0033:0x7f119335cb19 [ 1925.310837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1925.312985] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1925.313877] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1925.314713] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1925.315541] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1925.316369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.317188] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 18:02:33 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 18:02:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfec}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = socket$packet(0x11, 0x0, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x111100, 0x1) inotify_init() io_submit(0x0, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x401, {}, 0x2, 0x6, 0x0, {0x0, 0x0, r1}}, 0x4) io_submit(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r2, 0x0, 0x7ffffff9) [ 1925.354295] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1925.356343] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1925.357433] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1925.359270] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:02:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 8) 18:02:33 executing program 5: write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000001340)={0xb, 0x77, 0x2, 0x6}, 0xb) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20600) r1 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1f, 0x7f, 0x101, 0x20, 0x6, r1}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001980)={'\x00', 0x8d0, 0x8d75, 0xfffffffb, 0x100000000, 0x92b, r1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001340)}, {&(0x7f0000001380)=""/113, 0x71}, {&(0x7f0000001400)=""/159, 0x9f}, {&(0x7f00000014c0)=""/247, 0xf7}, {&(0x7f00000015c0)=""/200, 0xc8}, {&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001780)=""/66, 0x42}, {&(0x7f0000001800)=""/100, 0x64}, {&(0x7f0000001880)=""/62, 0x3e}, {&(0x7f0000001a00)=""/212, 0xd4}], 0xa, &(0x7f0000001b00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001bc0)=""/77, 0x4d}], 0x1}}, {{&(0x7f0000001c80)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/175, 0xaf}, {&(0x7f0000001dc0)=""/160, 0xa0}], 0x2, &(0x7f0000001ec0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001f00), 0x6e, &(0x7f0000004480)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/123, 0x7b}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/72, 0x48}, {&(0x7f0000004080)=""/103, 0x67}, {&(0x7f0000004100)=""/178, 0xb2}, {&(0x7f00000041c0)=""/197, 0xc5}, {&(0x7f00000042c0)=""/30, 0x1e}, {&(0x7f0000004300)=""/235, 0xeb}, {&(0x7f0000004400)=""/98, 0x62}], 0xa, &(0x7f0000004540)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f00000046c0)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004740)=""/128, 0x80}], 0x1, &(0x7f0000004800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f00000048c0), 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004940)=""/43, 0x2b}, {&(0x7f0000004980)=""/224, 0xe0}], 0x2, &(0x7f0000004ac0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x6, 0x101, &(0x7f0000004d80)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004dc0)={0x0}, &(0x7f0000004e00)=0xc) clone3(&(0x7f0000004e80)={0x200000000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200), {0x31}, &(0x7f0000000240)=""/108, 0x6c, &(0x7f00000002c0)=""/4096, &(0x7f0000004e40)=[r1, r1, r1, r2, r3, r1], 0x6}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[]) [ 1925.438804] FAULT_INJECTION: forcing a failure. [ 1925.438804] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.440157] CPU: 0 PID: 11766 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1925.440921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1925.441874] Call Trace: [ 1925.442191] dump_stack+0x107/0x167 [ 1925.442637] should_fail.cold+0x5/0xa [ 1925.443081] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1925.443801] should_failslab+0x5/0x20 [ 1925.444232] __kmalloc+0x72/0x390 [ 1925.444632] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1925.445364] genl_family_rcv_msg_doit+0xda/0x330 [ 1925.445894] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1925.446630] ? cap_capable+0x1d6/0x240 [ 1925.447083] ? security_capable+0x95/0xc0 [ 1925.447556] ? ns_capable+0xe2/0x110 [ 1925.447974] genl_rcv_msg+0x33c/0x5a0 [ 1925.448410] ? genl_get_cmd+0x480/0x480 [ 1925.448846] ? nl80211_associate+0x1110/0x1110 [ 1925.449375] ? lock_release+0x680/0x680 [ 1925.449822] ? __lockdep_reset_lock+0x180/0x180 [ 1925.450384] netlink_rcv_skb+0x14b/0x430 [ 1925.450879] ? genl_get_cmd+0x480/0x480 [ 1925.451353] ? netlink_ack+0xab0/0xab0 [ 1925.451817] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1925.452356] ? is_vmalloc_addr+0x7b/0xb0 [ 1925.452831] genl_rcv+0x24/0x40 [ 1925.453220] netlink_unicast+0x549/0x7f0 [ 1925.453703] ? netlink_attachskb+0x870/0x870 [ 1925.454222] ? __virt_addr_valid+0x128/0x350 [ 1925.454766] netlink_sendmsg+0x90f/0xdf0 [ 1925.455255] ? netlink_unicast+0x7f0/0x7f0 [ 1925.455779] ? netlink_unicast+0x7f0/0x7f0 [ 1925.456294] __sock_sendmsg+0x154/0x190 [ 1925.456783] ____sys_sendmsg+0x70d/0x870 [ 1925.457275] ? sock_write_iter+0x3d0/0x3d0 [ 1925.457770] ? do_recvmmsg+0x6d0/0x6d0 [ 1925.458221] ? perf_trace_lock+0xac/0x490 [ 1925.458727] ? __lockdep_reset_lock+0x180/0x180 [ 1925.459271] ? perf_trace_lock+0xac/0x490 [ 1925.459758] ? SOFTIRQ_verbose+0x10/0x10 [ 1925.460241] ___sys_sendmsg+0xf3/0x170 [ 1925.460700] ? sendmsg_copy_msghdr+0x160/0x160 [ 1925.461259] ? lock_downgrade+0x6d0/0x6d0 [ 1925.461752] ? find_held_lock+0x2c/0x110 [ 1925.462257] ? __fget_files+0x296/0x4c0 [ 1925.462761] ? __fget_light+0xea/0x290 [ 1925.463236] __sys_sendmsg+0xe5/0x1b0 [ 1925.463683] ? __sys_sendmsg_sock+0x40/0x40 [ 1925.464182] ? rcu_read_lock_any_held+0x75/0xa0 [ 1925.464754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1925.465388] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1925.465991] ? trace_hardirqs_on+0x5b/0x180 [ 1925.466538] do_syscall_64+0x33/0x40 [ 1925.466995] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1925.467609] RIP: 0033:0x7fe17b63eb19 [ 1925.468024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1925.470145] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1925.471044] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1925.471874] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1925.472724] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1925.473580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.474425] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:02:33 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 10) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:02:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:02:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') [ 1925.575800] ISOFS: Unable to identify CD-ROM format. 18:02:34 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:02:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 9) [ 1925.604464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1925.608253] FAULT_INJECTION: forcing a failure. [ 1925.608253] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.610737] CPU: 1 PID: 11772 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1925.612139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1925.613839] Call Trace: [ 1925.614392] dump_stack+0x107/0x167 [ 1925.615157] should_fail.cold+0x5/0xa [ 1925.615963] should_failslab+0x5/0x20 [ 1925.616755] __kmalloc_node_track_caller+0x74/0x3b0 [ 1925.617778] ? tcf_action_add+0x1c5/0x440 [ 1925.618648] __alloc_skb+0xb1/0x5b0 [ 1925.619404] tcf_action_add+0x1c5/0x440 [ 1925.620238] ? tca_action_gd+0xdd0/0xdd0 [ 1925.621081] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1925.622276] ? tc_ctl_action+0x1e3/0x450 [ 1925.623143] tc_ctl_action+0x345/0x450 [ 1925.623958] ? tcf_action_add+0x440/0x440 [ 1925.624813] ? rtnetlink_rcv_msg+0x38a/0xbb0 [ 1925.625750] ? tcf_action_add+0x440/0x440 [ 1925.626613] rtnetlink_rcv_msg+0x41e/0xbb0 [ 1925.627492] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1925.628337] ? perf_trace_lock+0xac/0x490 [ 1925.629204] ? __lockdep_reset_lock+0x180/0x180 [ 1925.630175] netlink_rcv_skb+0x14b/0x430 [ 1925.631008] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1925.631853] ? netlink_ack+0xab0/0xab0 [ 1925.632638] ? netlink_deliver_tap+0x1ae/0xcd0 [ 1925.633586] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1925.634502] ? is_vmalloc_addr+0x7b/0xb0 [ 1925.635360] netlink_unicast+0x549/0x7f0 [ 1925.636210] ? netlink_attachskb+0x870/0x870 [ 1925.637115] ? __virt_addr_valid+0x128/0x350 18:02:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000020003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1925.638038] netlink_sendmsg+0x90f/0xdf0 [ 1925.639032] ? netlink_unicast+0x7f0/0x7f0 [ 1925.639894] ? netlink_unicast+0x7f0/0x7f0 [ 1925.640742] __sock_sendmsg+0x154/0x190 [ 1925.641542] ____sys_sendmsg+0x70d/0x870 [ 1925.642360] ? sock_write_iter+0x3d0/0x3d0 [ 1925.643214] ? do_recvmmsg+0x6d0/0x6d0 [ 1925.643994] ? perf_trace_lock+0xac/0x490 [ 1925.644835] ? __lockdep_reset_lock+0x180/0x180 [ 1925.645767] ? perf_trace_lock+0xac/0x490 [ 1925.646614] ? SOFTIRQ_verbose+0x10/0x10 [ 1925.647438] ___sys_sendmsg+0xf3/0x170 [ 1925.648222] ? sendmsg_copy_msghdr+0x160/0x160 [ 1925.649145] ? lock_downgrade+0x6d0/0x6d0 [ 1925.649983] ? find_held_lock+0x2c/0x110 [ 1925.650822] ? __fget_files+0x296/0x4c0 [ 1925.651632] ? __fget_light+0xea/0x290 [ 1925.652424] __sys_sendmsg+0xe5/0x1b0 [ 1925.653190] ? __sys_sendmsg_sock+0x40/0x40 [ 1925.654051] ? rcu_read_lock_any_held+0x75/0xa0 [ 1925.655013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1925.656061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1925.657090] ? trace_hardirqs_on+0x5b/0x180 [ 1925.657961] do_syscall_64+0x33/0x40 [ 1925.658725] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1925.659752] RIP: 0033:0x7f119335cb19 [ 1925.660501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1925.664176] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1925.665696] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1925.667126] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1925.668548] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1925.669973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1925.671421] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1925.707941] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1925.709509] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1925.710369] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1925.711701] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 1925.759833] FAULT_INJECTION: forcing a failure. [ 1925.759833] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.762184] CPU: 1 PID: 11840 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1925.763593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1925.765252] Call Trace: [ 1925.765790] dump_stack+0x107/0x167 [ 1925.766534] should_fail.cold+0x5/0xa [ 1925.767304] ? create_object.isra.0+0x3a/0xa20 [ 1925.768223] should_failslab+0x5/0x20 [ 1925.768999] kmem_cache_alloc+0x5b/0x310 [ 1925.769826] ? mark_lock+0xf5/0x2df0 [ 1925.770609] create_object.isra.0+0x3a/0xa20 [ 1925.771499] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1925.772533] __kmalloc+0x16e/0x390 [ 1925.773262] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1925.774565] genl_family_rcv_msg_doit+0xda/0x330 [ 1925.775543] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1925.776894] ? cap_capable+0x1d6/0x240 [ 1925.777695] ? security_capable+0x95/0xc0 [ 1925.778566] ? ns_capable+0xe2/0x110 [ 1925.779342] genl_rcv_msg+0x33c/0x5a0 [ 1925.780142] ? genl_get_cmd+0x480/0x480 [ 1925.780965] ? nl80211_associate+0x1110/0x1110 [ 1925.781918] ? lock_release+0x680/0x680 [ 1925.782754] ? __lockdep_reset_lock+0x180/0x180 [ 1925.783717] netlink_rcv_skb+0x14b/0x430 [ 1925.784555] ? genl_get_cmd+0x480/0x480 [ 1925.785379] ? netlink_ack+0xab0/0xab0 [ 1925.786197] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1925.787151] ? is_vmalloc_addr+0x7b/0xb0 [ 1925.787994] genl_rcv+0x24/0x40 [ 1925.788673] netlink_unicast+0x549/0x7f0 [ 1925.789516] ? netlink_attachskb+0x870/0x870 [ 1925.790423] ? __virt_addr_valid+0x128/0x350 [ 1925.791354] netlink_sendmsg+0x90f/0xdf0 [ 1925.792204] ? netlink_unicast+0x7f0/0x7f0 [ 1925.793088] ? netlink_unicast+0x7f0/0x7f0 [ 1925.793965] __sock_sendmsg+0x154/0x190 [ 1925.794792] ____sys_sendmsg+0x70d/0x870 [ 1925.795640] ? sock_write_iter+0x3d0/0x3d0 [ 1925.796507] ? do_recvmmsg+0x6d0/0x6d0 [ 1925.797311] ? perf_trace_lock+0xac/0x490 [ 1925.798173] ? __lockdep_reset_lock+0x180/0x180 [ 1925.799139] ? perf_trace_lock+0xac/0x490 [ 1925.799983] ? SOFTIRQ_verbose+0x10/0x10 [ 1925.800828] ___sys_sendmsg+0xf3/0x170 [ 1925.801631] ? sendmsg_copy_msghdr+0x160/0x160 [ 1925.802611] ? lock_downgrade+0x6d0/0x6d0 [ 1925.803463] ? find_held_lock+0x2c/0x110 [ 1925.804317] ? __fget_files+0x296/0x4c0 [ 1925.805151] ? __fget_light+0xea/0x290 [ 1925.805973] __sys_sendmsg+0xe5/0x1b0 [ 1925.806770] ? __sys_sendmsg_sock+0x40/0x40 [ 1925.807658] ? rcu_read_lock_any_held+0x75/0xa0 [ 1925.808637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1925.809713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1925.810813] ? trace_hardirqs_on+0x5b/0x180 [ 1925.811714] do_syscall_64+0x33/0x40 [ 1925.812487] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1925.813541] RIP: 0033:0x7fe17b63eb19 [ 1925.814302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1925.818089] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1925.819671] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1925.821109] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1925.822558] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1925.824005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 18:02:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) [ 1925.825460] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:02:34 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:02:34 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 11) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:02:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000021003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1925.886272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1925.888546] FAULT_INJECTION: forcing a failure. [ 1925.888546] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.891288] CPU: 1 PID: 11899 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1925.892687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1925.894364] Call Trace: [ 1925.894916] dump_stack+0x107/0x167 [ 1925.895682] should_fail.cold+0x5/0xa [ 1925.896468] ? create_object.isra.0+0x3a/0xa20 [ 1925.897419] should_failslab+0x5/0x20 [ 1925.898194] kmem_cache_alloc+0x5b/0x310 18:02:34 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed7fdf49391c8bea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x501100, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) 18:02:34 executing program 5: r0 = syz_io_uring_setup(0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x260}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x5, 0x10100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r1, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000180)={0x0, 0x6, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x7f}, &(0x7f0000000200)={0x3fc, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x80020000000}, 0x0, 0x0, 0x0) [ 1925.899049] create_object.isra.0+0x3a/0xa20 [ 1925.900068] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1925.901109] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1925.902142] ? tcf_action_add+0x1c5/0x440 [ 1925.903006] __alloc_skb+0xb1/0x5b0 18:02:34 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 1925.903765] tcf_action_add+0x1c5/0x440 [ 1925.904661] ? tca_action_gd+0xdd0/0xdd0 [ 1925.905483] ? avc_has_extended_perms+0xf40/0xf40 [ 1925.906462] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1925.907610] ? __nla_parse+0x3e/0x50 [ 1925.908379] tc_ctl_action+0x345/0x450 [ 1925.909175] ? tcf_action_add+0x440/0x440 [ 1925.910027] ? rtnetlink_rcv_msg+0x38a/0xbb0 [ 1925.910959] ? tcf_action_add+0x440/0x440 [ 1925.911799] rtnetlink_rcv_msg+0x41e/0xbb0 [ 1925.912668] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1925.913490] ? perf_trace_lock+0xac/0x490 [ 1925.914347] ? __lockdep_reset_lock+0x180/0x180 [ 1925.915317] netlink_rcv_skb+0x14b/0x430 [ 1925.916141] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1925.916978] ? netlink_ack+0xab0/0xab0 [ 1925.917774] ? netlink_deliver_tap+0x1ae/0xcd0 [ 1925.918738] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1925.919668] ? is_vmalloc_addr+0x7b/0xb0 [ 1925.920500] netlink_unicast+0x549/0x7f0 [ 1925.921328] ? netlink_attachskb+0x870/0x870 [ 1925.922215] ? __virt_addr_valid+0x128/0x350 [ 1925.923131] netlink_sendmsg+0x90f/0xdf0 [ 1925.923970] ? netlink_unicast+0x7f0/0x7f0 [ 1925.924837] ? netlink_unicast+0x7f0/0x7f0 [ 1925.925687] __sock_sendmsg+0x154/0x190 [ 1925.926491] ____sys_sendmsg+0x70d/0x870 [ 1925.927320] ? sock_write_iter+0x3d0/0x3d0 [ 1925.928174] ? do_recvmmsg+0x6d0/0x6d0 [ 1925.928954] ? perf_trace_lock+0xac/0x490 [ 1925.929811] ? __lockdep_reset_lock+0x180/0x180 [ 1925.930764] ? perf_trace_lock+0xac/0x490 [ 1925.931613] ___sys_sendmsg+0xf3/0x170 [ 1925.932411] ? sendmsg_copy_msghdr+0x160/0x160 [ 1925.933334] ? lock_downgrade+0x6d0/0x6d0 [ 1925.934172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1925.935233] ? trace_hardirqs_on+0x5b/0x180 [ 1925.936115] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1925.937206] ? __fget_files+0x296/0x4c0 [ 1925.938038] ? __fget_light+0xea/0x290 [ 1925.938847] __sys_sendmsg+0xe5/0x1b0 [ 1925.939618] ? __sys_sendmsg_sock+0x40/0x40 [ 1925.940492] ? io_schedule_timeout+0x140/0x140 [ 1925.941430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1925.942482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1925.943532] ? trace_hardirqs_on+0x5b/0x180 [ 1925.944402] do_syscall_64+0x33/0x40 [ 1925.945156] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1925.946181] RIP: 0033:0x7f119335cb19 [ 1925.946952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1925.950654] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1925.952211] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1925.953635] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1925.955069] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1925.956494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1925.957922] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1926.012437] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1926.013459] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1926.014002] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1926.014865] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 1926.094780] audit: type=1326 audit(1703181754.537:257): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11904 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60877bcb19 code=0x0 [ 1926.164631] audit: type=1326 audit(1703181754.607:258): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11904 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60877bcb19 code=0x0 18:02:56 executing program 5: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000440)) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000540)={r1, 0x5a, 0x33}, &(0x7f0000000580)={'enc=', 'raw', ' hash=', {'sha3-384-generic\x00'}}, &(0x7f00000006c0)="8776720a424a69c0842e27052ba6367a4932e9ff18ddf5884e6ad2b39c74a2dee15f1cf90b247542ca56f774635e6a5c2d352721938a93622529065d8da82a5ac8c8ba5669b50d150c28f5a033da735b1cb6af4d67ccd87bf4f8", &(0x7f0000000600)=""/51) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffc, r2, 0x1) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x6112102) keyctl$get_security(0x11, r6, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000100)='.dead\x00', 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 18:02:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 10) 18:02:56 executing program 0: r0 = epoll_create1(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x90000019}) epoll_create(0x3ff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 18:02:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:02:56 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:02:56 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 12) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1948.457754] FAULT_INJECTION: forcing a failure. [ 1948.457754] name failslab, interval 1, probability 0, space 0, times 0 18:02:56 executing program 2: msgrcv(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000ff84ff487ac84500000000000000003300e8f8493074c2234200d8ca19a1de956fc8f1003985e42f3007ec0dc3938f1d0cb2de0ff449ff4831ac8812f127bd6efdef"], 0x42, 0x1, 0x2800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_targets\x00') r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000100)=""/180, 0xb4}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000004c0)) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f00000002c0)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x3}, 0x4) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000001e00)={{0x2, 0x3, 0x3, 0x4, 0x4, 0x2}, 0x39e, [0x5, 0x89, 0x1ff, 0x7, 0xfffffffc, 0x4, 0x9, 0x6, 0xffff, 0x43d, 0x9, 0x8001, 0xfffffffe, 0xc97e, 0x401, 0x6, 0x4, 0x9, 0x5, 0xffffff80, 0x8, 0x2, 0x9, 0x0, 0x80000001, 0x1ff, 0x9, 0xfffffffe, 0x7fff, 0xb172, 0x3, 0xdac4, 0x8, 0x7ff, 0x8, 0x401, 0xffffeb84, 0x10, 0x4, 0x5, 0x80000001, 0x1, 0x7, 0xffff0000, 0xe0, 0x2, 0x7fff, 0x4, 0x7, 0xefc, 0x8, 0xfffffff9, 0xd4b6, 0x81, 0x7, 0x9, 0x3, 0x0, 0x2, 0x2, 0x0, 0x1000, 0x0, 0x3, 0x80000001, 0x3, 0x3, 0x9, 0x3ff, 0xfff, 0x7ff, 0x0, 0x4, 0x0, 0x5, 0x5, 0x9, 0x7, 0x7, 0x0, 0x6, 0x8001, 0xcb, 0x2, 0x3, 0x3, 0x101, 0x7b, 0x858, 0xd0, 0xf7, 0x5, 0x5, 0x5, 0xa36, 0x2, 0x1f, 0x9, 0x20, 0x5, 0x8000, 0x200, 0xab75, 0x4, 0x4, 0x9, 0x225f, 0x1, 0x400, 0x3, 0x0, 0x1, 0x6f1a, 0x3, 0x6b, 0x8, 0x1, 0x8e9, 0x7fffffff, 0xfffffffe, 0x80000000, 0xf5ba, 0x101, 0xfff, 0x1f, 0x80000000, 0xa000, 0x3, 0x101, 0x3, 0x3c7, 0x8, 0x20, 0x4, 0x5, 0x3e1, 0x81, 0x6, 0x6, 0x401, 0x1, 0x55a2, 0x1, 0x7fff, 0x8000, 0xce7, 0x81, 0x101, 0x7, 0x5, 0x3, 0xab3, 0x1000, 0x2, 0x3ff, 0x2, 0x9, 0x7f, 0xffff0c8b, 0x9, 0x401, 0x800, 0x6, 0x7041, 0xffffffff, 0x80000001, 0x0, 0x2, 0x10000, 0x40, 0x2, 0x401, 0x5, 0xdba, 0x240, 0x3, 0x71b, 0x0, 0x7, 0x8001, 0x101, 0x1, 0x3, 0x8, 0x0, 0x5, 0x5, 0x8, 0xfffeffff, 0xf1, 0xe675, 0x9, 0x3c, 0xfffff800, 0x619eb70c, 0x1, 0xffffffff, 0x7, 0x9, 0x9, 0x0, 0x0, 0x9, 0x7, 0x1ff, 0x5, 0x939, 0x81, 0xfffffffa, 0x9, 0x3b41, 0x1, 0xffffffff, 0x4, 0xfff, 0x1, 0xcb, 0xe5d, 0x20, 0x7, 0x43980000, 0x6, 0x9, 0x5, 0xda2aa68, 0x7fff, 0x6, 0x40, 0x5, 0x4c9, 0x3f, 0x3240f642, 0x0, 0x0, 0x6, 0x0, 0x1f, 0x2, 0x9, 0xc192, 0x0, 0x800, 0x5, 0x800, 0x4, 0x1f, 0x0, 0x691, 0x3562, 0x3, 0x0, 0x6, 0x7, 0x1, 0x9, 0x1, 0x80, 0x2, 0xffff, 0x5, 0x1400, 0x20000000, 0x2, 0x7fffffff, 0x1c1, 0x4, 0x6, 0xfffffffc, 0x8, 0x80000000, 0x7, 0x4, 0x7fffffff, 0x5, 0x7, 0x8, 0x0, 0x9, 0xffff8001, 0x439d17e5, 0xdb3, 0x5, 0xffffffff, 0xfffffff8, 0x1, 0x8, 0x6, 0x800, 0x3, 0x10000, 0x7523, 0x5, 0x3, 0x8, 0x9, 0x7b8, 0x2, 0x1ff, 0x8, 0x3, 0x7, 0x8, 0x0, 0x20, 0x1f, 0x38000000, 0x4, 0x4, 0x8, 0x7ff, 0x5f, 0x40, 0x10, 0xf47e, 0x4, 0x5, 0xa3b, 0x3ff, 0x2, 0x7be, 0x6, 0x5, 0x2a2, 0x75b, 0x7c7, 0x0, 0x2, 0x8, 0x80, 0xfffffff7, 0x2003f432, 0x587, 0x400, 0x7ff, 0x2, 0xff, 0x3f, 0x40, 0x8, 0xfff, 0xc7b, 0x9, 0x3ff, 0x1ff, 0x20, 0x6, 0x1, 0x2, 0x10000, 0x6, 0x5, 0x40, 0x5, 0x3, 0x6, 0xc0, 0x2993, 0x8, 0x7, 0x6, 0x81, 0x2, 0x5eb678cc, 0x8000, 0xc7, 0x6, 0x401, 0x2, 0xc0, 0x1f, 0x8, 0x7fffffff, 0x4, 0x20, 0x8fd, 0x3f, 0xb13a, 0x4, 0x4, 0xfffffff9, 0x9, 0x400, 0x9, 0x7, 0x43d, 0x3, 0x4, 0x7f, 0x8001, 0x7ff, 0x3f, 0xffff, 0x5, 0x7, 0x2, 0x1, 0x0, 0x85a, 0x4, 0x8000, 0x3, 0x3, 0xdc, 0x6, 0x9, 0x0, 0x2, 0x7, 0x7, 0x3, 0x80000001, 0x0, 0x20, 0x80000001, 0x433a, 0x1, 0x0, 0x100, 0x9, 0x7, 0x8f3c, 0x3, 0x7ff, 0x4, 0x0, 0xc6391d8, 0x7, 0x5, 0x7, 0x40, 0x0, 0x7, 0x9a6a, 0x400, 0x2, 0x2, 0x7, 0x6, 0x7, 0xd71b, 0x8, 0x8, 0xffff, 0x1, 0x9, 0xf213, 0x4fc9, 0x2, 0x7, 0xfff, 0x401, 0x6, 0xbaf4, 0x4, 0x4, 0xfef, 0x181d956a, 0xf6c5, 0x0, 0x32b, 0x9e, 0x85, 0x1, 0x5, 0x7, 0xfff, 0x80000001, 0xfffffff9, 0x7fffffff, 0x800, 0x1, 0x8, 0x6, 0xc1, 0x80000000, 0x1, 0x9, 0x9, 0x20, 0x54, 0x6, 0x9, 0x1, 0x7, 0x3, 0x4, 0x1, 0x7, 0x95, 0x9, 0x1ff, 0x8, 0xfffff4a1, 0x3, 0x7fffffff, 0x9c2b, 0x1, 0x0, 0x1, 0x9, 0x9, 0xfffff800, 0x20, 0x300, 0x6, 0x1, 0x322157e2, 0x6, 0x506a, 0x5b832a4d, 0x80, 0x100, 0xe69, 0x1f, 0x2, 0xffff, 0x3ff, 0x3, 0x0, 0x4, 0x4, 0x1ff, 0xd089, 0x3c3, 0x80000000, 0xffffffff, 0x80000000, 0x3ff, 0x200, 0x4, 0x32d, 0x14, 0x7, 0x400, 0x3, 0x7, 0x8, 0xa9a, 0x34bd12fe, 0x80000000, 0x2, 0x8, 0xfffff334, 0x2, 0x4800, 0xf799, 0x73e6, 0x5, 0x7, 0x3, 0xfa, 0x3f, 0x6, 0x463, 0x8, 0x0, 0x2, 0x80000001, 0x3ff, 0x4, 0x984, 0x800, 0xfffffff8, 0x5, 0x8, 0x5, 0x80000000, 0x80000001, 0x3, 0x4, 0x1, 0x7fffffff, 0x5, 0x1000, 0x80000001, 0x94, 0x401, 0x6, 0xfffffffc, 0x80, 0x80000000, 0x8, 0x5, 0x7fff, 0x8, 0x10100000, 0x8, 0x0, 0x4, 0x0, 0xff, 0x5, 0x0, 0x383, 0x0, 0x1f, 0x8, 0x8, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0xfffff2a2, 0x8000, 0xfffc0000, 0x3c04, 0x3, 0x9, 0x4, 0x101, 0x9, 0x20f, 0x7, 0x5, 0x7, 0xfffffff7, 0xf5fa, 0x3, 0xaa07, 0x9, 0x1, 0x3, 0x4, 0x5d0e, 0x1, 0x4, 0x9, 0xd4eac84, 0x1, 0x81, 0x0, 0x6, 0xffff9686, 0x0, 0x9, 0x9, 0x100, 0x7ff, 0x9, 0xa01, 0xfffffff7, 0x4c, 0x200, 0x0, 0x9, 0x1, 0x1, 0x7fff, 0x1, 0x8, 0xffffffff, 0x6, 0x6, 0x5, 0x3, 0x5, 0x7, 0x9, 0x80000001, 0x8, 0xffffffff, 0x1, 0x101, 0x6, 0x101, 0x1, 0x40, 0x8, 0x1, 0x2, 0xffff0001, 0xffffffff, 0x525, 0x5, 0x0, 0x9, 0x4, 0x1ff, 0x5, 0x9, 0x3, 0x3ff, 0x4e3, 0x2, 0xad, 0x0, 0x1, 0x0, 0x80000001, 0x1, 0x401, 0x3, 0x1, 0x2, 0x8, 0x40, 0x8000, 0x6, 0x9a1, 0x4, 0x1ff, 0x0, 0xff, 0x5, 0x3, 0x8001, 0x6, 0x4, 0xe3, 0x0, 0x3, 0xfff, 0x7, 0x2, 0x80000000, 0x0, 0x3, 0x3, 0x10000, 0x1000, 0x7, 0x8, 0x54, 0x6, 0x8c3, 0xffffffff, 0x2, 0x3, 0x400000, 0x6, 0x1, 0x7723, 0x10001, 0xba, 0x9, 0x0, 0x2, 0x6, 0x1, 0x98d, 0x2, 0x0, 0x3ff, 0x4, 0x6, 0x9, 0x10000, 0x8, 0x0, 0x9, 0xfffffffc, 0x6, 0xffffffff, 0x4, 0x1ff, 0x1, 0x4000000, 0x80000001, 0x7, 0x2, 0x4, 0x3, 0x1, 0x80000001, 0x10001, 0x400, 0xffffffc1, 0x9, 0x5, 0x100, 0x8000, 0x5, 0xffffffff, 0x2, 0x1f, 0x0, 0x401, 0x4, 0x0, 0x3, 0x4, 0x5a4b9761, 0x5, 0x400, 0x9, 0x2, 0x77169787, 0xd33, 0x2, 0x10001, 0x100, 0x344, 0x1, 0x8, 0x7774, 0x100, 0x0, 0x6, 0x7, 0x7fffffff, 0x8000, 0x4, 0xee, 0x64c, 0xffff, 0x1, 0x7, 0x3, 0xff, 0x6, 0x0, 0x10001, 0x6, 0x8, 0x1f, 0x9, 0x3, 0x5, 0x4, 0x0, 0x4, 0x3, 0x0, 0x8001, 0xc1e, 0x7, 0x3, 0x20000000, 0x800, 0x9045, 0x2, 0xfffffff7, 0x2, 0x5c, 0x1, 0x31, 0x8001, 0x4, 0x4, 0x3, 0xfffffff8, 0x8, 0x763, 0x5e, 0x1, 0x7, 0x6a, 0x80, 0x8001, 0x8, 0x81, 0xe6, 0x7fffffff, 0x8000, 0x8, 0x9, 0xfffff000, 0x5, 0x100, 0x1, 0x1, 0x7, 0x0, 0xc6, 0x1, 0x5, 0x7f, 0x8001, 0xfffffff8, 0x101, 0x400, 0x2, 0xbc000000, 0x9, 0x1000, 0x1000, 0x7fffffff, 0x80000001, 0x2, 0x5, 0xc9d1, 0x7ff, 0x1, 0x8, 0x2, 0x7, 0x8, 0x8, 0x1, 0x20, 0x2, 0xfffffffc, 0x8, 0x263, 0x90000000, 0x800, 0x1000, 0xecb, 0x8, 0x809, 0x0, 0x3, 0x0, 0x100, 0x7, 0x2, 0x2, 0x7, 0x7f, 0x5, 0x7f, 0x40, 0x7f, 0x3ff, 0x9, 0xd6b, 0x4, 0x7, 0x0, 0x5, 0x1b, 0xfff, 0x6, 0x6, 0x3, 0x9, 0x0, 0x5, 0x6b9, 0x6, 0xffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x2, 0xffff, 0xe2, 0x7fff, 0x8, 0x1, 0x8001, 0x0, 0x1b8, 0x80000001, 0x80000000, 0x0, 0x10000, 0xe42, 0x4, 0x0, 0x6, 0x2, 0x18ee, 0x6, 0x5, 0x8, 0x8, 0x1, 0x9, 0x7, 0x0, 0x9e0b, 0x80000000, 0x3, 0x0, 0xffffff01, 0x9, 0xf09, 0xffffffff, 0x8, 0x2, 0xd8ae, 0x2, 0x6, 0x0, 0xff, 0x18, 0x9, 0x2, 0x7fff, 0x5, 0x1f, 0x1, 0x7, 0x10001, 0x9, 0xc61927e9, 0x7, 0x8, 0x5, 0xa98f, 0x6, 0x7fff, 0x5, 0x9, 0x1, 0x200, 0xfff, 0x9, 0x1f, 0x80, 0x6d9c, 0x4, 0x3, 0x7, 0xfffffff8, 0x4, 0x0, 0x3, 0x8000, 0x1, 0x73, 0x2, 0x101, 0x0, 0xffff7fff, 0x1, 0x3, 0x4, 0x8001]}) setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f0000000280)=0xe8, 0x4) ioprio_get$pid(0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="080400001000080027bd7000ffdbdf25170000000c009500ffffffffffffffffe41ef15ac2e9aa9a747d4dc06abe67aa44d2761da7de14eaae960eb83025d9eac73e455a8e196173853be2ad7a5f36139e3f88ce779cd4c1969a45094bd02b6e01d31476bd8b9aabff22685e93668e67f229b552a5783b2d03338008007b00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'], 0x408}, 0x1, 0x0, 0x0, 0x20004050}, 0x4048000) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x4000000000000b3, 0x4000880) [ 1948.460252] CPU: 1 PID: 11929 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1948.461900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1948.463617] Call Trace: [ 1948.464167] dump_stack+0x107/0x167 [ 1948.464917] should_fail.cold+0x5/0xa [ 1948.465697] ? create_object.isra.0+0x3a/0xa20 [ 1948.466640] should_failslab+0x5/0x20 [ 1948.467430] kmem_cache_alloc+0x5b/0x310 [ 1948.468261] ? mark_lock+0xf5/0x2df0 [ 1948.469024] create_object.isra.0+0x3a/0xa20 [ 1948.469923] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1948.470979] __kmalloc+0x16e/0x390 18:02:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) [ 1948.471832] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1948.473146] genl_family_rcv_msg_doit+0xda/0x330 [ 1948.474119] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1948.475465] ? cap_capable+0x1d6/0x240 [ 1948.476263] ? security_capable+0x95/0xc0 [ 1948.477110] ? ns_capable+0xe2/0x110 [ 1948.477876] genl_rcv_msg+0x33c/0x5a0 [ 1948.478663] ? genl_get_cmd+0x480/0x480 [ 1948.479488] ? nl80211_associate+0x1110/0x1110 [ 1948.480426] ? lock_release+0x680/0x680 [ 1948.481239] ? __lockdep_reset_lock+0x180/0x180 [ 1948.482193] netlink_rcv_skb+0x14b/0x430 [ 1948.483036] ? genl_get_cmd+0x480/0x480 [ 1948.483845] ? netlink_ack+0xab0/0xab0 [ 1948.484654] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1948.485581] ? is_vmalloc_addr+0x7b/0xb0 [ 1948.486416] genl_rcv+0x24/0x40 [ 1948.487133] netlink_unicast+0x549/0x7f0 [ 1948.488131] ? netlink_attachskb+0x870/0x870 [ 1948.489025] ? __virt_addr_valid+0x128/0x350 [ 1948.489934] netlink_sendmsg+0x90f/0xdf0 [ 1948.490775] ? netlink_unicast+0x7f0/0x7f0 [ 1948.491668] ? netlink_unicast+0x7f0/0x7f0 [ 1948.492529] __sock_sendmsg+0x154/0x190 [ 1948.493345] ____sys_sendmsg+0x70d/0x870 [ 1948.494174] ? sock_write_iter+0x3d0/0x3d0 [ 1948.495037] ? do_recvmmsg+0x6d0/0x6d0 [ 1948.495831] ? perf_trace_lock+0xac/0x490 [ 1948.496679] ? __lockdep_reset_lock+0x180/0x180 [ 1948.497619] ? perf_trace_lock+0xac/0x490 [ 1948.498460] ? SOFTIRQ_verbose+0x10/0x10 [ 1948.499308] ___sys_sendmsg+0xf3/0x170 [ 1948.500116] ? sendmsg_copy_msghdr+0x160/0x160 [ 1948.501059] ? lock_downgrade+0x6d0/0x6d0 [ 1948.501916] ? find_held_lock+0x2c/0x110 [ 1948.502758] ? __fget_files+0x296/0x4c0 [ 1948.503583] ? __fget_light+0xea/0x290 [ 1948.504393] __sys_sendmsg+0xe5/0x1b0 [ 1948.505176] ? __sys_sendmsg_sock+0x40/0x40 [ 1948.506066] ? rcu_read_lock_any_held+0x75/0xa0 [ 1948.507051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1948.508126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1948.509174] ? trace_hardirqs_on+0x5b/0x180 [ 1948.510057] do_syscall_64+0x33/0x40 [ 1948.510838] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1948.511882] RIP: 0033:0x7fe17b63eb19 [ 1948.512642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1948.516375] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1948.517918] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1948.519390] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1948.520841] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1948.522335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1948.523792] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:02:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000023003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1948.574502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1948.591499] FAULT_INJECTION: forcing a failure. [ 1948.591499] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.593952] CPU: 0 PID: 11928 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1948.595373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1948.597070] Call Trace: [ 1948.597630] dump_stack+0x107/0x167 [ 1948.598400] should_fail.cold+0x5/0xa [ 1948.599209] ? skb_clone+0x14f/0x3d0 [ 1948.599987] should_failslab+0x5/0x20 [ 1948.600777] kmem_cache_alloc+0x5b/0x310 [ 1948.601619] ? lock_release+0x680/0x680 [ 1948.602445] skb_clone+0x14f/0x3d0 [ 1948.603205] netlink_trim+0x1b2/0x250 [ 1948.603981] netlink_broadcast_filtered+0x60/0xdc0 [ 1948.604964] ? skb_put+0x134/0x180 [ 1948.605688] ? memset+0x20/0x50 [ 1948.606368] ? __nla_reserve+0x9a/0xc0 [ 1948.607174] ? tcf_action_dump+0x1d3/0x2a0 [ 1948.608037] netlink_broadcast+0x35/0x50 [ 1948.608872] rtnetlink_send+0x129/0x180 [ 1948.609695] tcf_action_add+0x2cc/0x440 [ 1948.610511] ? tca_action_gd+0xdd0/0xdd0 [ 1948.611391] ? avc_has_extended_perms+0xf40/0xf40 [ 1948.612380] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1948.613550] ? __nla_parse+0x3e/0x50 [ 1948.614328] tc_ctl_action+0x345/0x450 [ 1948.615156] ? tcf_action_add+0x440/0x440 [ 1948.615999] ? rtnetlink_rcv_msg+0x38a/0xbb0 [ 1948.616939] ? tcf_action_add+0x440/0x440 [ 1948.617804] rtnetlink_rcv_msg+0x41e/0xbb0 [ 1948.618671] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1948.619523] ? perf_trace_lock+0xac/0x490 [ 1948.620378] ? __lockdep_reset_lock+0x180/0x180 [ 1948.621337] netlink_rcv_skb+0x14b/0x430 [ 1948.622158] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1948.622994] ? netlink_ack+0xab0/0xab0 [ 1948.623794] ? netlink_deliver_tap+0x1ae/0xcd0 [ 1948.624737] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1948.625684] ? is_vmalloc_addr+0x7b/0xb0 [ 1948.626522] netlink_unicast+0x549/0x7f0 [ 1948.627387] ? netlink_attachskb+0x870/0x870 [ 1948.628285] ? __virt_addr_valid+0x128/0x350 [ 1948.629211] netlink_sendmsg+0x90f/0xdf0 [ 1948.630051] ? netlink_unicast+0x7f0/0x7f0 [ 1948.630961] ? netlink_unicast+0x7f0/0x7f0 [ 1948.631825] __sock_sendmsg+0x154/0x190 [ 1948.632651] ____sys_sendmsg+0x70d/0x870 [ 1948.633478] ? sock_write_iter+0x3d0/0x3d0 [ 1948.634361] ? do_recvmmsg+0x6d0/0x6d0 [ 1948.635158] ? perf_trace_lock+0xac/0x490 [ 1948.636007] ? __lockdep_reset_lock+0x180/0x180 [ 1948.636946] ? perf_trace_lock+0xac/0x490 [ 1948.637788] ? SOFTIRQ_verbose+0x10/0x10 [ 1948.638631] ___sys_sendmsg+0xf3/0x170 [ 1948.639468] ? sendmsg_copy_msghdr+0x160/0x160 [ 1948.640409] ? lock_downgrade+0x6d0/0x6d0 [ 1948.641259] ? find_held_lock+0x2c/0x110 [ 1948.642100] ? __fget_files+0x296/0x4c0 [ 1948.642948] ? __fget_light+0xea/0x290 [ 1948.643772] __sys_sendmsg+0xe5/0x1b0 [ 1948.644556] ? __sys_sendmsg_sock+0x40/0x40 [ 1948.645447] ? rcu_read_lock_any_held+0x75/0xa0 [ 1948.646429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1948.647524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1948.648576] ? trace_hardirqs_on+0x5b/0x180 [ 1948.649471] do_syscall_64+0x33/0x40 [ 1948.650242] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1948.651307] RIP: 0033:0x7f119335cb19 [ 1948.652081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1948.655826] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1948.657389] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1948.658840] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1948.660286] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1948.661736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1948.663203] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1948.701620] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1948.703685] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1948.704794] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1948.706590] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:02:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 11) 18:02:57 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 1948.746263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11943 comm=syz-executor.1 18:02:57 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 13) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1948.807431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11943 comm=syz-executor.1 [ 1948.810436] FAULT_INJECTION: forcing a failure. [ 1948.810436] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.813254] CPU: 1 PID: 11969 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1948.814677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1948.816387] Call Trace: [ 1948.816947] dump_stack+0x107/0x167 [ 1948.817692] should_fail.cold+0x5/0xa [ 1948.818470] ? create_object.isra.0+0x3a/0xa20 [ 1948.819419] should_failslab+0x5/0x20 [ 1948.820191] kmem_cache_alloc+0x5b/0x310 [ 1948.821017] ? rtnl_is_locked+0x11/0x20 [ 1948.821826] create_object.isra.0+0x3a/0xa20 [ 1948.822718] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1948.823760] kmem_cache_alloc_trace+0x151/0x320 [ 1948.824713] nl80211_register_beacons+0xc2/0x390 [ 1948.825690] ? nl80211_pre_doit+0xa2/0x630 [ 1948.826563] genl_family_rcv_msg_doit+0x22d/0x330 [ 1948.827563] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1948.828906] ? cap_capable+0x1d6/0x240 [ 1948.829718] ? ns_capable+0xe2/0x110 [ 1948.830483] genl_rcv_msg+0x33c/0x5a0 [ 1948.831288] ? genl_get_cmd+0x480/0x480 [ 1948.832091] ? nl80211_associate+0x1110/0x1110 [ 1948.833027] ? lock_release+0x680/0x680 [ 1948.833842] ? __lockdep_reset_lock+0x180/0x180 [ 1948.834790] netlink_rcv_skb+0x14b/0x430 [ 1948.835618] ? genl_get_cmd+0x480/0x480 [ 1948.836426] ? netlink_ack+0xab0/0xab0 [ 1948.837228] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1948.838150] ? is_vmalloc_addr+0x7b/0xb0 [ 1948.839047] genl_rcv+0x24/0x40 [ 1948.839906] netlink_unicast+0x549/0x7f0 [ 1948.840978] ? netlink_attachskb+0x870/0x870 [ 1948.841984] ? __virt_addr_valid+0x128/0x350 [ 1948.842924] netlink_sendmsg+0x90f/0xdf0 [ 1948.843778] ? netlink_unicast+0x7f0/0x7f0 [ 1948.844705] ? netlink_unicast+0x7f0/0x7f0 [ 1948.845582] __sock_sendmsg+0x154/0x190 [ 1948.846421] ____sys_sendmsg+0x70d/0x870 [ 1948.847266] ? sock_write_iter+0x3d0/0x3d0 [ 1948.848117] ? do_recvmmsg+0x6d0/0x6d0 [ 1948.848901] ? perf_trace_lock+0xac/0x490 [ 1948.849752] ? __lockdep_reset_lock+0x180/0x180 [ 1948.850685] ? perf_trace_lock+0xac/0x490 [ 1948.851531] ? SOFTIRQ_verbose+0x10/0x10 [ 1948.852358] ___sys_sendmsg+0xf3/0x170 [ 1948.853151] ? sendmsg_copy_msghdr+0x160/0x160 [ 1948.854085] ? lock_downgrade+0x6d0/0x6d0 [ 1948.854935] ? find_held_lock+0x2c/0x110 [ 1948.855771] ? __fget_files+0x296/0x4c0 [ 1948.856589] ? __fget_light+0xea/0x290 [ 1948.857385] __sys_sendmsg+0xe5/0x1b0 [ 1948.858159] ? __sys_sendmsg_sock+0x40/0x40 [ 1948.859070] ? rcu_read_lock_any_held+0x75/0xa0 [ 1948.860044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1948.861115] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1948.862204] ? trace_hardirqs_on+0x5b/0x180 [ 1948.863119] do_syscall_64+0x33/0x40 [ 1948.863887] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1948.864954] RIP: 0033:0x7fe17b63eb19 [ 1948.865756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1948.869575] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1948.871128] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1948.872564] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1948.874003] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1948.875448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1948.876883] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:02:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) [ 1948.969300] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1948.974600] FAULT_INJECTION: forcing a failure. [ 1948.974600] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.977258] CPU: 0 PID: 11993 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1948.978665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1948.980365] Call Trace: [ 1948.980908] dump_stack+0x107/0x167 [ 1948.981649] should_fail.cold+0x5/0xa [ 1948.982431] ? create_object.isra.0+0x3a/0xa20 [ 1948.983366] should_failslab+0x5/0x20 [ 1948.984141] kmem_cache_alloc+0x5b/0x310 [ 1948.984961] ? perf_trace_lock+0xac/0x490 [ 1948.985814] create_object.isra.0+0x3a/0xa20 [ 1948.986705] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1948.987751] kmem_cache_alloc+0x159/0x310 [ 1948.988602] skb_clone+0x14f/0x3d0 [ 1948.989327] netlink_trim+0x1b2/0x250 [ 1948.990093] netlink_broadcast_filtered+0x60/0xdc0 [ 1948.991090] ? skb_put+0x134/0x180 [ 1948.991807] ? memset+0x20/0x50 [ 1948.992479] ? __nla_reserve+0x9a/0xc0 [ 1948.993268] ? tcf_action_dump+0x1d3/0x2a0 [ 1948.994128] netlink_broadcast+0x35/0x50 [ 1948.994978] rtnetlink_send+0x129/0x180 [ 1948.995790] tcf_action_add+0x2cc/0x440 [ 1948.996602] ? tca_action_gd+0xdd0/0xdd0 [ 1948.997423] ? avc_has_extended_perms+0xf40/0xf40 [ 1948.998467] ? __nla_parse+0x3e/0x50 [ 1948.999236] tc_ctl_action+0x345/0x450 [ 1949.000028] ? tcf_action_add+0x440/0x440 [ 1949.000862] ? rtnetlink_rcv_msg+0x38a/0xbb0 [ 1949.001770] ? tcf_action_add+0x440/0x440 [ 1949.002610] rtnetlink_rcv_msg+0x41e/0xbb0 [ 1949.003485] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1949.004312] ? perf_trace_lock+0xac/0x490 [ 1949.005155] ? __lockdep_reset_lock+0x180/0x180 [ 1949.006097] netlink_rcv_skb+0x14b/0x430 [ 1949.006924] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1949.007759] ? netlink_ack+0xab0/0xab0 [ 1949.008551] ? netlink_deliver_tap+0x1ae/0xcd0 [ 1949.009508] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1949.010454] ? is_vmalloc_addr+0x7b/0xb0 [ 1949.011289] netlink_unicast+0x549/0x7f0 [ 1949.012135] ? netlink_attachskb+0x870/0x870 [ 1949.013039] ? __virt_addr_valid+0x128/0x350 [ 1949.013947] netlink_sendmsg+0x90f/0xdf0 [ 1949.014787] ? netlink_unicast+0x7f0/0x7f0 [ 1949.015684] ? netlink_unicast+0x7f0/0x7f0 [ 1949.016554] __sock_sendmsg+0x154/0x190 [ 1949.017372] ____sys_sendmsg+0x70d/0x870 [ 1949.018213] ? sock_write_iter+0x3d0/0x3d0 [ 1949.019091] ? do_recvmmsg+0x6d0/0x6d0 [ 1949.019896] ? perf_trace_lock+0xac/0x490 [ 1949.020766] ? __lockdep_reset_lock+0x180/0x180 [ 1949.021720] ? perf_trace_lock+0xac/0x490 [ 1949.022565] ? SOFTIRQ_verbose+0x10/0x10 [ 1949.023407] ___sys_sendmsg+0xf3/0x170 [ 1949.024216] ? sendmsg_copy_msghdr+0x160/0x160 [ 1949.025171] ? lock_downgrade+0x6d0/0x6d0 [ 1949.026032] ? find_held_lock+0x2c/0x110 [ 1949.026889] ? __fget_files+0x296/0x4c0 [ 1949.027715] ? __fget_light+0xea/0x290 [ 1949.028520] __sys_sendmsg+0xe5/0x1b0 [ 1949.029291] ? __sys_sendmsg_sock+0x40/0x40 [ 1949.030180] ? rcu_read_lock_any_held+0x75/0xa0 [ 1949.031160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1949.032234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1949.033281] ? trace_hardirqs_on+0x5b/0x180 [ 1949.034167] do_syscall_64+0x33/0x40 [ 1949.034949] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1949.036013] RIP: 0033:0x7f119335cb19 [ 1949.036777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1949.040561] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1949.042094] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1949.043575] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1949.045039] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1949.046510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1949.048000] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 18:02:57 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000024003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:02:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 12) 18:02:57 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat(r0, &(0x7f00000002c0)='./file0/file0\x00', 0x200620, 0x20) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)="e300600078af5f6132d8f13ea0aa1f94d2795bf7c94c7aca20adec6a1192fd0f45c6eb5aa724bf3de579214173a6b69c7322229691976530d25f45e0828e8d89ff1af6ad1dc2953d150cec22049709b41f20b0acd5fe6eefd69ca7ae9dad151c01359a831577a163cedf40211e79c5829965fd2ef83c45f16010a9cba86f476697a478723903a3913ebec11131536bbcccb8bc31c51207e80411bed8a083761cb2cd8fb0b9193b17913a3600581ca11a057f2207a5d1dda02f6c4e44bb2b", 0xbe}, {&(0x7f0000000300)="6d8b06012edd4868b23423b98ec65b6f206f4998b000c7348cbae520f2011ce5ba0bbd23d4f537ecd17be1330f3ed18b4b8f55c5620c07e6a0ed653599c8f7035ffa50f4a8462d1d831fc4070b0083f5767247860806133eafe2889e26d68f17f50393d9cb363743cab1d76798d8b2de577ae21aa08782ce7c698f1e9c9dd3ac837afd778fe9d8aefb50fe9a14657b7914e9b14420afffb578924b6c2789a06cb17cf920ba05fe625f3c0499b8dc76e71483e9e1e26ceb515e79a7f73a8dd7ce20afe3f777", 0xc5}, {&(0x7f00000000c0)="8a420b7e07bc287d010dc16e8af137ca1f9c94a84abcaa2c336c864d0242093627906b75e779876b0ca316faeb4943a98b1516eaea0e1482dedbb1827b8657f0dfc0d89f2892332e66b1acbe50ede343e5bb11de0d8c16e068b016ac83b7c492a404b3e6455286b259a40bda974c88da37a181152d0aae3e25dfe0b301f20d1c558f432da630a6adbd0c22c7afaf01db8e82ce079b4ab9620777e97517298c4777160cb24bf8", 0xa6}, {&(0x7f0000000500)="094df8588ffad47829dc07", 0xb}, {&(0x7f0000000540)="c282a798eb1ec3334991ede55b3782a2143cfd40bcee81401a9e029f1c1c53b93091888babfc784a8cbc5602bcff96b83a4ff374e3f6f9097e760f901319c58bfa6e1f383399", 0x46}], 0x5, 0x1, 0xff, 0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = signalfd4(r1, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000780)={0x1, 0x1, 0x1000, 0x31, &(0x7f0000000680)="3f475efe000859cfd50d07f8dfde220454a69e549c6e1247eb9ec9aae15fdd6b7ffb4696ab76d5b3c887c3be45b97bee72", 0xaf, 0x0, &(0x7f00000006c0)="637231a05b8a00ba5158931bbdcb0d296325b36c3edc00dedc3b986ac4bc25566cb5b0fc31976be97b9479fa1620f9c013604bdb5380bc263cba01269f1f65094f1884f521f01b2d612b657b16771c0855a8e90ac2a9d73d6b04d2e399c295f930128a0a4466d63669abf4ea3be7beee1f8ab764d2a70354bf48346cfb04ab8a97a302a0c3cd6dacc55406bff4be1cbc9b83947030c87c2e70c9f053097bc4a1b2b3a6eb42acec503a2f1f86206bf5"}) openat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x2000, 0x96) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 1949.100786] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1949.102852] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1949.103955] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1949.105708] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 1949.131608] FAULT_INJECTION: forcing a failure. [ 1949.131608] name failslab, interval 1, probability 0, space 0, times 0 [ 1949.134017] CPU: 1 PID: 12059 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1949.135532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1949.137226] Call Trace: [ 1949.137776] dump_stack+0x107/0x167 [ 1949.138533] should_fail.cold+0x5/0xa [ 1949.139326] ? create_object.isra.0+0x3a/0xa20 [ 1949.140267] should_failslab+0x5/0x20 [ 1949.141053] kmem_cache_alloc+0x5b/0x310 [ 1949.141884] ? rtnl_is_locked+0x11/0x20 [ 1949.142696] create_object.isra.0+0x3a/0xa20 [ 1949.143594] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1949.144626] kmem_cache_alloc_trace+0x151/0x320 [ 1949.145575] nl80211_register_beacons+0xc2/0x390 [ 1949.146673] ? nl80211_pre_doit+0xa2/0x630 [ 1949.147819] genl_family_rcv_msg_doit+0x22d/0x330 [ 1949.149018] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1949.150387] ? cap_capable+0x1d6/0x240 [ 1949.151258] ? ns_capable+0xe2/0x110 [ 1949.152032] genl_rcv_msg+0x33c/0x5a0 [ 1949.152828] ? genl_get_cmd+0x480/0x480 [ 1949.153674] ? nl80211_associate+0x1110/0x1110 [ 1949.154610] ? lock_release+0x680/0x680 [ 1949.155426] ? __lockdep_reset_lock+0x180/0x180 [ 1949.156377] netlink_rcv_skb+0x14b/0x430 [ 1949.157200] ? genl_get_cmd+0x480/0x480 [ 1949.158026] ? netlink_ack+0xab0/0xab0 [ 1949.158856] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1949.159799] ? is_vmalloc_addr+0x7b/0xb0 [ 1949.160643] genl_rcv+0x24/0x40 [ 1949.161312] netlink_unicast+0x549/0x7f0 [ 1949.162151] ? netlink_attachskb+0x870/0x870 [ 1949.163064] ? __virt_addr_valid+0x128/0x350 [ 1949.163981] netlink_sendmsg+0x90f/0xdf0 [ 1949.164823] ? netlink_unicast+0x7f0/0x7f0 [ 1949.165701] ? netlink_unicast+0x7f0/0x7f0 [ 1949.166563] __sock_sendmsg+0x154/0x190 [ 1949.167378] ____sys_sendmsg+0x70d/0x870 [ 1949.168249] ? sock_write_iter+0x3d0/0x3d0 [ 1949.169124] ? do_recvmmsg+0x6d0/0x6d0 [ 1949.169922] ? perf_trace_lock+0xac/0x490 [ 1949.170785] ? __lockdep_reset_lock+0x180/0x180 [ 1949.171793] ? perf_trace_lock+0xac/0x490 [ 1949.172680] ? SOFTIRQ_verbose+0x10/0x10 [ 1949.173522] ___sys_sendmsg+0xf3/0x170 [ 1949.174335] ? sendmsg_copy_msghdr+0x160/0x160 [ 1949.175308] ? lock_downgrade+0x6d0/0x6d0 [ 1949.176186] ? find_held_lock+0x2c/0x110 [ 1949.177031] ? __fget_files+0x296/0x4c0 [ 1949.177850] ? __fget_light+0xea/0x290 [ 1949.178658] __sys_sendmsg+0xe5/0x1b0 [ 1949.179441] ? __sys_sendmsg_sock+0x40/0x40 [ 1949.180313] ? rcu_read_lock_any_held+0x75/0xa0 [ 1949.181283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1949.182353] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1949.183417] ? trace_hardirqs_on+0x5b/0x180 [ 1949.184302] do_syscall_64+0x33/0x40 [ 1949.185067] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1949.186097] RIP: 0033:0x7fe17b63eb19 [ 1949.186865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1949.190564] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1949.192153] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1949.193606] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1949.195090] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1949.196543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1949.197998] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:03:13 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) preadv2(r0, &(0x7f0000001400)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1c00) lseek(r0, 0x4, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x2, &(0x7f00000007c0)=[{&(0x7f0000000700), 0x0, 0xec}, {&(0x7f0000000740)='_', 0x1, 0x71ef}], 0x0, &(0x7f0000000800)={[{@nodots}, {@fat=@uid={'uid', 0x3d, 0xee01}}]}) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, 0x0) 18:03:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 13) 18:03:13 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = gettid() perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x20, 0x1, 0x55, 0xe7, 0x0, 0x80000000, 0x100, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp, 0x8288, 0xe309, 0x9, 0x8, 0xc00000000000, 0x599aac8f, 0x2, 0x0, 0x20, 0x0, 0xffff}, r3, 0x6, r0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000006e80)={&(0x7f0000006ec0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10}]}]}, 0x95}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) lstat(0x0, &(0x7f00000001c0)) 18:03:13 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:03:13 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000025003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:03:13 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 14) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:03:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') 18:03:13 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x11d000, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0xffffffffffffff80, 0x6}) openat(r0, &(0x7f0000000000)='./file0\x00', 0x28000, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) close(r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) lseek(r3, 0x8000000000100, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x2}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)) [ 1965.528101] FAT-fs (loop0): bogus number of reserved sectors [ 1965.528932] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1965.531868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1965.537583] FAULT_INJECTION: forcing a failure. [ 1965.537583] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.540239] CPU: 1 PID: 12187 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1965.541634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1965.543298] Call Trace: [ 1965.543832] dump_stack+0x107/0x167 [ 1965.544571] should_fail.cold+0x5/0xa [ 1965.545345] should_failslab+0x5/0x20 [ 1965.546111] __kmalloc_node_track_caller+0x74/0x3b0 [ 1965.547137] ? netlink_trim+0x1ee/0x250 [ 1965.547948] pskb_expand_head+0x15a/0x1040 [ 1965.548819] netlink_trim+0x1ee/0x250 [ 1965.549586] netlink_broadcast_filtered+0x60/0xdc0 [ 1965.550563] ? skb_put+0x134/0x180 [ 1965.551290] ? memset+0x20/0x50 [ 1965.551955] ? __nla_reserve+0x9a/0xc0 [ 1965.552747] ? tcf_action_dump+0x1d3/0x2a0 [ 1965.553604] netlink_broadcast+0x35/0x50 [ 1965.554428] rtnetlink_send+0x129/0x180 [ 1965.555283] tcf_action_add+0x2cc/0x440 [ 1965.556100] ? tca_action_gd+0xdd0/0xdd0 [ 1965.556925] ? avc_has_extended_perms+0xf40/0xf40 [ 1965.557913] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1965.559064] ? __nla_parse+0x3e/0x50 [ 1965.559829] tc_ctl_action+0x345/0x450 [ 1965.560625] ? tcf_action_add+0x440/0x440 [ 1965.561467] ? rtnetlink_rcv_msg+0x38a/0xbb0 [ 1965.562381] ? tcf_action_add+0x440/0x440 [ 1965.563238] rtnetlink_rcv_msg+0x41e/0xbb0 [ 1965.564098] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1965.564928] ? perf_trace_lock+0xac/0x490 [ 1965.565783] ? __lockdep_reset_lock+0x180/0x180 [ 1965.566742] netlink_rcv_skb+0x14b/0x430 [ 1965.567589] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1965.568420] ? netlink_ack+0xab0/0xab0 [ 1965.569218] ? netlink_deliver_tap+0x1ae/0xcd0 [ 1965.570164] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1965.571107] ? is_vmalloc_addr+0x7b/0xb0 [ 1965.571942] netlink_unicast+0x549/0x7f0 [ 1965.572778] ? netlink_attachskb+0x870/0x870 [ 1965.573675] ? __virt_addr_valid+0x128/0x350 [ 1965.574587] netlink_sendmsg+0x90f/0xdf0 [ 1965.575435] ? netlink_unicast+0x7f0/0x7f0 [ 1965.576318] ? netlink_unicast+0x7f0/0x7f0 [ 1965.577184] __sock_sendmsg+0x154/0x190 [ 1965.578003] ____sys_sendmsg+0x70d/0x870 [ 1965.578840] ? sock_write_iter+0x3d0/0x3d0 [ 1965.579720] ? do_recvmmsg+0x6d0/0x6d0 [ 1965.580518] ? perf_trace_lock+0xac/0x490 [ 1965.581373] ? __lockdep_reset_lock+0x180/0x180 [ 1965.582324] ? perf_trace_lock+0xac/0x490 [ 1965.583181] ? SOFTIRQ_verbose+0x10/0x10 [ 1965.584023] ___sys_sendmsg+0xf3/0x170 [ 1965.584820] ? sendmsg_copy_msghdr+0x160/0x160 [ 1965.585760] ? lock_downgrade+0x6d0/0x6d0 [ 1965.586612] ? find_held_lock+0x2c/0x110 [ 1965.587488] ? __fget_files+0x296/0x4c0 [ 1965.588316] ? __fget_light+0xea/0x290 [ 1965.589123] __sys_sendmsg+0xe5/0x1b0 [ 1965.589915] ? __sys_sendmsg_sock+0x40/0x40 [ 1965.590802] ? rcu_read_lock_any_held+0x75/0xa0 [ 1965.591799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1965.592892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1965.593932] ? trace_hardirqs_on+0x5b/0x180 [ 1965.594812] do_syscall_64+0x33/0x40 [ 1965.595594] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1965.596657] RIP: 0033:0x7f119335cb19 [ 1965.597421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.601172] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1965.602712] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1965.604163] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1965.605603] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1965.607064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1965.608504] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1965.613125] FAULT_INJECTION: forcing a failure. [ 1965.613125] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.615448] CPU: 1 PID: 12189 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1965.616845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1965.618513] Call Trace: [ 1965.619054] dump_stack+0x107/0x167 [ 1965.619797] should_fail.cold+0x5/0xa [ 1965.620569] ? create_object.isra.0+0x3a/0xa20 [ 1965.621494] should_failslab+0x5/0x20 [ 1965.622268] kmem_cache_alloc+0x5b/0x310 [ 1965.623106] create_object.isra.0+0x3a/0xa20 [ 1965.623994] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1965.625026] kmem_cache_alloc_node+0x169/0x330 [ 1965.625956] __alloc_skb+0x6d/0x5b0 [ 1965.626689] ? genl_rcv_msg+0x33c/0x5a0 [ 1965.627517] netlink_ack+0x1ed/0xab0 [ 1965.628273] ? nl80211_associate+0x1110/0x1110 [ 1965.629194] ? netlink_sendmsg+0xdf0/0xdf0 [ 1965.630052] ? lock_release+0x680/0x680 [ 1965.630864] netlink_rcv_skb+0x348/0x430 [ 1965.631691] ? genl_get_cmd+0x480/0x480 [ 1965.632498] ? netlink_ack+0xab0/0xab0 [ 1965.633299] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1965.634221] ? is_vmalloc_addr+0x7b/0xb0 [ 1965.635053] genl_rcv+0x24/0x40 [ 1965.635721] netlink_unicast+0x549/0x7f0 [ 1965.636550] ? netlink_attachskb+0x870/0x870 [ 1965.637437] ? __virt_addr_valid+0x128/0x350 [ 1965.638338] netlink_sendmsg+0x90f/0xdf0 [ 1965.639188] ? netlink_unicast+0x7f0/0x7f0 [ 1965.640062] ? netlink_unicast+0x7f0/0x7f0 [ 1965.640911] __sock_sendmsg+0x154/0x190 [ 1965.641714] ____sys_sendmsg+0x70d/0x870 [ 1965.642539] ? sock_write_iter+0x3d0/0x3d0 [ 1965.643401] ? do_recvmmsg+0x6d0/0x6d0 [ 1965.644187] ? perf_trace_lock+0xac/0x490 [ 1965.645032] ? __lockdep_reset_lock+0x180/0x180 [ 1965.645972] ? perf_trace_lock+0xac/0x490 [ 1965.646807] ? SOFTIRQ_verbose+0x10/0x10 [ 1965.647653] ___sys_sendmsg+0xf3/0x170 [ 1965.648441] ? sendmsg_copy_msghdr+0x160/0x160 [ 1965.649374] ? lock_downgrade+0x6d0/0x6d0 [ 1965.650215] ? find_held_lock+0x2c/0x110 [ 1965.651055] ? __fget_files+0x296/0x4c0 [ 1965.651877] ? __fget_light+0xea/0x290 [ 1965.652692] __sys_sendmsg+0xe5/0x1b0 [ 1965.653462] ? __sys_sendmsg_sock+0x40/0x40 [ 1965.654330] ? rcu_read_lock_any_held+0x75/0xa0 [ 1965.655311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1965.656366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1965.657400] ? trace_hardirqs_on+0x5b/0x180 [ 1965.658280] do_syscall_64+0x33/0x40 [ 1965.659031] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1965.660075] RIP: 0033:0x7fe17b63eb19 [ 1965.660830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.664547] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1965.666086] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1965.667537] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1965.668981] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1965.670417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1965.671863] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:03:14 executing program 5: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @private1, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "3881f1", 0x0, 0x3b, 0x0, @loopback, @mcast1, [], "1285bf2f4a079bea"}}}}}}}, 0x0) 18:03:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011100)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x8}, 0x0, 0x200000000e, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) 18:03:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') 18:03:14 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000026003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:03:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 14) [ 1965.712590] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1965.713737] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1965.714350] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1965.715352] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 1965.759164] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1965.765911] FAULT_INJECTION: forcing a failure. [ 1965.765911] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.767447] CPU: 0 PID: 12211 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1965.768224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1965.769174] Call Trace: [ 1965.769560] dump_stack+0x107/0x167 [ 1965.770070] should_fail.cold+0x5/0xa [ 1965.770504] should_failslab+0x5/0x20 [ 1965.770935] __kmalloc_node_track_caller+0x74/0x3b0 [ 1965.771495] ? netlink_ack+0x1ed/0xab0 [ 1965.771954] __alloc_skb+0xb1/0x5b0 [ 1965.772374] netlink_ack+0x1ed/0xab0 18:03:14 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 15) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1965.772901] ? nl80211_associate+0x1110/0x1110 [ 1965.773454] ? netlink_sendmsg+0xdf0/0xdf0 18:03:14 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 1965.773955] ? lock_release+0x680/0x680 [ 1965.774456] ? __lockdep_reset_lock+0x180/0x180 [ 1965.774988] netlink_rcv_skb+0x348/0x430 [ 1965.775463] ? genl_get_cmd+0x480/0x480 [ 1965.775914] ? netlink_ack+0xab0/0xab0 [ 1965.776372] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1965.776885] ? is_vmalloc_addr+0x7b/0xb0 [ 1965.777343] genl_rcv+0x24/0x40 [ 1965.777714] netlink_unicast+0x549/0x7f0 [ 1965.778187] ? netlink_attachskb+0x870/0x870 [ 1965.778677] ? __virt_addr_valid+0x128/0x350 [ 1965.779194] netlink_sendmsg+0x90f/0xdf0 [ 1965.779659] ? netlink_unicast+0x7f0/0x7f0 [ 1965.780165] ? netlink_unicast+0x7f0/0x7f0 [ 1965.780644] __sock_sendmsg+0x154/0x190 [ 1965.781098] ____sys_sendmsg+0x70d/0x870 [ 1965.781559] ? sock_write_iter+0x3d0/0x3d0 [ 1965.782032] ? do_recvmmsg+0x6d0/0x6d0 [ 1965.782482] ? perf_trace_lock+0xac/0x490 [ 1965.782977] ? __lockdep_reset_lock+0x180/0x180 [ 1965.783531] ? perf_trace_lock+0xac/0x490 [ 1965.784027] ___sys_sendmsg+0xf3/0x170 [ 1965.784486] ? sendmsg_copy_msghdr+0x160/0x160 [ 1965.785033] ? lock_downgrade+0x6d0/0x6d0 [ 1965.785521] ? finish_task_switch+0x126/0x5d0 [ 1965.786038] ? lock_downgrade+0x6d0/0x6d0 [ 1965.786536] ? __fget_files+0x296/0x4c0 [ 1965.787018] ? __fget_light+0xea/0x290 [ 1965.787478] __sys_sendmsg+0xe5/0x1b0 [ 1965.787904] ? __sys_sendmsg_sock+0x40/0x40 [ 1965.788405] ? io_schedule_timeout+0x140/0x140 [ 1965.788928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1965.789506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1965.790077] ? trace_hardirqs_on+0x5b/0x180 [ 1965.790568] do_syscall_64+0x33/0x40 [ 1965.790980] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1965.791564] RIP: 0033:0x7fe17b63eb19 [ 1965.791981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.793995] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1965.794823] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1965.795621] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1965.796404] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1965.797224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1965.798012] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 [ 1965.801422] FAT-fs (loop0): bogus number of reserved sectors [ 1965.802683] FAT-fs (loop0): Can't find a valid FAT filesystem 18:03:14 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{0x0, 0x0, 0x1000a00}, {&(0x7f0000000480)="af3b641a0e9d24d7e06df134d1475602f259f0", 0x13, 0x3}], 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@debug={'debug', 0x3d, 0x7fffffff8000000}}], [{@subj_user={'subj_user', 0x3d, '*&]-'}}, {@hash}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}}) [ 1965.833160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1965.836568] FAULT_INJECTION: forcing a failure. [ 1965.836568] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.837937] CPU: 0 PID: 12215 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1965.838678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1965.839567] Call Trace: [ 1965.839858] dump_stack+0x107/0x167 [ 1965.840268] should_fail.cold+0x5/0xa [ 1965.840681] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1965.841267] ? create_object.isra.0+0x3a/0xa20 [ 1965.841761] should_failslab+0x5/0x20 [ 1965.842176] kmem_cache_alloc+0x5b/0x310 [ 1965.842635] create_object.isra.0+0x3a/0xa20 [ 1965.843148] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1965.843705] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1965.844278] ? netlink_trim+0x1ee/0x250 [ 1965.844729] pskb_expand_head+0x15a/0x1040 [ 1965.845214] netlink_trim+0x1ee/0x250 [ 1965.845645] netlink_broadcast_filtered+0x60/0xdc0 [ 1965.846193] ? skb_put+0x134/0x180 [ 1965.846583] ? memset+0x20/0x50 [ 1965.846954] ? __nla_reserve+0x9a/0xc0 [ 1965.847405] ? tcf_action_dump+0x1d3/0x2a0 [ 1965.847861] netlink_broadcast+0x35/0x50 [ 1965.848316] rtnetlink_send+0x129/0x180 [ 1965.848760] tcf_action_add+0x2cc/0x440 [ 1965.849204] ? tca_action_gd+0xdd0/0xdd0 [ 1965.849665] ? avc_has_extended_perms+0xf40/0xf40 [ 1965.850207] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1965.850827] ? __nla_parse+0x3e/0x50 [ 1965.851260] tc_ctl_action+0x345/0x450 [ 1965.851694] ? tcf_action_add+0x440/0x440 [ 1965.852158] ? rtnetlink_rcv_msg+0x38a/0xbb0 [ 1965.852650] ? tcf_action_add+0x440/0x440 [ 1965.853115] rtnetlink_rcv_msg+0x41e/0xbb0 [ 1965.853578] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1965.854038] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1965.854503] netlink_rcv_skb+0x14b/0x430 [ 1965.854960] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1965.855420] ? netlink_ack+0xab0/0xab0 [ 1965.855855] ? netlink_deliver_tap+0x1ae/0xcd0 [ 1965.856366] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1965.856871] ? is_vmalloc_addr+0x7b/0xb0 [ 1965.857327] netlink_unicast+0x549/0x7f0 [ 1965.857785] ? netlink_attachskb+0x870/0x870 [ 1965.858282] netlink_sendmsg+0x90f/0xdf0 [ 1965.858743] ? netlink_unicast+0x7f0/0x7f0 [ 1965.859213] ? netlink_unicast+0x7f0/0x7f0 [ 1965.859673] __sock_sendmsg+0x154/0x190 [ 1965.860117] ____sys_sendmsg+0x70d/0x870 [ 1965.860558] ? sock_write_iter+0x3d0/0x3d0 [ 1965.861022] ? do_recvmmsg+0x6d0/0x6d0 [ 1965.861446] ? perf_trace_lock+0xac/0x490 [ 1965.861902] ? __lockdep_reset_lock+0x180/0x180 [ 1965.862418] ? perf_trace_lock+0xac/0x490 [ 1965.862868] ? SOFTIRQ_verbose+0x10/0x10 [ 1965.863326] ___sys_sendmsg+0xf3/0x170 [ 1965.863753] ? sendmsg_copy_msghdr+0x160/0x160 [ 1965.864238] ? lock_downgrade+0x6d0/0x6d0 [ 1965.864688] ? find_held_lock+0x2c/0x110 [ 1965.865140] ? __fget_files+0x296/0x4c0 [ 1965.865571] ? __fget_light+0xea/0x290 [ 1965.866013] __sys_sendmsg+0xe5/0x1b0 [ 1965.866411] ? __sys_sendmsg_sock+0x40/0x40 [ 1965.866868] ? rcu_read_lock_any_held+0x75/0xa0 [ 1965.867399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1965.867952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1965.868522] ? trace_hardirqs_on+0x5b/0x180 [ 1965.868995] do_syscall_64+0x33/0x40 [ 1965.869408] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1965.869958] RIP: 0033:0x7f119335cb19 [ 1965.870365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.872364] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1965.873187] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1965.873969] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1965.874751] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1965.875544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1965.876317] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1965.904509] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1965.905585] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1965.906163] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1965.907092] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 1965.945508] FAT-fs (loop5): bogus logical sector size 28128 [ 1965.946597] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1965.963456] 9pnet: Insufficient options for proto=fd [ 1965.975298] FAT-fs (loop5): bogus logical sector size 28128 [ 1965.975948] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1965.986699] 9pnet: Insufficient options for proto=fd [ 1965.986856] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 18:03:29 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 16) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:03:29 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000028003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:03:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') 18:03:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x2) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000380)='./file1\x00', 0x100000001, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="98cf790e165cae82ca9fd1fe1542cd02d6837426a44c60d248f8512955ae8df1613b531857123e4a0ef3f1ef36a7e89940c272ae3961cce5eda3c8727dafa8ca1ef527f5d9f843bed9a38e6e1581dfb5aa8b3c1a882969f783e59554fa94794575a1e575670968494d56cb50ea8efad8c99c9cb8a8fa2d1f26209a84b936274572b52ad95a6b3174d1f872768321ae39d39070be7177b1fe83173db757d5dab8f2c90af1", 0xa4, 0x3ab}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB='nodots,euid=', @ANYRESDEC=0x0, @ANYBLOB=',fsname=\x00,oXj_role=,fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) fcntl$addseals(r1, 0x409, 0xe) fallocate(r0, 0x0, 0x0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff14e5, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') creat(&(0x7f0000000200)='./file1\x00', 0x2) chroot(&(0x7f0000000280)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x509441, 0x18e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r3, &(0x7f00000003c0)="0289819eecd945439d8a8b16bf2bf2b67eefb591f4cf4db9ead300c6ac8ba94f7d4a804292338b2abd8472d8beffa0ce3669f0087fe6e41dd4cf60d158da85532ae8", 0x42) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x4, 0x0, &(0x7f0000000340)) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r6, 0x0, 0x4, 0x0, &(0x7f0000000340)) sendfile(r2, r4, 0x0, 0x100000041) 18:03:29 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x2, 0x2, 0x4, 0xffffffffffff24a9}) pkey_alloc(0x0, 0x2) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0xa7f315189ef476ac, @fd=r1, 0x8dd2, 0x0, 0x0, 0x1c, 0x0, {0x3}}, 0xcf8) munlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) get_mempolicy(0x0, &(0x7f0000000180), 0x3, &(0x7f0000ffa000/0x4000)=nil, 0x5) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 18:03:29 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:03:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 15) [ 1981.493832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:03:29 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000000010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000800), 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1a8, 0x3b, 0x400, 0x70bd2e, 0x25dfdbfd, {0x10}, [@nested={0x8c, 0x22, 0x0, 0x1, [@typed={0x80, 0x2, 0x0, 0x0, @binary="9c3d055e0f0d49c444bd1498512fcd1397feeb8bb6354526ede37b1a20e13d4438455fcae3231726bcd5e4c111237bb8a0ffe5df47dfe072704559b60a6c870811b3f53c6937c5d478a344f6794db46ef590dcf200f1ff1a770f5603a63524662554120eb62348f130b712d704e22eb56627820cc101d47db0ae6436"}, @typed={0x8, 0x3d, 0x0, 0x0, @uid}]}, @generic="6ef8f5083f9a5639a9089051aae38ded3ddde55aefec3987b887de8f31d15edc92d8adf396460799c0aace70a85571fc604582f3af2dd8572c75fc7a82517750c63a12f8659641520f90514063373948862b77fa0a59ccb3df0eaf238aa6550e9f54394942d7f084d1c7fb1fe8c6ae12d14a92f6411091e009f1a3cb6de5a6955393a8b0849727ba9783057bf1a94fd6b75dcd07c0c6083fba15f830321619aea2f5813cf4a02975d54801a70b02a1de5bee3ccb55b3c4aebef7e16a7bc3e02d546d22c3742ccb83a2ba9959a8669db89599a1f3dea5a0480f84dcdc895970d16f8c689d97910df65ce0c60a71018396b337fd23e1d2", @typed={0xc, 0xb, 0x0, 0x0, @u64=0x101}, @typed={0x4, 0x6e}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4004040}, 0x48080) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) openat(r2, &(0x7f0000000180)='./file0\x00', 0x84400, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000780), 0x8040, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) r5 = fsmount(r0, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r2, 0x1, 0x4) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000002c0)) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) [ 1981.516660] FAULT_INJECTION: forcing a failure. [ 1981.516660] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.519374] CPU: 0 PID: 12237 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1981.520832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.522594] Call Trace: [ 1981.523148] dump_stack+0x107/0x167 [ 1981.523962] should_fail.cold+0x5/0xa [ 1981.524764] should_failslab+0x5/0x20 [ 1981.525566] __kmalloc_node_track_caller+0x74/0x3b0 [ 1981.526552] ? netlink_trim+0x1ee/0x250 [ 1981.527411] pskb_expand_head+0x15a/0x1040 [ 1981.528266] netlink_trim+0x1ee/0x250 [ 1981.529071] netlink_unicast+0xb9/0x7f0 [ 1981.529938] ? netlink_attachskb+0x870/0x870 [ 1981.530820] rtnetlink_send+0x13c/0x180 [ 1981.531623] tcf_action_add+0x2cc/0x440 [ 1981.532415] ? tca_action_gd+0xdd0/0xdd0 [ 1981.533231] ? avc_has_extended_perms+0xf40/0xf40 [ 1981.534182] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1981.535346] ? __nla_parse+0x3e/0x50 [ 1981.536093] tc_ctl_action+0x345/0x450 [ 1981.536893] ? tcf_action_add+0x440/0x440 [ 1981.537703] ? rtnetlink_rcv_msg+0x38a/0xbb0 [ 1981.538636] ? tcf_action_add+0x440/0x440 [ 1981.539485] rtnetlink_rcv_msg+0x41e/0xbb0 [ 1981.540362] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1981.541185] ? perf_trace_lock+0xac/0x490 [ 1981.542049] ? __lockdep_reset_lock+0x180/0x180 [ 1981.543028] netlink_rcv_skb+0x14b/0x430 [ 1981.543887] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1981.544728] ? netlink_ack+0xab0/0xab0 [ 1981.545532] ? netlink_deliver_tap+0x1ae/0xcd0 [ 1981.546494] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1981.547472] ? netlink_unicast+0x153/0x7f0 [ 1981.548364] netlink_unicast+0x549/0x7f0 [ 1981.549204] ? netlink_attachskb+0x870/0x870 [ 1981.550113] ? __virt_addr_valid+0x128/0x350 [ 1981.551028] netlink_sendmsg+0x90f/0xdf0 [ 1981.551878] ? netlink_unicast+0x7f0/0x7f0 [ 1981.552763] ? netlink_unicast+0x7f0/0x7f0 [ 1981.553637] __sock_sendmsg+0x154/0x190 [ 1981.554458] ____sys_sendmsg+0x70d/0x870 [ 1981.555316] ? sock_write_iter+0x3d0/0x3d0 [ 1981.556182] ? do_recvmmsg+0x6d0/0x6d0 [ 1981.556986] ? perf_trace_lock+0xac/0x490 [ 1981.557841] ? __lockdep_reset_lock+0x180/0x180 [ 1981.558790] ? perf_trace_lock+0xac/0x490 [ 1981.559648] ? SOFTIRQ_verbose+0x10/0x10 [ 1981.560486] ___sys_sendmsg+0xf3/0x170 [ 1981.561290] ? sendmsg_copy_msghdr+0x160/0x160 [ 1981.562233] ? lock_downgrade+0x6d0/0x6d0 [ 1981.563096] ? find_held_lock+0x2c/0x110 [ 1981.563956] ? __fget_files+0x296/0x4c0 [ 1981.564784] ? __fget_light+0xea/0x290 [ 1981.565595] __sys_sendmsg+0xe5/0x1b0 [ 1981.566382] ? __sys_sendmsg_sock+0x40/0x40 [ 1981.567284] ? rcu_read_lock_any_held+0x75/0xa0 [ 1981.568264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.569343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1981.570402] ? trace_hardirqs_on+0x5b/0x180 [ 1981.571298] do_syscall_64+0x33/0x40 [ 1981.572060] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1981.573109] RIP: 0033:0x7f119335cb19 [ 1981.573879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.577647] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1981.579203] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1981.580672] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1981.582132] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.583596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.585060] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 [ 1981.603152] FAULT_INJECTION: forcing a failure. [ 1981.603152] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.605598] CPU: 1 PID: 12243 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1981.607038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.608777] Call Trace: [ 1981.609340] dump_stack+0x107/0x167 [ 1981.610110] should_fail.cold+0x5/0xa [ 1981.610915] ? create_object.isra.0+0x3a/0xa20 [ 1981.611859] should_failslab+0x5/0x20 [ 1981.612637] kmem_cache_alloc+0x5b/0x310 [ 1981.613470] create_object.isra.0+0x3a/0xa20 [ 1981.614376] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1981.615443] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1981.616470] ? netlink_ack+0x1ed/0xab0 [ 1981.617281] __alloc_skb+0xb1/0x5b0 [ 1981.618036] netlink_ack+0x1ed/0xab0 [ 1981.618803] ? nl80211_associate+0x1110/0x1110 [ 1981.619758] ? netlink_sendmsg+0xdf0/0xdf0 [ 1981.620633] ? lock_release+0x680/0x680 [ 1981.621477] ? __lockdep_reset_lock+0x180/0x180 [ 1981.621504] netlink_rcv_skb+0x348/0x430 [ 1981.621523] ? genl_get_cmd+0x480/0x480 [ 1981.621542] ? netlink_ack+0xab0/0xab0 [ 1981.621576] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1981.621595] ? is_vmalloc_addr+0x7b/0xb0 [ 1981.621617] genl_rcv+0x24/0x40 [ 1981.621633] netlink_unicast+0x549/0x7f0 [ 1981.621659] ? netlink_attachskb+0x870/0x870 [ 1981.621675] ? __virt_addr_valid+0x128/0x350 [ 1981.621707] netlink_sendmsg+0x90f/0xdf0 [ 1981.621734] ? netlink_unicast+0x7f0/0x7f0 [ 1981.621772] ? netlink_unicast+0x7f0/0x7f0 [ 1981.621793] __sock_sendmsg+0x154/0x190 [ 1981.623813] ____sys_sendmsg+0x70d/0x870 [ 1981.623837] ? sock_write_iter+0x3d0/0x3d0 [ 1981.623859] ? do_recvmmsg+0x6d0/0x6d0 [ 1981.636060] ? perf_trace_lock+0xac/0x490 [ 1981.636911] ? __lockdep_reset_lock+0x180/0x180 [ 1981.637855] ? perf_trace_lock+0xac/0x490 [ 1981.638699] ? SOFTIRQ_verbose+0x10/0x10 [ 1981.639540] ___sys_sendmsg+0xf3/0x170 [ 1981.640340] ? sendmsg_copy_msghdr+0x160/0x160 [ 1981.641278] ? lock_downgrade+0x6d0/0x6d0 [ 1981.642128] ? find_held_lock+0x2c/0x110 [ 1981.642964] ? __fget_files+0x296/0x4c0 [ 1981.643798] ? __fget_light+0xea/0x290 [ 1981.644605] __sys_sendmsg+0xe5/0x1b0 [ 1981.645385] ? __sys_sendmsg_sock+0x40/0x40 [ 1981.646261] ? rcu_read_lock_any_held+0x75/0xa0 [ 1981.647235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.648323] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1981.649367] ? trace_hardirqs_on+0x5b/0x180 [ 1981.650254] do_syscall_64+0x33/0x40 [ 1981.651029] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1981.652077] RIP: 0033:0x7fe17b63eb19 [ 1981.652841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.656579] RSP: 002b:00007fe178bb4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1981.658133] RAX: ffffffffffffffda RBX: 00007fe17b751f60 RCX: 00007fe17b63eb19 [ 1981.659598] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1981.661045] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.662495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.662645] cgroup: Invalid name [ 1981.663946] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:03:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:03:30 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000029003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 1981.756328] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1981.758303] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1981.759399] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1981.761158] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:03:30 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002a003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:03:30 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:03:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 16) [ 1981.949713] FAULT_INJECTION: forcing a failure. [ 1981.949713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1981.952232] CPU: 0 PID: 12332 Comm: syz-executor.3 Not tainted 5.10.204 #1 [ 1981.953631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.955307] Call Trace: [ 1981.955849] dump_stack+0x107/0x167 [ 1981.956604] should_fail.cold+0x5/0xa [ 1981.957399] _copy_to_user+0x2e/0x180 [ 1981.958198] simple_read_from_buffer+0xcc/0x160 [ 1981.959155] proc_fail_nth_read+0x198/0x230 [ 1981.960080] ? proc_sessionid_read+0x230/0x230 [ 1981.961015] ? security_file_permission+0x24e/0x570 [ 1981.962029] ? perf_trace_initcall_start+0x101/0x380 [ 1981.963087] ? proc_sessionid_read+0x230/0x230 [ 1981.964030] vfs_read+0x228/0x580 [ 1981.964759] ksys_read+0x12d/0x260 [ 1981.965493] ? vfs_write+0xa70/0xa70 [ 1981.966267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.967351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1981.968421] do_syscall_64+0x33/0x40 [ 1981.969185] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1981.970226] RIP: 0033:0x7fe17b5f169c [ 1981.970989] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1981.974705] RSP: 002b:00007fe178bb4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1981.976265] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 00007fe17b5f169c [ 1981.977704] RDX: 000000000000000f RSI: 00007fe178bb41e0 RDI: 0000000000000006 [ 1981.979148] RBP: 00007fe178bb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.980604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.982047] R13: 00007ffc7e7f69df R14: 00007fe178bb4300 R15: 0000000000022000 18:03:47 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:03:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:03:47 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 17) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:03:47 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002b003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:03:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:03:47 executing program 5: ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x4, r0, r1) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000100)=0x33e0, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r5, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x3f, 0x7f}, @timestamp, @mss={0x2, 0x2}, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm], 0x6) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000200)) sendfile(r3, r2, 0x0, 0x9bbb) fcntl$dupfd(r2, 0x0, r4) 18:03:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x32e6, &(0x7f0000000080)={0x0, 0x74c5, 0x20, 0x3, 0x3d0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="fa00002e2f66696c6530000000000000"]) r8 = dup(r5) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xfffff800, 0x1, 0x5, 0xfffffffc, 0x0]}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x6d82, 0xab17, 0x3, &(0x7f0000000380)={[0x4]}, 0x8) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000340)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r7, 0xffff, 0x0, 0x6, 0x5, 0x0, {0x0, r12}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000500)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index, 0xffff, 0x0, 0xffff, 0x0, 0x1, {0x0, r12}}, 0x1fcc7bb0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 18:03:47 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [{@seclabel}]}) [ 1998.685384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12381 comm=syz-executor.1 [ 1998.691572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1998.706261] FAULT_INJECTION: forcing a failure. [ 1998.706261] name failslab, interval 1, probability 0, space 0, times 0 [ 1998.709302] CPU: 0 PID: 12377 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 1998.710706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1998.712410] Call Trace: [ 1998.712955] dump_stack+0x107/0x167 [ 1998.713708] should_fail.cold+0x5/0xa [ 1998.714494] ? create_object.isra.0+0x3a/0xa20 [ 1998.715437] should_failslab+0x5/0x20 [ 1998.716226] kmem_cache_alloc+0x5b/0x310 [ 1998.717061] create_object.isra.0+0x3a/0xa20 [ 1998.717453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12381 comm=syz-executor.1 [ 1998.717960] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1998.717998] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1998.722465] ? netlink_trim+0x1ee/0x250 [ 1998.723290] pskb_expand_head+0x15a/0x1040 [ 1998.724187] netlink_trim+0x1ee/0x250 [ 1998.724966] netlink_unicast+0xb9/0x7f0 [ 1998.725786] ? netlink_attachskb+0x870/0x870 [ 1998.726698] rtnetlink_send+0x13c/0x180 [ 1998.727521] tcf_action_add+0x2cc/0x440 [ 1998.728343] ? tca_action_gd+0xdd0/0xdd0 [ 1998.729174] ? avc_has_extended_perms+0xf40/0xf40 [ 1998.730154] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1998.731291] ? __nla_parse+0x3e/0x50 [ 1998.732070] tc_ctl_action+0x345/0x450 [ 1998.732870] ? tcf_action_add+0x440/0x440 [ 1998.733712] ? rtnetlink_rcv_msg+0x38a/0xbb0 [ 1998.734627] ? tcf_action_add+0x440/0x440 [ 1998.735479] rtnetlink_rcv_msg+0x41e/0xbb0 [ 1998.736346] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1998.737177] ? perf_trace_lock+0xac/0x490 [ 1998.738115] ? __lockdep_reset_lock+0x180/0x180 [ 1998.739307] netlink_rcv_skb+0x14b/0x430 [ 1998.740236] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 1998.741069] ? netlink_ack+0xab0/0xab0 [ 1998.741864] ? netlink_deliver_tap+0x1ae/0xcd0 [ 1998.742808] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1998.743764] ? is_vmalloc_addr+0x7b/0xb0 [ 1998.744598] netlink_unicast+0x549/0x7f0 [ 1998.745434] ? netlink_attachskb+0x870/0x870 [ 1998.746341] ? __virt_addr_valid+0x128/0x350 [ 1998.747502] netlink_sendmsg+0x90f/0xdf0 [ 1998.748348] ? netlink_unicast+0x7f0/0x7f0 [ 1998.749350] ? netlink_unicast+0x7f0/0x7f0 [ 1998.750243] __sock_sendmsg+0x154/0x190 [ 1998.751057] ____sys_sendmsg+0x70d/0x870 [ 1998.751900] ? sock_write_iter+0x3d0/0x3d0 [ 1998.752762] ? do_recvmmsg+0x6d0/0x6d0 [ 1998.753553] ? perf_trace_lock+0xac/0x490 [ 1998.754409] ? __lockdep_reset_lock+0x180/0x180 [ 1998.755358] ? perf_trace_lock+0xac/0x490 [ 1998.756226] ? SOFTIRQ_verbose+0x10/0x10 [ 1998.757059] ___sys_sendmsg+0xf3/0x170 [ 1998.757852] ? sendmsg_copy_msghdr+0x160/0x160 [ 1998.758784] ? lock_downgrade+0x6d0/0x6d0 [ 1998.759636] ? find_held_lock+0x2c/0x110 [ 1998.760469] ? __fget_files+0x296/0x4c0 [ 1998.761495] ? __fget_light+0xea/0x290 [ 1998.762458] __sys_sendmsg+0xe5/0x1b0 [ 1998.763433] ? __sys_sendmsg_sock+0x40/0x40 [ 1998.764400] ? rcu_read_lock_any_held+0x75/0xa0 [ 1998.765366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1998.766429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1998.767486] ? trace_hardirqs_on+0x5b/0x180 [ 1998.768367] do_syscall_64+0x33/0x40 [ 1998.769122] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1998.770157] RIP: 0033:0x7f119335cb19 [ 1998.770912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1998.774629] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1998.776208] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 1998.777653] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1998.779096] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1998.780559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1998.781995] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 18:03:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000011c0), 0x6000, 0x0) perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0xb0, 0x3f, 0x6, 0xa2, 0x0, 0x1, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000001100), 0x5}, 0x1, 0x81, 0x9, 0x1, 0xffffffff, 0x5, 0x869, 0x0, 0x5, 0x0, 0xda}, 0xffffffffffffffff, 0xc, r1, 0x0) perf_event_open(&(0x7f0000001080)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x2) [ 1998.861953] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1998.863955] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 1998.865026] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 1998.866761] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:04:02 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002c003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:04:02 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 18) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:04:02 executing program 2: r0 = gettid() fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r0, 0xfffffffc, &(0x7f0000000140)={0xc, 0x0, 0x8}) get_robust_list(0x0, &(0x7f0000000100)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000180)=0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001d00210ccde40000000000000400020014001180c09801a7b0c7dba09475f251c743092f0800310043e6cf345f13be85938dbd3913a46302edb2e322cd66cc41d42d2e15d7257d5f442c68a36bda4e6af86dcddc5fc726a06e32d3cc6b633ce331fbd5a88c7e712b7b3e1d8d5ee6328c087fb55aef201760edcafe4aef661c63e04142ce2fe3dc089ef40ac2a7830a5493c7c39cc1a086d0d9ccd4d33e2df59ba86f03c0b0b0254ed798c5e7913b6379cc6ef82a25a1283ba5fd21a2b209d2239722d54fcd656fd3b17309fe39d11249fffbaaa6", @ANYRES32, @ANYBLOB="92001a800400060011fd4b89fa85a9"], 0xc4}, 0x1, 0x0, 0x0, 0x20008880}, 0x80) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) fsmount(r2, 0x1, 0x70) 18:04:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) openat$incfs(r1, 0x0, 0x220001, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x31b) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000880)=""/4096, 0x1000) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x100}]}, 0xc, 0x3) 18:04:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x808, 0x9, 0x8000]}, &(0x7f00000000c0)=0x44) 18:04:02 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 2014.434641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:04:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:04:02 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000325bd7000fcdbdf25060000000c009900ff01000007000000080005000300000005005300010000000a00e800080211d9f80000001c00e700bd5586da231aa3548ed15f4515f321dfcb754734ef3257410a00e80008021100000108000800050007000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4040084}, 0x8c8) r2 = syz_open_dev$vcsu(&(0x7f0000000640), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf7c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x8810) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000340)={0x8000, 0x5f8d}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8000, 0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xd0c0) [ 2014.462493] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2014.471284] FAULT_INJECTION: forcing a failure. [ 2014.471284] name failslab, interval 1, probability 0, space 0, times 0 [ 2014.473908] CPU: 0 PID: 12413 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 2014.475332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2014.477015] Call Trace: [ 2014.477551] dump_stack+0x107/0x167 [ 2014.478306] should_fail.cold+0x5/0xa [ 2014.479085] ? __alloc_skb+0x6d/0x5b0 [ 2014.479883] should_failslab+0x5/0x20 [ 2014.480654] kmem_cache_alloc_node+0x55/0x330 [ 2014.481567] __alloc_skb+0x6d/0x5b0 [ 2014.482310] netlink_ack+0x1ed/0xab0 [ 2014.483081] ? perf_trace_lock+0xac/0x490 [ 2014.483929] ? netlink_sendmsg+0xdf0/0xdf0 [ 2014.484785] ? __lockdep_reset_lock+0x180/0x180 [ 2014.485733] netlink_rcv_skb+0x348/0x430 [ 2014.486560] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2014.487383] ? netlink_ack+0xab0/0xab0 [ 2014.488184] ? netlink_deliver_tap+0x1ae/0xcd0 [ 2014.489120] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2014.490044] ? is_vmalloc_addr+0x7b/0xb0 [ 2014.490868] netlink_unicast+0x549/0x7f0 [ 2014.491701] ? netlink_attachskb+0x870/0x870 [ 2014.492588] ? __virt_addr_valid+0x128/0x350 [ 2014.493488] netlink_sendmsg+0x90f/0xdf0 [ 2014.494314] ? netlink_unicast+0x7f0/0x7f0 [ 2014.495180] ? netlink_unicast+0x7f0/0x7f0 [ 2014.496046] __sock_sendmsg+0x154/0x190 [ 2014.496848] ____sys_sendmsg+0x70d/0x870 [ 2014.497670] ? sock_write_iter+0x3d0/0x3d0 [ 2014.498520] ? do_recvmmsg+0x6d0/0x6d0 [ 2014.499306] ? perf_trace_lock+0xac/0x490 [ 2014.500174] ? __lockdep_reset_lock+0x180/0x180 [ 2014.501113] ? perf_trace_lock+0xac/0x490 [ 2014.501950] ? SOFTIRQ_verbose+0x10/0x10 [ 2014.502775] ___sys_sendmsg+0xf3/0x170 [ 2014.503565] ? sendmsg_copy_msghdr+0x160/0x160 [ 2014.504501] ? lock_downgrade+0x6d0/0x6d0 [ 2014.505344] ? find_held_lock+0x2c/0x110 [ 2014.506177] ? __fget_files+0x296/0x4c0 [ 2014.506997] ? __fget_light+0xea/0x290 [ 2014.507819] __sys_sendmsg+0xe5/0x1b0 [ 2014.508591] ? __sys_sendmsg_sock+0x40/0x40 [ 2014.509462] ? rcu_read_lock_any_held+0x75/0xa0 [ 2014.510424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2014.511481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2014.512527] ? trace_hardirqs_on+0x5b/0x180 [ 2014.513405] do_syscall_64+0x33/0x40 [ 2014.514158] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2014.515193] RIP: 0033:0x7f119335cb19 [ 2014.515966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2014.519680] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2014.521224] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 2014.522669] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 2014.524127] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2014.525564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2014.527009] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 18:04:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 18:04:02 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002d003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2014.678518] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s 18:04:03 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002e003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2014.679692] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2014.680567] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2014.681552] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:04:03 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 19) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:04:03 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:04:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 18:04:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) [ 2014.772447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2014.776355] FAULT_INJECTION: forcing a failure. [ 2014.776355] name failslab, interval 1, probability 0, space 0, times 0 [ 2014.777736] CPU: 1 PID: 12445 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 2014.778489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2014.779422] Call Trace: [ 2014.779728] dump_stack+0x107/0x167 [ 2014.780131] should_fail.cold+0x5/0xa [ 2014.780545] ? create_object.isra.0+0x3a/0xa20 [ 2014.781049] should_failslab+0x5/0x20 [ 2014.781468] kmem_cache_alloc+0x5b/0x310 [ 2014.781924] create_object.isra.0+0x3a/0xa20 [ 2014.782405] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2014.782965] kmem_cache_alloc_node+0x169/0x330 [ 2014.783506] __alloc_skb+0x6d/0x5b0 [ 2014.783951] netlink_ack+0x1ed/0xab0 [ 2014.784393] ? perf_trace_lock+0xac/0x490 [ 2014.784869] ? netlink_sendmsg+0xdf0/0xdf0 [ 2014.785365] ? __lockdep_reset_lock+0x180/0x180 [ 2014.785909] netlink_rcv_skb+0x348/0x430 [ 2014.786376] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2014.786854] ? netlink_ack+0xab0/0xab0 [ 2014.787311] ? netlink_deliver_tap+0x1ae/0xcd0 [ 2014.787854] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2014.788393] ? is_vmalloc_addr+0x7b/0xb0 [ 2014.788873] netlink_unicast+0x549/0x7f0 [ 2014.789343] ? netlink_attachskb+0x870/0x870 [ 2014.789856] ? __virt_addr_valid+0x128/0x350 [ 2014.790374] netlink_sendmsg+0x90f/0xdf0 [ 2014.790853] ? netlink_unicast+0x7f0/0x7f0 [ 2014.791352] ? netlink_unicast+0x7f0/0x7f0 [ 2014.791853] __sock_sendmsg+0x154/0x190 [ 2014.792310] ____sys_sendmsg+0x70d/0x870 [ 2014.792774] ? sock_write_iter+0x3d0/0x3d0 [ 2014.793259] ? do_recvmmsg+0x6d0/0x6d0 [ 2014.793713] ? perf_trace_lock+0xac/0x490 [ 2014.794191] ? __lockdep_reset_lock+0x180/0x180 [ 2014.794714] ? perf_trace_lock+0xac/0x490 [ 2014.795190] ? SOFTIRQ_verbose+0x10/0x10 [ 2014.795653] ___sys_sendmsg+0xf3/0x170 [ 2014.796107] ? sendmsg_copy_msghdr+0x160/0x160 [ 2014.796634] ? lock_downgrade+0x6d0/0x6d0 [ 2014.797104] ? find_held_lock+0x2c/0x110 [ 2014.797569] ? __fget_files+0x296/0x4c0 [ 2014.798032] ? __fget_light+0xea/0x290 [ 2014.798467] __sys_sendmsg+0xe5/0x1b0 [ 2014.798915] ? __sys_sendmsg_sock+0x40/0x40 [ 2014.799379] ? rcu_read_lock_any_held+0x75/0xa0 [ 2014.799936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2014.800522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2014.801117] ? trace_hardirqs_on+0x5b/0x180 [ 2014.801623] do_syscall_64+0x33/0x40 [ 2014.802035] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2014.802634] RIP: 0033:0x7f119335cb19 [ 2014.803036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2014.805188] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2014.806060] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 2014.806886] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 2014.807705] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2014.808543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2014.809365] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 18:04:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x263d, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x404) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x8a406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x76}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x404) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x40000, 0x4) sendfile(r0, r4, 0x0, 0x100000001) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r5, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) dup2(0xffffffffffffffff, r5) [ 2014.904601] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2014.905678] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2014.906267] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2014.907180] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:04:20 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff8101ba84}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:04:20 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:04:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x202400, 0x20) ftruncate(0xffffffffffffffff, 0x763) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r1, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x9, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x3, 0x2, 0x3f, 0x1000, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r6, r5, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x80, "5fabd34a60e47f"}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r8, r3, 0x0, 0x9bbb) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000000)=0x2) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) 18:04:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:04:20 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c02000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:04:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r0) 18:04:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') 18:04:20 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 20) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2032.116469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2032.130238] FAULT_INJECTION: forcing a failure. [ 2032.130238] name failslab, interval 1, probability 0, space 0, times 0 [ 2032.133389] CPU: 0 PID: 12576 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 2032.135057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2032.137101] Call Trace: [ 2032.137733] dump_stack+0x107/0x167 [ 2032.138614] should_fail.cold+0x5/0xa [ 2032.139542] should_failslab+0x5/0x20 [ 2032.140471] __kmalloc_node_track_caller+0x74/0x3b0 [ 2032.141671] ? netlink_ack+0x1ed/0xab0 [ 2032.142620] __alloc_skb+0xb1/0x5b0 [ 2032.143507] netlink_ack+0x1ed/0xab0 [ 2032.144428] ? perf_trace_lock+0xac/0x490 [ 2032.145425] ? netlink_sendmsg+0xdf0/0xdf0 [ 2032.146450] ? __lockdep_reset_lock+0x180/0x180 [ 2032.147582] netlink_rcv_skb+0x348/0x430 [ 2032.148519] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2032.149344] ? netlink_ack+0xab0/0xab0 [ 2032.150132] ? netlink_deliver_tap+0x1ae/0xcd0 [ 2032.151070] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2032.152013] ? is_vmalloc_addr+0x7b/0xb0 [ 2032.152847] netlink_unicast+0x549/0x7f0 [ 2032.153676] ? netlink_attachskb+0x870/0x870 [ 2032.154562] ? __virt_addr_valid+0x128/0x350 [ 2032.155463] netlink_sendmsg+0x90f/0xdf0 [ 2032.156306] ? netlink_unicast+0x7f0/0x7f0 [ 2032.157175] ? netlink_unicast+0x7f0/0x7f0 [ 2032.158039] __sock_sendmsg+0x154/0x190 [ 2032.158842] ____sys_sendmsg+0x70d/0x870 [ 2032.159675] ? sock_write_iter+0x3d0/0x3d0 [ 2032.160554] ? do_recvmmsg+0x6d0/0x6d0 [ 2032.161346] ? perf_trace_lock+0xac/0x490 [ 2032.162198] ? __lockdep_reset_lock+0x180/0x180 [ 2032.163142] ? perf_trace_lock+0xac/0x490 [ 2032.164024] ___sys_sendmsg+0xf3/0x170 [ 2032.164805] ? sendmsg_copy_msghdr+0x160/0x160 [ 2032.165714] ? lock_downgrade+0x6d0/0x6d0 [ 2032.166530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2032.167553] ? trace_hardirqs_on+0x5b/0x180 [ 2032.168412] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2032.169585] ? __fget_files+0x296/0x4c0 [ 2032.170455] ? __fget_light+0xea/0x290 [ 2032.171272] __sys_sendmsg+0xe5/0x1b0 [ 2032.172099] ? __sys_sendmsg_sock+0x40/0x40 [ 2032.172995] ? io_schedule_timeout+0x140/0x140 [ 2032.173980] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2032.175087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2032.176174] ? trace_hardirqs_on+0x5b/0x180 [ 2032.177081] do_syscall_64+0x33/0x40 [ 2032.177849] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2032.178939] RIP: 0033:0x7f119335cb19 [ 2032.179702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2032.183563] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2032.185172] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 2032.186723] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 2032.188223] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2032.189715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2032.191212] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 18:04:20 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:04:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:04:20 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x16d142, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r2, r1) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e20, @loopback}, 0x3, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)='macvlan1\x00', 0xf8, 0xad2, 0x3}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x16) sendfile(r1, r3, 0x0, 0x100000001) fallocate(r0, 0x3, 0x0, 0x8000008000) 18:04:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:04:20 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c03000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2032.246850] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2032.248787] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2032.249833] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2032.251535] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:04:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, &(0x7f0000000200), 0xa22020, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mknod(&(0x7f00000000c0)='./file0\x00', 0x40, 0xffff0001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) listxattr(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=""/231, 0xe7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) sendfile(r0, r1, 0x0, 0x20d315) r5 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000004c0)=0x2362, 0x4) sendto(r5, 0x0, 0xfc, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0x80fe}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x50100, 0x56) 18:04:20 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:04:20 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 21) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:04:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:04:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:04:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101002, 0x21) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) [ 2032.505566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2032.518745] FAULT_INJECTION: forcing a failure. [ 2032.518745] name failslab, interval 1, probability 0, space 0, times 0 [ 2032.521390] CPU: 1 PID: 12606 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 2032.522795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2032.524501] Call Trace: [ 2032.525037] dump_stack+0x107/0x167 [ 2032.525788] should_fail.cold+0x5/0xa [ 2032.526566] ? create_object.isra.0+0x3a/0xa20 [ 2032.527510] should_failslab+0x5/0x20 [ 2032.528285] kmem_cache_alloc+0x5b/0x310 [ 2032.529122] create_object.isra.0+0x3a/0xa20 [ 2032.530015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2032.531047] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2032.532098] ? netlink_ack+0x1ed/0xab0 [ 2032.532912] __alloc_skb+0xb1/0x5b0 [ 2032.533665] netlink_ack+0x1ed/0xab0 [ 2032.534433] ? perf_trace_lock+0xac/0x490 [ 2032.535287] ? netlink_sendmsg+0xdf0/0xdf0 [ 2032.536167] ? __lockdep_reset_lock+0x180/0x180 [ 2032.537132] netlink_rcv_skb+0x348/0x430 [ 2032.537951] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2032.538771] ? netlink_ack+0xab0/0xab0 [ 2032.539556] ? netlink_deliver_tap+0x1ae/0xcd0 [ 2032.540498] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2032.541419] ? is_vmalloc_addr+0x7b/0xb0 [ 2032.542247] netlink_unicast+0x549/0x7f0 [ 2032.543072] ? netlink_attachskb+0x870/0x870 [ 2032.543973] ? __virt_addr_valid+0x128/0x350 [ 2032.544871] netlink_sendmsg+0x90f/0xdf0 [ 2032.545698] ? netlink_unicast+0x7f0/0x7f0 [ 2032.546563] ? netlink_unicast+0x7f0/0x7f0 [ 2032.547417] __sock_sendmsg+0x154/0x190 [ 2032.548228] ____sys_sendmsg+0x70d/0x870 [ 2032.549054] ? sock_write_iter+0x3d0/0x3d0 [ 2032.549903] ? do_recvmmsg+0x6d0/0x6d0 [ 2032.550688] ? perf_trace_lock+0xac/0x490 [ 2032.551530] ? __lockdep_reset_lock+0x180/0x180 [ 2032.552481] ? perf_trace_lock+0xac/0x490 [ 2032.553316] ? SOFTIRQ_verbose+0x10/0x10 [ 2032.554140] ___sys_sendmsg+0xf3/0x170 [ 2032.554930] ? sendmsg_copy_msghdr+0x160/0x160 [ 2032.555861] ? lock_downgrade+0x6d0/0x6d0 [ 2032.556713] ? find_held_lock+0x2c/0x110 [ 2032.557546] ? __fget_files+0x296/0x4c0 [ 2032.558360] ? __fget_light+0xea/0x290 [ 2032.559155] __sys_sendmsg+0xe5/0x1b0 [ 2032.559947] ? __sys_sendmsg_sock+0x40/0x40 [ 2032.560830] ? rcu_read_lock_any_held+0x75/0xa0 [ 2032.561804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2032.562886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2032.563954] ? trace_hardirqs_on+0x5b/0x180 [ 2032.564846] do_syscall_64+0x33/0x40 [ 2032.565612] entry_SYSCALL_64_after_hwframe+0x62/0xc7 18:04:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) [ 2032.566795] RIP: 0033:0x7f119335cb19 [ 2032.567589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2032.571335] RSP: 002b:00007f11908d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2032.572897] RAX: ffffffffffffffda RBX: 00007f119346ff60 RCX: 00007f119335cb19 [ 2032.574335] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 18:04:21 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 2032.575776] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2032.577359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2032.578796] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 18:04:21 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c04000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:04:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:04:21 executing program 5: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x1, 0x22) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x103) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="ddab82767945917c8ef3f5746d491210d833b106c3b096db35ebf09b6462e50b2b8eeb7aee50a6985ddf758b8742e2902f8019cf036e7487a36e06f264a072e7302aabf620d1f1648240b03068de42f99aa07f3421d6085fabf737fc80322ea9d302704a0cbf904db23225acdbfef5115d2e6eb74068796e15571d147e0a5ee081510e087b17fdf56a880289eeec6f4c848969", 0x93, 0x20) r2 = openat(r1, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000001) 18:04:21 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c05000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:04:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) [ 2032.809916] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2032.811916] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2032.812970] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2032.814695] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:04:38 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c06000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:04:38 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0x40, 0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x174, 0x0, 0x100, 0x70bd26, 0x3, {{}, {@void, @void, @val={0xc, 0x99, {0x80000000, 0x35}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xd}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "376c23336863cb217b1cf96fda118d69997989421e63474a"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec51517b71590d0e8d3d75be10ed65e292c66685b30ce377"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b98e2222592b43866bca1a1b0c48c930356db3a5a341de5a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4ff91ab437c1da85419aa6c53dbd8f8709eb46019ff060f5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f373a541b9c938b2b25f9075816067b7316b573d5c982579"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x174}}, 0x4004814) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x4]}, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x5}, 0x24008011) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000150a010100000000000000000a00fffe0900020073797a31000000000900010073797a30000000000900020073797a31000000000c00064000000000000000040900020073797a310000000008000340000000020c000640000000000000000476dddd0bff54e146c702700565952779d606fd27f8d21d468add8f29a545caf052fb12526e9d440afcae5d5b4d0f9d8e5dbb81f0d8f162b95c42c5756635ae78"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x40800) 18:04:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:04:38 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x24000000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000780)=[&(0x7f0000000540)='\a*^})\'\x00', &(0x7f0000000580)='+/\x00', &(0x7f00000005c0)='wlan0\x00', &(0x7f0000000600)='wlan1\x00', &(0x7f0000000640)='wlan1\x00', &(0x7f0000000680)='wlan1\x00', &(0x7f00000006c0)='nl80211\x00', &(0x7f0000000700)='nl80211\x00', &(0x7f0000000740)='wlan1\x00'], &(0x7f0000000840)=[&(0x7f0000000800)='wlan1\x00'], 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1d, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54bee65b20d2bddb5238dfdc7a6453aeaa139db8bb5555e7aa5fbdf7bb28e8dbcc75dcb63eb610ae8a411109a91495a596388ff3ae53e39e", @ANYRES16=r1, @ANYBLOB="0b0c0000000000000000dfdc0010080003009aa35018703f09e67f72cc7b3e2625ee212f55988ded6b0dfee78b4971a2380193ffc489132c56a6d4ecac5f00ace6ddd9a52765851b07a4981e136e3faf1bdb69239d41ef0214d8cb25c75103a008c6b80614725803210fb8f67e374a61eef17507c88baa3b4d3479d69897b46b583fcadb281ac6f9893a265dcb78a01c1ab43a6fb1adf57f1d0191b125f2ad7f77ec0000", @ANYRES32=r3, @ANYBLOB="14005e000000000000000000ffffff7f080f4950"], 0x30}}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c1000001a9cd98c978012f93dcfc82f9491490170076a8bc2af9eae8f7156bf4ef43970cfa6e8f0d178e7770668cc5b86c42d35f151aa05d78c9823c90d049d29d817a8af2464612cb016dadb2ef3795235f34c1f1f094db73e7f1d18553f5c87a7dd3f1a785586eddda7684df4e4379f1ab9958e3075d70aef7a3678a78b9a7890bac14103fc0fed92e53be86095e304881961bcaae3522e96816e8479626e0a8d5f0df8b2a24b1493", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf251000000008000300", @ANYRES32=r3, @ANYBLOB="1f2887277708b70ae2cad3d36720fdb0a62fe59c74292072c343803701e308dea5a9d822a8afba7dc6f4b475074b94b7d9cbec38e9b3631f96bc74766c14f40fbba6abab53d804b5e22315b78a"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04d9177cec1410b41648", @ANYBLOB="f1e9bd6a6afbe3776217f760f9f70027104982092e57dd8b1cfef5011b83bbda807ab761225a9959ac21443efe67b7f6c04703faa3f2917071d2c55c7b7fd8a6d175710d3606348465d862d8c7446b2b08761728b92d752e088fcfa5655b2cb2", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x800) io_setup(0x3, &(0x7f0000000000)=0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r4, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 18:04:38 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:04:38 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) (fail_nth: 22) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:04:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write(r0, &(0x7f0000000000)="f92221ceabc45d1f447a4592cacc9209b6bb825f2728e099ee41", 0x1a) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="9f", @ANYBLOB="7c9fe20c234c23fd18304ec3a73702000000203d431d707a6b67aec2293d6fe9094aa2d235e1edce3892104e69bec56d56172300"/65], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000180)=ANY=[]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) unshare(0x48020200) 18:04:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) [ 2050.017743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2050.023483] FAULT_INJECTION: forcing a failure. [ 2050.023483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2050.026812] CPU: 1 PID: 12757 Comm: syz-executor.6 Not tainted 5.10.204 #1 [ 2050.028392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2050.030250] Call Trace: [ 2050.030854] dump_stack+0x107/0x167 [ 2050.031682] should_fail.cold+0x5/0xa [ 2050.032561] _copy_to_user+0x2e/0x180 [ 2050.033432] simple_read_from_buffer+0xcc/0x160 [ 2050.034488] proc_fail_nth_read+0x198/0x230 [ 2050.035466] ? proc_sessionid_read+0x230/0x230 [ 2050.036498] ? security_file_permission+0x24e/0x570 [ 2050.037621] ? perf_trace_initcall_start+0x101/0x380 [ 2050.038771] ? proc_sessionid_read+0x230/0x230 [ 2050.039782] vfs_read+0x228/0x580 [ 2050.040588] ksys_read+0x12d/0x260 [ 2050.041382] ? vfs_write+0xa70/0xa70 [ 2050.042217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2050.043373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2050.044526] do_syscall_64+0x33/0x40 [ 2050.045354] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2050.046489] RIP: 0033:0x7f119330f69c [ 2050.047319] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2050.051366] RSP: 002b:00007f11908d2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2050.053392] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f119330f69c [ 2050.054980] RDX: 000000000000000f RSI: 00007f11908d21e0 RDI: 0000000000000006 [ 2050.056570] RBP: 00007f11908d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2050.058136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2050.059696] R13: 00007ffde2f20a7f R14: 00007f11908d2300 R15: 0000000000022000 18:04:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:04:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8802) r2 = fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000004c0)={0x0, r1, 0x9, 0x1000000000000, 0x8, 0x20080000000}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000100)={0x0, "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"}) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x10}, 0x80000001) r6 = signalfd4(r3, &(0x7f0000000340), 0x8, 0x80800) syz_io_uring_submit(r5, 0x0, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4000, @fd=r6, 0x6, &(0x7f0000000380)=""/220, 0xdc}, 0xf39f) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x3, 0x0, 0x6, 0x20, 0x0, 0x4, 0x400, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x110, 0x1000, 0xc949, 0x6, 0xffffffffffffffff, 0x9, 0x6, 0x0, 0x3, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) 18:04:54 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='#! ./file0 #! S'], 0xf) fallocate(r4, 0x3, 0x0, 0x18000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r2, 0x101, 0x81, 0x2}) pidfd_getfd(r5, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = dup2(r7, r6) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f00000000c0)=0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x3, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7]) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r9, r8, 0x0, 0x7ffffff9) 18:04:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c07000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:04:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x9, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:04:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10c, 0x12, 0xc21, 0xffffffff, 0x0, {}, [@nested={0xf7, 0x83, 0x0, 0x1, [@generic="6a78fdf586ce97deaa6723cded9623eea7d26613e011d66020ed285540c8cb2342e9faf8c4901385134a35130ff590b7dcfc1b35169e9ca16b09d11d433790e3ff19b019f8fce7000ce074e4fc894e66224a4a4cdad747694c461419150f01cabaebbedbec7ddf465f077452c2e0848e451fd6bcdcb52fba4e2f18e937319e17e7de48e641d9112e172ff3f4d1601beee21ebef03bf6f00bcba6619f5307ffe86450d6ab0733db35ef1e437f68ebd877936224b2134e12fd586941e4a8a95123d8a7f130a7289c36bb3e2091ae79e32dbb5481ec91bb93e50be666294c552a5ef6eaaacafc93c0acd335a2", @typed={0x8, 0x4f, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2000821}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(0x0, r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0x8, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000080)={r11, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x60, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x615}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x24000010) 18:04:54 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x0, 0x4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0}, {0x0}], 0x33}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x5}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x19c, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000001c3430018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:04:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:04:54 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:04:54 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 2065.715636] device lo entered promiscuous mode [ 2065.731304] device lo left promiscuous mode [ 2065.738742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2065.763790] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2065.766408] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2065.767803] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2065.769733] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:04:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0xa, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:04:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c08000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2065.798174] device lo entered promiscuous mode [ 2065.799476] device lo left promiscuous mode 18:05:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x0, 0x4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0}, {0x0}], 0x33}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x5}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x19c, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000001c3430018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:05:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0xb, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:05:09 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)="e300600078af5f6132d8f13ea0aa1f94d2795bf7c94c7aca20adec6a1192fd0f45c6eb5aa724bf3de579214173a6b69c7322229691976530d25f45e0828e8d89ff1af6ad1dc2953d150cec22049709b41f20b0acd5fe6eefd69ca7ae9dad151c01359a831577a163cedf40211e79c5829965fd2ef83c45f16010a9cba86f476697a478723903a3913ebec11131536bbcccb8bc31c51207e80411bed8a083761cb2cd8fb0b9193b17913a3600581ca11a057f2207a5d1dda02f6c4e44bb2b", 0xbe}, {&(0x7f0000000300)="6d8b06012edd4868b23423b98ec65b6f206f4998b000c7348cbae520f2011ce5ba0bbd23d4f537ecd17be1330f3ed18b4b8f55c5620c07e6a0ed653599c8f7035ffa50f4a8462d1d831fc4070b0083f5767247860806133eafe2889e26d68f17f50393d9cb363743cab1d76798d8b2de577ae21aa08782ce7c698f1e9c9dd3ac837afd778fe9d8aefb50fe9a14657b7914e9b14420afffb578924b6c2789a06cb17cf920ba05fe625f3c0499b8dc76e71483e9e1e26ceb515e79a7f73a8dd7ce20afe3f777", 0xc5}, {&(0x7f00000000c0)="8a420b7e07bc287d010dc16e8af137ca1f9c94a84abcaa2c336c864d0242093627906b75e779876b0ca316faeb4943a98b1516eaea0e1482dedbb1827b8657f0dfc0d89f2892332e66b1acbe50ede343e5bb11de0d8c16e068b016ac83b7c492a404b3e6455286b259a40bda974c88da37a181152d0aae3e25dfe0b301f20d1c558f432da630a6adbd0c22c7afaf01db8e82ce079b4ab9620777e97517298c4777160cb24bf8", 0xa6}, {&(0x7f0000000500)="094df8588ffad47829dc07", 0xb}, {&(0x7f0000000540)="c282a798eb1ec3334991ede55b3782a2143cfd40bcee81401a9e029f1c1c53b93091888babfc784a8cbc5602bcff96b83a4ff374e3f6f9097e760f901319c58bfa6e1f383399", 0x46}], 0x5, 0x1, 0xff, 0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = signalfd4(r1, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000780)={0x1, 0x1, 0x1000, 0x31, &(0x7f0000000680)="3f475efe000859cfd50d07f8dfde220454a69e549c6e1247eb9ec9aae15fdd6b7ffb4696ab76d5b3c887c3be45b97bee72", 0xaf, 0x0, &(0x7f00000006c0)="637231a05b8a00ba5158931bbdcb0d296325b36c3edc00dedc3b986ac4bc25566cb5b0fc31976be97b9479fa1620f9c013604bdb5380bc263cba01269f1f65094f1884f521f01b2d612b657b16771c0855a8e90ac2a9d73d6b04d2e399c295f930128a0a4466d63669abf4ea3be7beee1f8ab764d2a70354bf48346cfb04ab8a97a302a0c3cd6dacc55406bff4be1cbc9b83947030c87c2e70c9f053097bc4a1b2b3a6eb42acec503a2f1f86206bf5"}) openat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x2000, 0x96) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r6, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f00000002c0)={0x7fffffff, 0x5, 0x3, 0x9, 0xfff, 0x7, 0x7}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 18:05:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:05:09 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) lstat(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fstatfs(r0, &(0x7f0000000040)=""/1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') pwritev2(r3, &(0x7f0000000580)=[{&(0x7f0000000280)="4b587f5f3590de91aa58454a9ad2f95a6c770ada2d46d986d4f4908000e658ad741c17b836eef21f2445b20eb91a390801ba56fd47e5515df07ae3516f78def808", 0x41}, {&(0x7f0000000300)="117c0d667acbf1afc9ba948daafb5cb35f88dd1a6a2b67dfd22dd033f6c10de9ca26f6aa87c701557d9cbb6f9d1cd7edca5340f97ff3040f1b3455b4d535998a6e3940e39da5d27edae111d99e96bb4e3da1e196e27f9ae6859a84449e4d2b30b55509a8ff49b1a4b34331b18a6ee8c4009b57df88a87eafb9b61d5f2cb148abcdf15dfcad686eb2de289b0dda7464ce45bdc555c0da4691ac68c4d25a914b35", 0xa0}, {&(0x7f00000003c0)="09656c11c95e96e7dc4b25c8008f8e1edb774f17142503de953bae571d27e7604cdf9f21", 0x24}, {&(0x7f00000004c0)="1e3d1304c9a28443f27d90dcf239ba14c85590886cef9298fd0ff7739f79c9d1ae8d812a47631aea242cc58f17d6a308f0a74d39cec41e06471c23b19fe4c7957c5a9d915ee6e08c50b1da9e999a77a65020be7f559ea66581e5718e8600b63cf0580ad7281b881a001e79abb54f7c74c164b92bb7313e3d1849eec274e462dda972", 0x82}, {&(0x7f0000000400)="bc24cb5f3ec3f975c66181ef852d1c51b07ba7433e0db753e210043f0792c8ee0fdc825afa793e5e7d425cf207c66edc485d8108d899eeda472b9a16c6f21ae951ed5cefc5661fdef2c4bcee3e63eb6b3e0d1c193a776d2e952e6f774ba0c60ee700bc8a45ef", 0x66}], 0x5, 0x10000, 0x0, 0x8) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x538, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4acdbc8cbbdd9bb1}, 0x4000080) readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3) 18:05:09 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:05:09 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c09000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:05:09 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2081.132412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2081.177329] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2081.179491] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2081.180744] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2081.182677] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:05:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:05:09 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c48000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2081.246780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:05:09 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:05:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:05:09 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c4c000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:05:09 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 2081.482670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:05:09 executing program 5: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/125}, 0x85, 0x3, 0x0) getpgrp(0x0) r0 = gettid() setpriority(0x2, r0, 0x20) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x0, &(0x7f0000001c40)={0x0, 0x989680}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 18:05:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2081.551618] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2081.553885] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2081.555073] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2081.557036] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2081.592780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2081.790687] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2081.793476] ext4 filesystem being mounted at /syzkaller-testdir854487252/syzkaller.yXNbHj/228/file0 supports timestamps until 2038 (0x7fffffff) 18:05:25 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:05:25 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:05:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:05:25 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c68000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:05:25 executing program 0: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', 0x80202, 0x62) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r2, 0x0, &(0x7f0000000600)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) io_setup(0x3, &(0x7f00000001c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) bind$unix(r5, 0x0, 0x0) signalfd(r0, &(0x7f0000000240)={[0x3]}, 0x8) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x2000, r1, &(0x7f0000000040)='\x00', 0x1}]) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) fallocate(0xffffffffffffffff, 0x10, 0x41, 0x1ff) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbcf, 0x4, @perf_config_ext={0x4, 0x85}, 0x2a, 0xea1, 0x0, 0x8, 0x5, 0x6, 0xc4a, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xb, r1, 0x0) io_setup(0x3, &(0x7f00000001c0)) 18:05:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r1}}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x12a) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x30, 0x0, &(0x7f0000000000)=0x97) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) 18:05:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:05:25 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='cpuset\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/204, 0xcc}], 0x1, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000080)="af963bdef6b53c062bed41f6f0780ecc5668a65ac81087694be8f079408c6dfb3f0abaca65ef5c5a12401428c49e9d339167c1a9d7c8b31df09376be1efa0a20e8346c7100bd97c85982e47fec55d9020f86e70fea6575228f5f0a7a3924632cba6f69b57dc31e1029ff17909a08c3d214e45c40d5b1fb0ec477393131da", 0x7e, 0x10001, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xff7f, r0, &(0x7f0000000100)="93dc19fdcc90249d5ca79b9e7b88cb9dfdf57b804eecfc8ca5588a2d3f8d6a399db9d3d5968cd41e3aa9e0eeb2fbba1153b330b3b31598ccf7c33c0a64898ea0d32063e8fc0accfdf9da2a8cc14b5c5884e60cc97f1e66331765ae52b9c86b8758add07d6f73d7da1e6bae65e3df8dd3105bff00b15147883b99", 0x7a, 0x1, 0x0, 0x1}]) [ 2097.356302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:05:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000300)) r1 = signalfd(r0, &(0x7f0000000040)={[0x800]}, 0x8) openat$incfs(r0, &(0x7f00000000c0)='.pending_reads\x00', 0x8000, 0x140) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) [ 2097.415286] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2097.417297] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2097.418398] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2097.420176] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2097.438323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:05:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:05:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0xd, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:05:25 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c6c000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:05:25 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2097.568316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2097.601731] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2097.603735] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2097.604859] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2097.606617] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2097.626184] FAT-fs (loop2): bogus number of FAT sectors [ 2097.627477] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2097.644715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:05:26 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:05:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:05:26 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c74000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2097.722525] FAT-fs (loop2): bogus number of FAT sectors [ 2097.723818] FAT-fs (loop2): Can't find a valid FAT filesystem 18:05:44 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:05:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c7a000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:05:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x3000000, 0x4}, {0x5}]}, 0x14, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"b65f5a39a5e946a9b20a4c6b9b4535c9", 0x0, 0x0, {0x0, 0xffff}, {0x8, 0x22}, 0x10000, [0xff, 0x100000001, 0x3, 0xfffffffffffffffa, 0x4, 0x3, 0x8, 0x5, 0x6, 0x9, 0x8, 0x7, 0x2, 0x7fffffff, 0x0, 0xcb3]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xfffffff8}}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000002c0)={{r0}, r2, 0x0, @unused=[0x3, 0x80000001, 0x4, 0x7f], @subvolid=0x4}) 18:05:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:05:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r1}}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x12a) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x30, 0x0, &(0x7f0000000000)=0x97) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) 18:05:44 executing program 2: sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x40000) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = msgget$private(0x0, 0x80) getpgrp(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)}}], 0x1, 0x0, &(0x7f0000001c40)={0x0, 0x989680}) msgrcv(r0, 0x0, 0x0, 0x0, 0x2800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1cf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, &(0x7f0000000040), 0x80000000, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000300)=0x10001, 0x9) 18:05:44 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:05:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2115.896610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:05:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:05:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000100)=0x80000001, 0x7) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="a3", 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000200)="c0", 0x1}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 18:05:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c85000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:05:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0xf, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) [ 2115.981627] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2115.983641] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2115.984739] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2115.986513] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2116.032197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2116.089290] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2116.092226] ext4 filesystem being mounted at /syzkaller-testdir074047392/syzkaller.Slmftp/226/file0 supports timestamps until 2038 (0x7fffffff) 18:05:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1cf0000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:05:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x2, 0x0, 0x0, 0x80004, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x74) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x80}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200), 0x3) 18:05:44 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:05:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x4, @time={0x6, 0x3f}, 0x3, {0x1, 0x1f}, 0x83, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x16000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8, 0x0, 0x0, 0x1, 0x5, 0xc00, 0xffff, 0x0, 0x101, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) sendmsg$unix(r4, &(0x7f0000000180)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000340)="2583eb70d11ed5de0f7bfff7f034c36e209d7821b914336c143a68a8b81abe44399a0db44998d1398477439e23b98d4d6ee0439d9e2b9afe96bb9e4e644a1df36349ba247cc4f4c6347f96c881b74d4bd585baa4c5869c3f4c46e757aaea050822873f24c552440c5e69b74ce977114121e3e2c302839b6b132cb853e8baf5c699d78e7bf55849b212e5440e720ded954eb67dee983ddb3c227b706baf10a99ed00a2d97256c20b19881d484bf259d", 0xaf}, {&(0x7f0000000000)="e034c3fdfff57eee8071fcfa8348cdbdca4d5bfa9ccc778a", 0x18}, {&(0x7f0000000400)="bd5f4da4680525816f18a7ea2a51b6c69b0f1a731c0ba0be3a521f34019fbcbe5d83f6490a15f11705521c14c4ae912ce6c015375151f14e6653995adb53064d82e038ea0959feaa400d6facd522d2e539f363132890bcf24cc6ddf378c29c010984d3abefd10dadea019316be519ee2940e9fbf31342f65f8e5a66af3155c08ae6aec50a165a5801aac0a664809969f0490dc1bf40589cf6bce22ccf474c4e84b719af467ca9acde59bf2e24ea7c362a767ed6b17dffe895bf0babe54c02450e79cfeefa1bf5205cd89e6b35f2e45918ff4d87eb4606e348db86a935d04ea62416df8", 0xe3}], 0x3, 0x0, 0x0, 0x840}, 0x20004009) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000300)={0x0, 0x2}) getpgrp(r3) unshare(0x48020200) 18:05:44 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:05:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:05:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:05:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf1b, 0x8) close(r3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = epoll_create(0x3) syz_io_uring_setup(0x17b7, &(0x7f0000000140)={0x0, 0x30b, 0x20, 0x0, 0x238}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000e80)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000e40)={&(0x7f0000000c40)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x0, 0x1, "86506cdf747df3a6121c361c2844cd3510cc001ec49ff9fdb934435dd0dc927e06dec49339a13a02d6fe2a6eedf2cf41be1cb334e512f10b40cafc390a00a7", 0x11}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000cc0)="7256d156b175ab6b8122114104e3dd0e01baac1c05f36417d40ddbfe28ab072545c84ea0c415d9808ee0b3072f54f81d2a6c506ef250c6ca86c35a3250ce158c57a30aa73b67c30589bb6e7a2c21d6d8d96feca2ddb144d1306dd8e8dce9d2e67b4aa129a9317ed6baff9f9f", 0x6c}, {&(0x7f0000000d40)="ca6ac8c8efbb588613225e63f2c64ff3ed7f89ad4709d1d991634606b052c751f4c70e978698f755ad6a0c449477db372f065fd110618d153dc8003b98e8e0325b14785a7964f5f9df516bc7ca94e2437bca2ae86cbe06fda43620f4b55b3cd4d85b1e9c73a9d5d3cac5a5da90373fb705f17ab2330639ae1d75e7aa398f4d9231e127bd4c0b710a7c99cc0c999a6c07ed05e4d384e876270350dca80580349cddb9977ad7b7ba49b552995d291d7402d40f5bbef35a2ebe5688e7e6f78191599b0d17c7c10444db0438a23510e506c62d4a126f77cb369d6e6c986e5c296dd4900cba", 0xe3}], 0x2, &(0x7f0000001e00)=ANY=[@ANYBLOB="c000000000000000880000000000000082fa644e5ca1a82534deffa085b7a09db6d0a47e38460cf6cdb1f7b1d98c3bcd508022e2c1c03635692ff5fd4dab98606c3a86c25e5070ffd3ddf1c7918cdf94f7b903789bcdff4b794421da8c08c8662192f7a54780ecb0b6404935e35c4d421935eec5bef6ff58870c6fce41d851e415ed9e25ba0c595669a893b260d13660a87285090b760c5171b9a31e70e073beb08398cf8a6e5ba063c504d59570c67874c9bc2dfe9f9a3aa900000000000000e800000000000000130100008000000054569c804483bb22b750c42286cd8ba3b8d90e544b97175e60d1d2b0a2d9c4d21ec1f8f7c3eabcf5acff468edc5885ddb779c0162aad75dae140d02ef2ce69183d0d29caf579755462da46e6dd115740792460418b7b21ddcd2951632e176941c0b87d330fdc274c8ddde5660470689412c69ad781b82606d1aa653aa1ef1533888bbdf9c46246cb6338f00477e2c12a2255f9ba41581de86764b903e35ce129df9f30b8512cfdc35fef43b0c3bba0d6c657a6af55e0503ac727b80ae125aa1e450a21b6ebff351e34c6d16dc234a8f7949dbd9d00000000080100000000000016010000020000001e006024775eb54d1af9a8107a1d8193fa5d9fab24a09f5eedb5c7cbdaf1ce422122f87feba670d197a813057008bb670560d2f88dbc74f9dff7f68fabe3bffa776176829fb42fdccf561665c34c63d6e0fd803c37e0a1fc790988dde06e4b2964f6e833138c22c448e2e2ce45b50276b7e040405e0572fbf9a9f14093de61b5c8128a2f76fa9fb59896dfa138ac212272980016416419065db9a628eafc2dc674ad7016ff3c0c919e2dcdfff477aa18bb4bd1f6f75567208cb4a0f344abab43b07a0941cf33d83a48383810e6b46732b882d205d30eb7f2b1b564fda5135441f4e7e2bd2458a707badc759577382dc4e66a557b7351ace8a8000000000000001301000000040000709a8e38ea725a46bdb872b894eb00ab9dbb7f90da23c20e310c1526da7a49506165ead441490209e410df940117225007f8153f126ff9f71a5da6e12211ba28623650275ab02e56371e68c805ee6dc8f358574d4cafc9d41546e533604e5920a0fce47792e9d00051aa2a7928039023dd198fe994d288c0a240fc5c4b0b37dcc0a2892e1db0f9b6621aacec5980eb9884c291b600000000a000000000000000010000000300000059f90d054ed6fc0ab9ecb7c755b3a32c27302d29ea826b7f6e9e2de6461330f859fac0eccedd75ee8fe7da21bc0283299e6a825baff9171561897415cbd174793b4f39e3ebdf3e3e924964aa84bdd607ad7d94a511ce0e8c86dbd0182843f76ff5127438b4f2b4af19a799aaedb5afb64d614eb1f2ab2051d61449a01553e2738b3064eee87d543a1205bff5c8b6fda12000000000000000000000000000000071ba14c53589b2462100000000000000a8000000000000000b010000400000004ed8b6af77c5d38f36a20c752dc4771787c96612e426a9a67247f5bf44f297d9df9000fa7dc13f5bd12c59b4abf120ec4c9b21837cc94eeb2791a7d7f8c95ea702bd1d04c599359c6826133fa5992215234dd0038b4cb39e610c2a5e2afeb5b166e374cd90d9af01c8df84e7995a03f1b9a98c603abd50ee32654e4eb4532f5cfef47139b70033e7c786662f23c63cd78415000000000000c80000000000000000000000040000009a3695373d69748f7cb453ea4999e4677c469170f96a461dadbaa136affbdc8c7a537a30e38fc966ed67dc5841a755a35d5245ed9e30b9f71d9527ec3ae45862bdc8b1d2ced6b4795f3e1ce19a32b837b8191436bd9de05ef649a7bf0017839ee8f3428a1cf407c19596b4db442c15dc68d659622647404a1f11530b79a8fd5332e5362fab72c912afa0a53a81950903f15107beb45ada505ce3ab149d1b2f6399bbd1b5ee63bd718a75df8efe968b9ff255703fc9140000d800000000000000170100003f00000002ea1a12bb98f7e3a400eb11d6fe7471e4e811b43d956d8dbe2693b1b0853943857c19bd3aaf3e544d398205ed0ff1f4508ba7092b4df95a89620578801d913d7229300501a6dcd6f6d72440f7a90875bc7b2ccec36d9d810329e65352d11e449b45142692774bd7a424a22f6a7ab961998d61dce8c326da35b9cd30363d7e7f0e4871c7ce237a784420034f45e2d6d3948346471104b2432afb1fd9c4019b629ed10dc44b5df29c5a75cd8d9e5f6e011b86818be91a36cd4aa790f445bc7612c40f110000000000b0000000000000000100000000010000d3fb8a121efefa769e88238ebba80fc2e619bebc552ccb501429e523a68cea775ff05b68348502797c6c2aec45cb5604cfe7bf1880c3ee0a3a8a1fff038d812eeeda89b38124a0bea1891648e0d01af10c4bc37911afbb56ade99053ed665b765930d2183a40b7798c3f74ca29dde5d84f9c5249c40ef0e72ff6f18818b825b6b452967700098cf38f7557e44e9f22a8be26235fa19c54474d83cb096b000000ff81d5ed94de92b63b3fc18785849638807ad12a8faa8fcf594d7ac61392f2f059c686e5d818f5ff3f39897b3f56dd0a2ea48b44ea74d9c730eaf62ba76554bbbabfe335c95e1d01715b50dc3f0459c8bd9914529364c320809ac4b7c63d6a37ec79344801db8eb0d338a87f6147ba5fd275bbdd7a2c23d90000"], 0x710}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)={{0x0, 0x3f, 0x0, 0x29, 0x36c, 0x6, 0x19d, 0x80000000}, "4980d4ed03b1eef39a5cbba10f2970d33930b2f5b30395805291fbc7f4a0008e5a58744c20e8565dff316536b9836b27be3d602a92249e380ec75c541c31f332417e4822d71998ebb5fa6ddbaa52467bfc0e1e83a47e275f57281682d10cfa950a81a3eabda7dc990f063bbb4bfe00e87a01930d742a51148064b5e56c5a29ec768b28dd2cc4a2b3854d2561441a66f98546281502a5bc6b205254d5b99e5057e5ef0229287058298d77415907a00db3fbe9df47d0a9299ac58b636d8e92d28b663f8e6da851", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8e6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r8, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f00)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x1f00000, &(0x7f0000000ec0)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x7) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2116.289566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:05:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x11, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:05:44 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 2116.367652] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2116.369597] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2116.370666] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2116.372360] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:05:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:05:44 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 2116.433985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2116.502738] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,,errors=continue [ 2116.645619] EXT4-fs: failed to create workqueue [ 2116.646945] EXT4-fs (loop5): mount failed 18:05:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20600) r2 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1f, 0x7f, 0x101, 0x20, 0x6, r2}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001980)={'\x00', 0x8d0, 0x8d75, 0x400, 0x100000000, 0x92b, r2}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x20, 0x4, 0x81, 0x7, 0x0, 0x6, 0x820, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x2, @perf_config_ext={0x3, 0x5}, 0x90, 0x7f, 0x0, 0x4, 0x57d8, 0x4ae5, 0x3, 0x0, 0x4, 0x0, 0x1}, r2, 0x1, r0, 0x8) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x101, 0x3e58, 0x0) 18:05:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c26020030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:05:59 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:05:59 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x67e7205273684a46) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x8) creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) 18:05:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:05:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:05:59 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:05:59 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000140)={0xc28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0xbe0, 0x8, 0x0, 0x1, [{0x2e0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4f61, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bb166eac55eb6c00bc3fde7d03fcb3a9c8f18b66e098eefeedd91830ca2f257b"}, @WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x5a}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xf9c, @loopback, 0x2}}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x88d, @local, 0x1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @mcast1, 0x5}}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "aef0d3ce4417f5caa455a7d8ba8cf25c514e59dc8af1ce7352d7d02127097439"}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4758064b48533edaa16f56f7bd957aa860784df871202312969f2d66aaad54f3"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @empty, 0x80000001}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x15c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x538, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xa31}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3b4be9514a1cfd38767ac606c8d2925f1eb06312b7ce4f12162f1c6c9692280"}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x344, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f8a4f486c796d6cdd4aa0c2f26d30e5749db0901e6b46879f94e48706d8509f"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4778015e824e44b301b397c62de308c08bb50b71715bac868b4ba63bf7cf3658"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0xc28}}, 0x8000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x84) fdatasync(r0) [ 2131.398422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2131.470597] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2131.472634] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2131.473742] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2131.475553] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:05:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2131.499638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:05:59 executing program 2: perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000440)) socket$inet_tcp(0x2, 0x1, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) 18:05:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00030030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:06:00 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:06:16 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:06:16 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = msgget$private(0x0, 0x80) r1 = msgget$private(0x0, 0x8) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clone3(&(0x7f0000000540)={0xc2001000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x4}, &(0x7f00000003c0)=""/68, 0x44, &(0x7f0000000440)=""/141, &(0x7f0000000500)=[0x0, 0x0], 0x2}, 0xfffffffffffffe3b) msgctl$IPC_SET(r1, 0x1, &(0x7f00000005c0)={{0x2, r2, 0x0, r3, r4, 0x101, 0x2}, 0x0, 0x0, 0x9e9, 0x1ff, 0x0, 0x10001, 0x4, 0xa3, 0x4000, 0x1fdf, 0xffffffffffffffff, r5}) r6 = msgget(0x1, 0x0) msgsnd(r6, &(0x7f0000000080)={0x3, "ca8a595e57130f8e526f5f4d1a78272ccc82b283b79399d7044c755522c06092dddc3aaa8922c4cbac56b557477dc6d4648ac5de6d91c4ac822f893695fe2e8778723e2dfafca39873"}, 0x51, 0x800) msgctl$IPC_INFO(r6, 0x3, &(0x7f00000006c0)=""/83) getpgrp(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="100000000002000001000000010000003bc8262b5b625e4931968ea522d1a6f34cc0879a83d541d18667e8255abfd3e90fb457bd223f4be8f59e928b0c0a68bff996c9fe000000007d7cd8723fc51eb6ceaf2a6a848676299d0763"], 0x10}}], 0x1, 0x0, &(0x7f0000001c40)={0x0, 0x989680}) msgrcv(r0, 0x0, 0x0, 0x0, 0x2800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1cf, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000300)=0x10001, 0x9) 18:06:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:06:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x13, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:06:16 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@void, @val={0x1, 0x80, 0xce5, 0x6, 0x28d, 0x6}, @ipv6=@dccp_packet={0x3, 0x6, "ac6098", 0x217, 0x21, 0xff, @mcast1, @local, {[@srh={0x3b, 0x12, 0x4, 0x9, 0x8, 0x48, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x20}, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private2, @ipv4={'\x00', '\xff\xff', @loopback}]}, @hopopts={0x2f, 0x2, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @jumbo]}, @dstopts={0x3b, 0x24, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0xcb}, @generic={0x42, 0x9c, "e1e7461bc8c560c118b51eb59899c85273ded03e2e865092c3e2d96582cf5393b04043ded69ef6f1a3b088080bb39d24ee19ac7107c22952095019637e20a1469cd7fe70ed609308177515fb9469bb558e006320f20c25a2217efe927aa934f994335954bde2bb64da9a1ba3b86f1af080b3b14c37896a9f9414ca38329aa5cb509bc4b0842efdf73c9a3f5fde735d7a9cf04a61fa4e1e0b32c1aa4e"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x3e, "cb0e6b8992297ddda31f5cd9a5369a5fbc199a383505f1e9de04e6481a000a4ab0b774eaef4aa1814c15f11790d28b9d1639c8a55687f3506a3787891e64"}, @generic={0xe8, 0x31, "347c59cd6b941cb9030f9696e4a93f37711ba7bfbf66d970abf3f151a26349fd6f51dcb1add966d1fbaa1ceed6959d702d"}, @padn={0x1, 0x1, [0x0]}, @pad1]}, @hopopts={0x6c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x20}]}, @fragment={0x67, 0x0, 0x2, 0x1, 0x0, 0x4, 0x65}], {{0x4e20, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x7, "475aa9", 0x2, "48b859"}, "8de59180324a67"}}}}, 0x249) syz_emit_ethernet(0x83, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@mpls_uc={0x8847, {[{0x3}, {0x1ff, 0x0, 0x1}, {0x3f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xff, 0x0, 0x1}], @llc={@snap={0xaa, 0xaa, "a537", 'jnf', 0x22eb, "fa74795d34497a9c1cd333246f04d445e23989ae2116f3c1b8508a294d79bb0d511548782a40dc8aa385c0d1cfe78dfa5483ec16fda9bd33e83eaff8063f2d58ba790264c2bd7fb60169e3942c5136d8e172a498cfd0387f"}}}}}}, &(0x7f0000000380)={0x1, 0x2, [0x452, 0xe87, 0xc94, 0x99c]}) 18:06:16 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:06:16 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00050030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:06:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x2c942, 0x24) r2 = open_tree(r1, &(0x7f0000000040)='./file1\x00', 0x8900) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0xc4c) readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) dup3(r3, r4, 0x80000) sendfile(r1, r3, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0x1, 0x80, 0xfffffff8, 0xe6, 0x7}) [ 2147.924202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2147.975189] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2147.976492] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2147.977196] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2147.978333] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2147.988667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:06:16 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:06:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000540)='./file0\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4fe2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'vlan1\x00', 0x0}) write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC, @ANYBLOB="a99c768f3b754e06632d5389f1d371e39205ff66e53df6ae50a9cd9113d1eb8fe4f93419339b01b4d9ed4c9a43ea4fd1fbce800a081b4e5def127f68e72dbce226cad6a9c0564ce5dbdba1260033307616c7bbbca2a26fb1db7d58dc181e79ed"], 0xfdef) io_destroy(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) mount$bind(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYBLOB="2503000000000000000001000000080001000000deffffff00"/34], 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3, 0x3, 0x8000008000) 18:06:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000007000000000000000003003e0000000000000000000000000040000000000000efffffffffffffff00000000000800380002"], 0xaf2) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r1, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x100000001}}, './file1/file0\x00'}) r3 = dup(r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000002c0)) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20600) r5 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1f, 0x7f, 0x101, 0x20, 0x6, r5}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000001980)={'\x00', 0x8d0, 0x8d75, 0x400, 0x100000000, 0x92b, r5}) r6 = syz_open_procfs(r5, &(0x7f00000001c0)='mountstats\x00') readv(r6, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) openat$incfs(r6, &(0x7f0000000140)='.pending_reads\x00', 0x121880, 0x29) connect(r2, &(0x7f0000000080)=@caif=@dgm={0x25, 0x9cd, 0x97}, 0x80) 18:06:16 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00060030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:06:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x14, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:06:16 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:06:16 executing program 5: r0 = inotify_init1(0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x461f}, 0x0, 0x5, 0xffffffffffffffff, 0x9) r1 = memfd_create(&(0x7f0000000440)='\"\xff\xff\xff\x7f\x00\x00\x00\x00\xcf]?L\ay\x17\x80\xda\x03F\xcfg)\x9d!z\xdf\xc6\x1d\xb0\xa5\xc7%]GP\xc7\xb0@%\xe4p]\xd9q\\\x1f\xa5\x89N\xac]\xa6zZ\xda\xb0\xfd\xcb\x86\xfb\xc3=X\x1c\x82\x05\xc0\x9c\x82:k\xff]\x1c\x1f\x90\xa5&\x7f|=m\xa5\xfa\xbd\xf2R\x94TG\xdcK\xd5\x06\xab)\xc7\xd0\aH\'kE\xf5UH\x88by.\xc6\xf2\xae\xfa^4,\xc5\xd1\x85\xacoV:\x11\x04\x9f\x1c\xd4e3\xacI\x83\xf0Fv\xb6&I\x16\x93\x9c\xe7(;\xd893o\x03+Q\x97\xd3r\xb4G\xd0\x040x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 2148.144195] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2148.145427] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2148.146085] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2148.147149] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2148.152739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2148.188576] blktrace: Concurrent blktraces are not allowed on loop0 [ 2148.200659] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2148.201760] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2148.202358] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2148.203316] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2148.206379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:06:32 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:06:32 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) pread64(r2, &(0x7f00000001c0)=""/113, 0x71, 0x80000000) fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r1, 0x0, 0x70) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x4, 0x20, 0x8) fsmount(r2, 0x1, 0x74) 18:06:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0xffffffff, 0x1, &(0x7f0000000000)="597f9db38b19c8a5331366", 0x6, 0x0, 0x0, {0x2, r4}}, 0x80000000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000240)={0xb, {0x4}}) 18:06:32 executing program 2: r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e421defc2e6f4a58b2a50733d000000010000b3dc82", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r9, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) syz_io_uring_submit(r1, r7, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r5, &(0x7f0000000100)={0x60000000}, r9}, 0x4) 18:06:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x15, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:06:32 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:06:32 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 18:06:32 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00070030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2164.388718] 9pnet: Insufficient options for proto=fd [ 2164.431069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:06:32 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2164.473356] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2164.475616] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2164.476733] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2164.478524] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:06:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x19, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) [ 2164.485529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2164.509968] 9pnet: Insufficient options for proto=fd 18:06:32 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00090030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:06:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0xe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fcdbdf252b00000004a1faa63500cc001e002a003e01002a01036512aaa27254b1fb08021100000008021100000000002c00238006000a00fcff0000050005000f000000080015006300000008001a000200000008001a0003000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c011) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="001800007bc2000000000000b9ab2b3b8d7d4ebbce54cdb6a461c1df8be3a0642cf5dc46855e3ace55d874c740080d888b96e4757e36cc210045cb6fc11ef0a47669757f00000000000000ff20091748b7a93ee050ba01fce417472c6e66436b65130539259cabb26a8cf4a3d10c128e096410313c9d9adcdce087d7a47bc9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ec9a97f0949f3b6b7780ad8b855bdf07d3d2b9070a70221820a47488219ba25005cde7e5e06d", @ANYRESDEC, @ANYRESHEX=r2]) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getdents64(r1, &(0x7f0000000180)=""/54, 0x36) r3 = epoll_create(0x3) dup2(r3, 0xffffffffffffffff) dup(r0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000200)=0xffffff29) socket$netlink(0x10, 0x3, 0x0) unshare(0x48020200) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000100)) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x0, 0x7, 0x6, 0xbb5d, 0x6d31}) 18:06:33 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:06:33 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 2164.664722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2164.720381] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2164.722405] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2164.723486] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2164.725236] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2164.741457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2180.992315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:06:49 executing program 5: r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9010}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140)={[0xf0]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ftruncate(r1, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)={0x3, 0xc8, "df1f240aa6d76a256f6939908d22746cc12079d379e60801f5e00c6666074dc3411828d543c7c15c4e6654d2a6872f1e042e6d6a89a63959ae4c3fdfe50ffce173d5566ccc80a24c895f6805438ce6860b1243cf4eccd73aed086809d99945f7504d1cde882e3cdb974e340b3f8386475cfca7d4fb1e1b51028a5ed5b3d1fabd7b1646e490385d49873f99d669489a2537fcd928a99da383f0ddbc83ed3179666a69975e03bd1e934d5b74e7088f5a5146d85370c444fdb3ccca51297be75c354954b52f41076d92"}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1f, 0x7f, 0x101, 0x20, 0x6}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001980)={'\x00', 0x8d0, 0x8d75, 0x400, 0x100000000, 0x92b}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xf, 0x40, 0x80, 0x7, 0x0, 0x3, 0x50081, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1, 0x6, 0x2, 0x8, 0xfffffffffffffffa, 0x200, 0x7, 0x0, 0x7f, 0x0, 0x401}, 0x0, 0x3, 0xffffffffffffffff, 0xa) getpid() r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 18:06:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:06:49 executing program 0: pkey_alloc(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x300010, 0xffffffffffffffff, 0xec354000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000210c00000000000000000002000000"], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000280)) io_uring_enter(r2, 0x2d7d, 0xc2d3, 0x2, &(0x7f00000000c0)={[0x3]}, 0x8) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000400)=""/207, 0xcf}], 0x2, 0x5, 0x10001) syncfs(r3) 18:06:49 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 18:06:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x1a, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:06:49 executing program 2: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f0000002040)={@random="09ee7c7f9012", @dev, @void}, 0x0) r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) io_setup(0x3, &(0x7f0000000700)) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @val={0x0, 0x80, 0xff, 0xbc83, 0xfff, 0x400}, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@llc={0xbe, 0xfe, "ee81", "f443d4fe9c51ef1f4975a7442ab008d847f6ef67e92babff6ba96a564d259ffa5747388bf27b15247d62be4eea7c25cef81895da30b5fd375789f78f66629d9ed2b77b2943be93634c45bac2bed455f275733fa172b8fd735d9dc9bf7d264f0ad199d168a00aff6dd84f3f42f071dc7e99ffc15ab5dc62c2a3f41c6aea1888366e38b12dff42bdd39de9f455ed7d970942e677583501726a3e8037a128d50c0ae8ae9a072a39c9d18011620f39a62dab865f8432d14c985f49f453e20e6cecf24b49feb548965102fa43ee76367502e4ba258313d8a68d1d6a5c11c256c5e4dfbce233b7"}}}}}}, 0x100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x1, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1}, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x900, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x4) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r3, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f472616e733d67642c7266646e6b3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c63616368653d0f6d00000000616368653d6e6f6e652c00"]) 18:06:49 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:06:49 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c02260030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2181.016698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13612 comm=syz-executor.0 [ 2181.030650] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2181.030685] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2181.030700] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2181.030712] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2181.042290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:06:49 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffff, 0x2, &(0x7f0000000180)=[{0x0, 0x0, 0x7fff}, {&(0x7f0000000440)="c6b894fad83dc655a8cfb2f0624f8e4fc5a166ac32bc3a2cb9a9324594d062a0d408f79adc90af11097333d8c0422c31ef05b5021bbd8a046f404d0f71e7f83aff8061ed7665afd92e360f4b3244970397970354ed99cb8585451975e47e6848055cdce7bacf7e30d1eeeb839272d7f10e645c9908eb04f2aff03ee4d7793d84e66fb1e0199ebc519f33147952ed95749994b4c907a08fc30f733cc9069b3e654a640af1cf803ee3a6dc014d07c360", 0xaf}]) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001940)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x5, 0x1f, 0xfffffffffffffff7, 0x3, 0x0, 0x5, 0xaf, 0x40, 0x241, 0x772, 0x4, 0x38, 0x1, 0x8001, 0xdb10, 0x8}, [{0x70000000, 0x7, 0x101, 0x4, 0x7f, 0x5, 0x7, 0x3}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1978) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup(r1) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), &(0x7f0000000340)=ANY=[@ANYBLOB="00fbd10446159b2395a089fadfef14fa7228d868ed8bdc10b6bcefc0bad4384e3ea6e2b53a38ef034a201d11c1009aba6b108699eb29d230298afbdf253142e0f7adf7fe8d99b17cca042d40000093a53ee895809196a4f67726ee2a3b325bfd2e8b6ee9b45d5e353976ead34171bf62b272cf4ee5746dc2eff82ab73355ef2d8673fc2f5519c3766a6f463219a6390481ef740784dda678ba9439c18549e351257ce81f9186c222d488c04d9b9df7b0b4bee6ae25d337b610245c44f67b0d6da483cc9960b2e31bfdc28498ffb5f64b00"], 0xd1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@nl=@unspec}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x30, 0xffffffffffffffff, 0x8000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$rtc(&(0x7f00000000c0), 0x100000001, 0x40) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000280)=0x4f5) 18:06:49 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00480030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:06:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2181.126297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13612 comm=syz-executor.0 18:06:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x1b, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:06:49 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, 0x0, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:06:49 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2181.238232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2181.287634] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2181.288644] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2181.289183] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2181.290086] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2181.300047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:07:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:07:05 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x20, 0x0, 0x1cf}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0xa, 0xfffffffc) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x181}, "038db6e8233c23d9", "b231e40393c68559be475c82199ac23c", "63d338fd", "5f2fdaeb8a6300bc"}, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x0, 0x3000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000080)={0x6}) dup3(r4, r1, 0x0) 18:07:05 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) r1 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) sendto$packet(r0, &(0x7f0000000100)="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", 0xbfa, 0x40000, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffffff, 0x0, 0x0, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32}]}]}, 0x28}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r2, 0x54) 18:07:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:07:05 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c004c0030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:07:05 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, 0x0, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:07:05 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:07:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={0x0, 0x74, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="6d6e09ca044e459fc78ca27728297fa1fbc21ca689f9108b8ef0c96627986bfba2c209000000060000b22211d6cc3f97088e1fd6d3d8554bd506dcd8e804728fab2b560d1d3c03b4b091ee783049520b04223af6a5e190"], 0x1c}}, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)) [ 2196.859658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:07:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x1d, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:07:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2196.934283] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2196.936273] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2196.937360] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2196.939109] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2196.947908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:07:05 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00680030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2197.044883] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:07:05 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, 0x0, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:07:05 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:07:05 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x4, 0x0, 0xfd, 0x0, 0x0, 0x2004307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2, 0x0, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000002c0)={{}, {@void, @max}}) 18:07:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2197.099390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:07:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) [ 2197.134228] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2197.135296] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2197.135899] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2197.136812] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb [ 2197.140580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2197.148272] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:07:23 executing program 2: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) io_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, &(0x7f0000000080)={0x0, 0x0, "09183a"}) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0x3}, 0x6) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x6}, 0x4, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)="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", 0x110, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1af}) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0, 0x2}, &(0x7f0000000440)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d\x00\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0]\xe6\x0e2\xb5o4\xba\x98\x1e{\xcfZ\x1d\x84\xe0\xa5V\x1c3\xd78A\x9eK\x16\xfcXD\xe3\x9a,W\xb3\xc0\xeb\xcd\xf6\x89\x95\x9e\xa9\xc2H\xc5\xaa\xd8\x101!\xa3\x83\x1b\x83m\xe3RK8\xeby\xaa\x88\x94a\xea\xab#\xce*\x0f\xa0\x8c\xca\x15\xea\xdaf:\xf6\x1b\xbf\x9fR\xba\xb5\xb0\xf7\xf5g\xb1\xdcU;\x1bL\xbd\v\xc4\xf8\xf5\xd8\xd3\xba\x8a5\xa0\x00\xc2\xd7\xe0Y\xd3\xa27\xb4S\xb1bd\x05\x9bD\x01\x85b5U\xb4\x8c\x17\xf4f0P\x9f\xe9`W\xb4\xe0\xf0\x19\xc2\x87P><\xb48\xd2Jb,7\xdc2/\xdd_\xdbXT\xffZ\x12p\xac\xdb[\x00\x00\x00\xf1\xdc\xd4\x99C9\x90\x10T\xf4:\xd6\x15\xff\xe06\x99iM;\xd6\x8c\x96\xdes\xa2\xa7v>\xd8W\xf6B\x9e-*\x83\x1c\xe1\x04\x15E\xa2\xe2S\xee\xb1\x97B\xa7\x9cKN\xfb\x14m\x84\x85A\xb7\x10g\x86\x04\x148{\vh\x14\x94\x81?\x14\xc7\xb5\xd9\xc1\x8f\x9e\xb9l\xbb\xb1H\xa3e\x7f-\xfb\xc2L\xe5\xf6p\xc5\x82\xcb\x85\xe80\xaf6\xf3\xd5\xa1\xe0\xc9\xe6\xb0', r2) 18:07:23 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:07:23 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) r1 = openat$incfs(r0, &(0x7f0000000500)='.log\x00', 0x80001, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x400000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000a36721c826323baec0599ec31cb9ff0020a3", @ANYRES16=0x0, @ANYBLOB="00002bbd700000000000020000002c000180060005004e230000060001000a00000008000300e0000002080006000100000006000500000000001800018014000400fc0000000000000000000000000000000800030006000000"], 0x60}}, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, "4802e47be25ecf73689d95a58557e20af35abd63e2bedef4c16e14d6479dac0f60fd098049503099322682e9a1c45c2dad24983e1497dd92cd9b1bf722cf13e7", "b77c400dcd312997b943de64b3176e480f4a453c6eb64d9341c1b74c9fd7e054897d489ff102b199b1dab14b6345dd404cde83bf2197a010eb69c1938e39f0ba", "28f28afb08003b2e9d8a9683f63921ea0aecd68fd310a427463f21addbdab2ce", [0xc8, 0x1]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r3, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x24080800}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000440)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000080)="a1714ddc51a5e069f89873e171543cc52f274ba9e33f9ef3f6be62efde60b3cdf8b042b1ec8ba54cb32dcb2738b5d5a436cbae9de39195f341b638372a52ee43e853b5cd0532578fe66146131749811b6f1d94398c5f9ebb01657074bfc2bda561544728cece799fdc96aca1588e101f900ee06f9213b6b2cc466588c1701adba6", 0x81) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) clone3(&(0x7f0000002d80)={0x3201000, &(0x7f0000002b80), &(0x7f0000002bc0), &(0x7f0000002c00), {0x29}, &(0x7f0000002c40)=""/77, 0x4d, &(0x7f0000002cc0)=""/128, &(0x7f0000002d40)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) 18:07:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:07:23 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c006c0030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:07:23 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score\x00') write$rfkill(r2, &(0x7f0000000100)={0xffffffff, 0x7, 0x0, 0x1, 0x1}, 0x8) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x10002, 0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000400)=""/3, 0x3}], 0x4) readv(r1, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) write$rfkill(r1, &(0x7f0000000040)={0x4, 0x0, 0x1, 0x1, 0x1}, 0x8) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 18:07:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x21, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) 18:07:23 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2214.790253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2214.833952] [ 2214.834387] ====================================================== [ 2214.835644] WARNING: possible circular locking dependency detected [ 2214.836925] 5.10.204 #1 Not tainted [ 2214.837682] ------------------------------------------------------ [ 2214.838985] syz-executor.5/13825 is trying to acquire lock: [ 2214.840138] ffff88801b0d0ae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2214.842136] 18:07:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2214.842136] but task is already holding lock: [ 2214.843558] ffff88801b0d0f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 2214.845315] [ 2214.845315] which lock already depends on the new lock. [ 2214.845315] [ 2214.847000] [ 2214.847000] the existing dependency chain (in reverse order) is: [ 2214.848522] [ 2214.848522] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 2214.849810] __mutex_lock+0x13d/0x10b0 [ 2214.853670] hci_dev_do_close+0xef/0x1240 [ 2214.854631] hci_rfkill_set_block+0x166/0x1a0 [ 2214.855645] rfkill_set_block+0x1fd/0x540 [ 2214.856589] rfkill_fop_write+0x253/0x4b0 [ 2214.857537] vfs_write+0x29a/0xa70 [ 2214.858379] ksys_write+0x1f6/0x260 [ 2214.859222] do_syscall_64+0x33/0x40 [ 2214.860081] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2214.861225] [ 2214.861225] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 2214.862590] __mutex_lock+0x13d/0x10b0 [ 2214.863483] rfkill_register+0x36/0xa10 [ 2214.864391] hci_register_dev+0x42e/0xc00 [ 2214.865339] __vhci_create_device+0x2c8/0x5c0 [ 2214.866370] vhci_open_timeout+0x38/0x50 [ 2214.867300] process_one_work+0x9a9/0x14b0 [ 2214.868261] worker_thread+0x61d/0x1310 [ 2214.869174] kthread+0x38f/0x470 [ 2214.869966] ret_from_fork+0x22/0x30 [ 2214.870826] [ 2214.870826] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 2214.872145] __mutex_lock+0x13d/0x10b0 [ 2214.873043] vhci_send_frame+0x63/0xa0 [ 2214.873942] hci_send_frame+0x1b9/0x320 [ 2214.874865] hci_tx_work+0x10af/0x1660 [ 2214.875756] process_one_work+0x9a9/0x14b0 [ 2214.876717] worker_thread+0x61d/0x1310 [ 2214.877650] kthread+0x38f/0x470 [ 2214.878446] ret_from_fork+0x22/0x30 [ 2214.879304] [ 2214.879304] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2214.880920] __lock_acquire+0x29e7/0x5b00 [ 2214.881873] lock_acquire+0x197/0x470 [ 2214.882766] __flush_work+0x105/0xa90 [ 2214.883644] hci_dev_do_close+0x131/0x1240 [ 2214.884611] hci_rfkill_set_block+0x166/0x1a0 [ 2214.885642] rfkill_set_block+0x1fd/0x540 [ 2214.886590] rfkill_fop_write+0x253/0x4b0 [ 2214.887531] vfs_write+0x29a/0xa70 [ 2214.888351] ksys_write+0x1f6/0x260 [ 2214.889191] do_syscall_64+0x33/0x40 [ 2214.890046] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2214.891194] [ 2214.891194] other info that might help us debug this: [ 2214.891194] [ 2214.892808] Chain exists of: [ 2214.892808] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 2214.892808] [ 2214.895448] Possible unsafe locking scenario: [ 2214.895448] [ 2214.896710] CPU0 CPU1 [ 2214.897669] ---- ---- [ 2214.898656] lock(&hdev->req_lock); [ 2214.899440] lock(rfkill_global_mutex); [ 2214.900769] lock(&hdev->req_lock); [ 2214.902028] lock((work_completion)(&hdev->tx_work)); [ 2214.903116] [ 2214.903116] *** DEADLOCK *** [ 2214.903116] [ 2214.904323] 2 locks held by syz-executor.5/13825: [ 2214.905293] #0: ffffffff85619628 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2214.907198] #1: ffff88801b0d0f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 2214.909033] [ 2214.909033] stack backtrace: [ 2214.909939] CPU: 1 PID: 13825 Comm: syz-executor.5 Not tainted 5.10.204 #1 [ 2214.911384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2214.913065] Call Trace: [ 2214.913601] dump_stack+0x107/0x167 [ 2214.914364] check_noncircular+0x263/0x2e0 [ 2214.915222] ? register_lock_class+0xbb/0x17b0 [ 2214.916151] ? print_circular_bug+0x470/0x470 [ 2214.917075] ? alloc_chain_hlocks+0x342/0x5a0 [ 2214.917989] __lock_acquire+0x29e7/0x5b00 [ 2214.918852] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2214.919915] ? SOFTIRQ_verbose+0x10/0x10 [ 2214.920737] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2214.921836] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2214.922946] lock_acquire+0x197/0x470 [ 2214.923715] ? __flush_work+0xdd/0xa90 [ 2214.924507] ? lock_release+0x680/0x680 [ 2214.925317] ? lock_release+0x680/0x680 [ 2214.926122] ? lock_acquire+0x197/0x470 [ 2214.926950] ? find_held_lock+0x2c/0x110 [ 2214.927811] __flush_work+0x105/0xa90 [ 2214.928590] ? __flush_work+0xdd/0xa90 [ 2214.929391] ? queue_delayed_work_on+0xe0/0xe0 [ 2214.930344] ? hci_dev_do_close+0xef/0x1240 [ 2214.931222] ? __cancel_work_timer+0x2a9/0x4c0 [ 2214.932160] ? mutex_lock_io_nested+0xf30/0xf30 [ 2214.933120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2214.934194] ? __cancel_work+0x1bb/0x2b0 [ 2214.935048] ? try_to_grab_pending+0xe0/0xe0 [ 2214.935953] hci_dev_do_close+0x131/0x1240 [ 2214.936833] ? rfkill_set_block+0x18f/0x540 [ 2214.937709] ? hci_dev_open+0x350/0x350 [ 2214.938529] ? mark_held_locks+0x9e/0xe0 [ 2214.939358] hci_rfkill_set_block+0x166/0x1a0 [ 2214.940270] ? hci_power_off+0x20/0x20 [ 2214.941059] rfkill_set_block+0x1fd/0x540 [ 2214.941903] rfkill_fop_write+0x253/0x4b0 [ 2214.942759] ? rfkill_sync_work+0xa0/0xa0 [ 2214.943604] ? security_file_permission+0x24e/0x570 [ 2214.944623] ? rfkill_sync_work+0xa0/0xa0 [ 2214.945468] vfs_write+0x29a/0xa70 [ 2214.946196] ksys_write+0x1f6/0x260 [ 2214.946946] ? __ia32_sys_read+0xb0/0xb0 [ 2214.947774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2214.948839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2214.949891] do_syscall_64+0x33/0x40 [ 2214.950654] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2214.951695] RIP: 0033:0x7f60877bcb19 [ 2214.952457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2214.956227] RSP: 002b:00007f6084d32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2214.957774] RAX: ffffffffffffffda RBX: 00007f60878cff60 RCX: 00007f60877bcb19 [ 2214.959239] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2214.960687] RBP: 00007f6087816f6d R08: 0000000000000000 R09: 0000000000000000 [ 2214.962138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2214.963594] R13: 00007ffcf22a34ef R14: 00007f6084d32300 R15: 0000000000022000 18:07:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x22, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) [ 2215.001656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:07:23 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00740030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 18:07:23 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x18088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x4, 0xc, 0x1}, 0xb7c) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 18:07:23 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008c10}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x30, 0x2d, 0x30, 0x3a, 0x30, 0x2f, 0x31]}}}}]}) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x1, 0x6, &(0x7f0000001500)=[{&(0x7f0000000100)="8b8480d1555ce10028fffd6d57b49a239c1b397b532a47dc9a422841386290de429eabf54f5282b5a9342bf8076ab5fa0d4a2ce62ceaa6d5c5e9efc26df66772105f94eb54e12e5327ebb544a4669abb96d2a6cec8d8d45354", 0x59, 0x4}, {&(0x7f0000000300)="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", 0x1000, 0x7f}, {&(0x7f0000000180)="15fc4e5b1c3e6103b952639bbcbc556c31373e2ae20738484d8ed97c58fb45bc63e72e2479f2ede7cd8ce67bcb80f01b8e4d500260274c077844353721d7a886cd66a5724efb25ccf386d2c613ecdb96c92f18fe1f52c67e8ff585be7fbfbdefbea27f32af4ea0d5ad36f82c361cc7e9b7adf471ae090188044685e09e1cd3aa5cd997d58e", 0x85, 0x1ff}, {&(0x7f0000001300)="611b75a0312889db95fae1126446745015abbca4319eca11f1a4af1f3242809cfa5d1f28be0f7736014e767ebf66c869120a883a193f3d2dc8410c8b54c7b4fdf79d353218381de1274ca22dfce88ec721b497f8043975ab53b7e573c5ab2535935e0fb42b7d70b49f03701c98094724ea68738b611b3edbe6074d4cccb69f553a5ca560f541c5644089cd223cb758e35b000ecf95ea055c3e22f9f6744456384fcd08b019aeb0e51608289a81a39420ca6bb52c59601491c1667a1f2e0904eec19d615564983790eb894448bfbe4afed878643c494d6b9bb3ec9323433431157885717da87a0b82c578e85723900ef57d8a488314f6", 0xf6, 0x3a}, {&(0x7f0000000240)="fd78c39a5e8e58a3dd53fa271f97f5628d0e5bd438f02fbb3ab2a906ff18083f3c3b77fe505e1511ee487dde825ba6df331379c12f", 0x35, 0xc94c}, {&(0x7f0000001400)="f6b5dbce6041925183bbb37c63b459b92150a2d2090de0bcde94a94e76af21839d2af00f00a761b5fe6fe41123ad216af6dc1b4c459c9cee3d29a63b13f5353d041155b09e612c11aecded1110241a1261cc9c4327cdff569fb3e20e3bbc7b3f1e40b42a81cd444a31ffd817b44f8f06fe1e59a7dd68cfdf3f903bc78bc876112eaf5c1c72ec071cbc8655946c712a75d773d79aafb081d69893a5dca8e37b7ba06b0ab0a3672c55a3e4007a6d9f9c3077d1db6da0a2216df8699305cfd2ee10ff100bd79985741ea3b56bbef863ee9ddd84462a40d0dc53c9a94780fae6abe23e24d78bec36108181b842", 0xeb, 0x6}], 0x40, &(0x7f00000015c0)={[{@map_acorn}, {@sbsector={'sbsector', 0x3d, 0x200}}, {@overriderock}, {@session={'session', 0x3d, 0x3c}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@euid_gt={'euid>', 0xffffffffffffffff}}]}) openat(r1, &(0x7f0000000280)='./file0\x00', 0x101000, 0x0) 18:07:23 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:07:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:07:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x23, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) [ 2215.124239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2215.125362] tmpfs: Bad value for 'mpol' 18:07:23 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c007a0030003d01000000000000000000000000080001"], 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2215.181535] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2215.182869] sr 1:0:0:0: [sr0] tag#0 CDB: opcode=0x9b [ 2215.183581] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9b ac cc 23 f1 e8 dd 76 2d d0 1d ce 09 51 32 13 [ 2215.184795] sr 1:0:0:0: [sr0] tag#0 CDB[10]: bb 18:07:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2215.200668] tmpfs: Bad value for 'mpol' [ 2215.210494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. VM DIAGNOSIS: 18:07:23 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880088c7c60 RCX=ffffffff81784334 RDX=ffff888009273480 RSI=ffffffff8178425a RDI=0000000000000005 RBP=0000000000000000 RSP=ffff888016e5fd48 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=ffff8880088c7c00 R13=0000000000000000 R14=0000000000000400 R15=dffffc0000000000 RIP=ffffffff81408ae0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc58a8558c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005646347775b0 CR3=000000000ee9c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00007fc58add4c0000007f007665642f XMM04=00000000000000000000000000000000 XMM05=00005646347863900000564634786370 XMM06=00005646347888500000000200000003 XMM07=00000000000000000000000000000000 XMM08=6e753c007325732575253a5d73255b00 XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822cadfc RDI=ffffffff879e8240 RBP=ffffffff879e8200 RSP=ffff88804be47298 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d094 R14=fffffbfff0f3d04a R15=dffffc0000000000 RIP=ffffffff822cae50 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6084d32700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2200000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd6ea4218e0 CR3=000000001de04000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000