00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000687f48a8cd90fe2f22e6ef8806452da2536da7c154d58c5abb073313f435777c57ddbcd1f19542f543f387423c7fc909835494807885a4a836e2e0833338408ddc098d29cf804b23e821360371cbc7a45131c6b278e77b9f0a10af7a5"]) 18:36:02 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:02 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:36:02 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:36:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) close_range(0xffffffffffffffff, r0, 0x2) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 697.513616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:02 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:36:02 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:02 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x19}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:36:02 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 697.754285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.070824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:14 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x1a}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:36:14 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:36:14 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:14 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:14 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:36:14 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 709.633211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:14 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:36:14 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 709.946740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:15 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:15 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x1b}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:36:15 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000004c0), 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) lstat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001e00), 0x80601, 0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="710000007d020000005b0008005502000001d3a50000040000000000000000000010090000000100000001000000000000000600746d7066730012002e2f6367726f75702e6370752f73797a30000b00687567653d616c7761797305002928c82d2a01002ba04e9161f9e80e375e2df1d9fe189118da0c994b73dd4ddba97331aa84111cdd7dc3922fd706a643708010ec931c7bfb497fc7b54d5bcb9fe1bc29f86efc7c84703d45cb48edf1161e7100d6e174a1b876cf080b6a522d81f569cae515cd73ecf34785822ae44bf532b5d9dc418503c47f796543a083b345861943cb0e1ca19319bf673570e492d8f449a4cb7e91ef4667dab6ba1d7c1c69edc6b60c43e2ecf8c0dbb09cf9feda2b67230ea2e60a178af570b438855f271819933b22bd02d425676c71f046e0c5317daf2fb6200d4b535238", @ANYRES32=0xee01, @ANYRES32=r4, @ANYRES32=0x0], 0x71) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e40)={0x0}, &(0x7f0000001e80)=0xc) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r6, 0x0) stat(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32=r8, @ANYRES32=0x0], 0x71) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001f80)=0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32=r10, @ANYRES32=0x0], 0x71) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001cc0)=[{&(0x7f0000000180)={0x238, 0x37, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@generic="a64b1ddf278fe5948238b581b6bdd2cd54e445570934890f2956eaaa5c018ffcc1b34ad3a1d8b8dfc37c81375e7e1883f82b45949debe7a2c34faef78ed3bc491512982ee84b47152e144fd73c226a059d14f1507555ca97d71d484d80a89c95538c6ab193b06d19865c60429f56c60d8e6fa46ac0ed1db5d86f2d4567466715348ed1457c853d38e31432d7529a4574115287e6591b0ce5c406dadba155c64b71f5ee487dddde0ec25391fd12205e7c2a1a4b92efca5ef888151b", @generic="e06c61675dc98f236ee0ced0d0f71545812388f34f6c057c371ffe117ec6aef1efe4a34006a35fa0386f6d171d90cdd37e18c3bc86bdc473b3a4418bf572e729d23654bcf262b3c67573bbe4ee3a27ad4dbcbd1017ec1ed73d23c6b007e152763124cf4638f11d2dc43b863d77436a02d8d2ae1c5fd76616fa6e3e61eb0e2c0d06468be8d6daac8d2385019b5205b27d50e443f6172e61476c7fca51c29b8f173c20f4fe6485f0868d1bd7c5854806be0a30d99348bf71a30f63b5fb2c9d539b5a67c649fdae5f344274e26aab25db7981fd98161f58e0e140204977f9de7dda5b8c464873ad5bb1bbb50a4a8af1", @generic="0aad9a2e54332836313bd16edfe75f16fb849cd68771238e6ceeb2c0e75257060316186c291727fc8b6d7ad4c707243f27d41d791516f1e877c353d15fb06f63b49014fffdea6b7bf14185979d731680261b8acd19f376048184b9caa9dd", @typed={0x8, 0x47, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}, @generic="e67f0cc2e74d029abbc8fe77f0fc44d5ee1c0a0e0976e2"]}, 0x238}, {&(0x7f00000003c0)={0x40, 0x36, 0x4, 0x70bd29, 0x25dfdbfe, "", [@generic="61d53ebd46dcefb780d2785961e4900439556db97a96b771c16fe24996bacce32367e9982982d3e036338a1c6b1e5292"]}, 0x40}, {&(0x7f0000002100)={0x414, 0x30, 0x4, 0x70bd2d, 0x25dfdbfb, "", [@generic="02264892d252980a9a7d96b197184bc205a041bc8e9b130e35ad6ca46b290796758ed866db1bf7272db96c3b92e85de9ae5460e0a0a05226614d99507a5b03d33022d7ad7e9d2e73b476bad5a97f5d7ddac9793e45d383aabdd192ab40671dbde3516f8d96a0ea1f98bee6b9ec10345aed6b843a568df74aa2271c8365faeb65543d37e4918b88953ef27e5e09051a4f9d7d455c33289fd64a60942ee997e97c7f3f745db11a24c69bc4805f3aaa203761684e1ca5e2449d629b4bf707484ef316fb6aa3a0bf6125ee8a86b3d63d2b739a7eb51cf4e905dae4226868e843faceff9397c134cb4560", @typed={0x8, 0x64, 0x0, 0x0, @uid=0xee00}, @generic='\x00\x00\x00\x00\x00\x00', @nested={0x30b, 0x81, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @pid}, @generic="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", @generic="143745688d2941b4b94cf27a5ec827ece745d1764b9cf13e20", @generic="44d38766eab4212d0fe7f807da105cfcf70ab8a0f15a28b1a69f830fb343ab0ca19f07c6746e4c7f6f2cc291d313e8369665607abf9267f71b39ceb1ce6a3899cb845cec6b0afa8ab85989d84f791bff4bfa7a90a7243f3fc1c997d4698691609415e022058f210434d80fb9e636", @typed={0x8, 0x3d, 0x0, 0x0, @fd=r0}, @generic="b5ba42bda3049c5428f2af362a642a70965f688fd49257f98296eae340ba335c39fc7b80e972af2ec7bb37618b23389e7bb1ffec5a189800b727f700e77156181e445a46433defd70d103e9b6b89b2be9638f4ae9815300e2f1d41a9a8d722ce2895d9d66158eef2a82ad69308fbadc806f2f553366b1a83190cc54c9d0aaa68e86de9ffa275", @generic="04780740a6c30930827259c838525b0891503f44b2e95f149e4e1496b7d169badebb8ad305a01e5817df9391aedc8298231cf8d8d52e185dc43cf1d100e2b77a702e9c9582b2ec462d3264990dde91c90a65562733e15756cbd2a9ea1a574ad62c694e9af14aa7968f1adde49832ced90f4512edb0", @generic="9e697aa4c4f2eddce7627d10391fde11376763de4424e99aa19ee8db0590a92b4f1ae5c4c394fc9c99673455f1dcffd580d2945c36dfb751bb87cdb973103143c22582b65565445a9a783bfa047e3dc4cb6064fb819106d59455d7f64c528fdaa802291bd7fd5e9ab0654dc6a6607e091429e067f642e4b0b8"]}]}, 0x414}, {&(0x7f00000049c0)={0x618, 0x1a, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x21a, 0x5a, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @fd=r0}, @generic="17cae4a2f240ad6861651ded2cff5e41926f8d3f32cd0c0d4d7376040547b2e2c73ae43583719193adc870e6e7e8e32deb4455d2c8e2a840ca0370aca3bdc64c32c23a6b6344c63696bae465c25caa41a6d17fb7e1b57b1732d60c85cd7eaa3490122a8c0bc41880ba9ad930e6cd895024c2e818767838404ead641db9d99979367eb5f5e4da54e62f43e8a0e1ca97930751b74c0832c84ca3b241242feb339866d69eafbe774f8ed085ddce3457b35a657583e47f76c717d574942d62105799029b5cc028ad3643ff5f62895f0844991325e211b4e073f261cc759242e10c02ee1c", @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@mcast2}, @generic="dbdafb2a02dc1487f66643b3a623a226b52c7feee947f5b6557c1858d09f1ea3b75d17c5e6a44938c00ef4b9223c9be7a11f079dec5ad48e7cc8047da91daf724bdc7885721d1127542c2e787b5edce2467a83e76ad0ed963d0af50d841ca276841fbdbeb5ac80d3bc459dc6eed602cf2fdbcf397a0af7587700ee34dd8643898b6b782daa65a117b5791b2074aa21bb0a1e63ace92b06", @typed={0x4, 0x6d}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@multicast2}, @generic="602aedc9e968670dd07e57b296bdde06635507ecc04fae213e13fb822680907c4ae04c8051bd6fef1294c45fa58052026324b3473d196fec2720eefc4d7a658b4bd1ef5b15c899aeddc274cf9b36f0c15a1150860d91e79a991cce455dcce188a5"]}, @nested={0x4, 0x39}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x17}, @nested={0x26c, 0x21, 0x0, 0x1, [@typed={0x4, 0xd}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x7}, @generic="b22fc8f1c04ae2a98c01668703042717bb5ba5e690ffc32c9499ddd1397664248b3a0ddbc598fd3872b78cde1864ecdbca783699da5a322f12527e2b6ba78991db0238baf6391f12cee8bd59d4db85a48814e1811e67dd4576cf567cf57d3744d60813f7bd491d5bd27f077ef2faa8a0efe65f927f9f93316e0fe02c7c", @typed={0x8, 0x1, 0x0, 0x0, @uid}, @generic="9ed7691bdd7855ba999b2c1d413e715aeda76a95a1bf8ad57fc66bbf87fec995593b515ac73dfc9f1aab2f5a88042f5163734d0b345b47a23384b389edb0ce544269ad7aad0a4637d467460cb37bab44ba30751148301a6b153b3685040aa9141273b37a5cbb1e3aa8923af319cc78023326fd0abb869e5fbaf1dd9186d5816c7803ea355d8af2d9c73b455c524c013f605311dd0ded75bd378d02b4f74bc22c47dfa6aff96f206c1012b7806f5697dd378fb6aad8e93ffc1835d8bae4dfcd7db2203b10f030a25b5e5346cc71bcd1234693abb511b658f2ba318143249a4e7ac9238ffbb71cebe5bb7c8b0c8d90fbe87254f9da5490530b", @typed={0x8, 0x22, 0x0, 0x0, @u32=0xffffffad}, @generic="a87e8d717d2b71a15424927f0f8f5bdb75f05eb506206fd48ce66c69a3687d71777aa6e9dc98271e938c49a16b71f3270de662ae79c1c9b72cfdad4d555c6423d26d50f87fbfb81f4a8063455c4bf9b0bbdcdb17726db10e581844f468ad75d7d63305e8912cd87407c7357edd26b4c001849000a4efcc90970d6ac29d6e30889c9c68bb5970329b0bacabaf1cd136ba696419e888f991c3e1edfa09e144815f3eb2844b34b8dae5dd3bf12c5cf7fb6e32eb8724140c9e735b918c47f346e16077dfef1c5b1c35967057846c823fd109049ccd210029f2"]}, @nested={0x79, 0x7f, 0x0, 0x1, [@generic="4a4bae7e820550b38de4ecd0a676cd9f2483eaf773fb779095e563ddf7c328b1ec6b0168f381f23e39a2c7dcef0ac8e44da9566c38488df42a6406c771d4317977f5a1dc6d278a6f5b6e1ed65aab0cd1d7a3c2e966631107756eaa68a732d139d500ae6cd458104a315403fb3b892d70d57a51ba77"]}, @generic="5726717cd7fd4230d4c4d7ccf23242ce12288ecd268dcbf2203721bd830c7717344f8fc55cec92ff154a9658726cc373f24a1715c59fa7060352b85e2bc716f1ebde756218a264a6fe1872ff138b5994d3f12ce00752f38377172e0bf8d4fa2e9430f642abb36c59653923131d75b2596462154da74ef5fcd2b5b4d7b9847f325c157ada0e76e72ae78f3971783bfc698c8a5cc2dd96b75cc1350375a74a6b1b7b86504eb6de219c1fcf2de0575d1397841907b3585448ca54aec0f2af0f5de95a87a41b7e3d3f6487ee7b6c2743a42e29576c8b4e645db01e6779b41a6b43e173d035ff9d25e2"]}, 0x618}, {&(0x7f0000002600)={0x13b8, 0x2c, 0x20, 0x70bd29, 0x25dfdbfb, "", [@generic="ad34dfa91bd8b6db779c46d1cf17402d7a3570a4ba48b9126b654dac5e7e6ad98d2e763384fe96fd088726a3befcc398ecb4d79095e1424296d57ebef187669715a92578d2cdc6f6e8cfcab1bdbe430cdaac88622fc8d9dabd0cdfc7fa4aac950b31ad95fbb325319b3277440366cffbc0824efe4ff6cc1d6ebdd9e901a97d65d1a9ef3ee89776fd02d3a039c917e2981bb6f99b3a1b10d6917ab87b9497b262606ca2b89d0603ab655b55527c2dab17212638be8b77743562d08eeab822d91b43328118618627a8a5457197cbe9011af43d4af089dbf2c6e1d69913db3324b82d42fe571487ea9dd523200fda7604f6354dcad08d75", @generic="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", @nested={0x1188, 0x13, 0x0, 0x1, [@generic="606254a67c14a05214f526d0ff03d70ced5c706c91a7cfce9367bfd1822b022e7cc60fc8f93836b94c430615b6f2e5081984034b4bf2620a250c19146a99614db31bbebb7810260798d3634552aaa43126075b137e71c994e31e45c75fd33ffa8c6ce487d5b6e013b6e211c6af114570b1aa9f2e6bc20c4ef7364f520bf998904b2ec45f484b72b32b82721de6e8dc44bddba3", @typed={0x7, 0x31, 0x0, 0x0, @str='\x80\x80\x00'}, @typed={0x8, 0x78, 0x0, 0x0, @pid}, @typed={0x8, 0x16, 0x0, 0x0, @uid=0xee00}, @generic="c2e28bed3389dabbdbdb789c8bee717e8c7d97aeef0652d58e939af2085be999cd93acc85d8c1f3c44b81a11af1e3f874485c295d1ee09e396871b961664411aa52f6058c48ba70d9f8cd73b439fe4391b3ba1187fc8ae9d97e5ce5345cecb6bd37d181e1c9c585c58bd763c9af65ce31875d96789b990abbafa3befb0c009e70d9ac6e299cd521adbe4ba74347fa7a2009c19dab633539dc5a138adc42d5be2fe34c8e4263dd45b4048aa26035834478f73e70d33a3c9f048ff8a1177445b2773b777848f33de58348c98a72ea479279ef0c6f2ca", @typed={0x1004, 0x8, 0x0, 0x0, @binary="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"}]}, @typed={0xc, 0x6e, 0x0, 0x0, @u64}, @generic="45783293ffb8e24991121ec3286a443f9d7b1be1aa8171e5a5a948fd4a1c"]}, 0x13b8}], 0x5, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee00, r10}}}], 0xd8, 0x20000080}, 0x800) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x4, 0x2, 0xf2, 0x0, 0xffffffffffffff4b, 0x8000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x800, 0x7, 0x3c, 0x8, 0x947c, 0x5ee7, 0x636c, 0x0, 0x10001, 0x0, 0x1000}, 0xffffffffffffffff, 0xe, r0, 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:36:15 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:15 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:15 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:36:15 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:36:15 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000180)) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000005700000008000300", @ANYRES32=r5, @ANYBLOB="2289cc6ba9b1fe3c4c07a81194e7ccd362dfb1a1fc3755e2de703e90127f86caad06a07e45dd27ead870b74e0c06a559b426a3526bb40a29f587774bf75b5b07292ecc020115fd4b331b9d41d12a6087bf714b2dbf8552d1836d3bfee8efc0"], 0x1c}}, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000480)) r8 = getpid() perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xf8, 0x20, 0x7, 0x8, 0x0, 0x7, 0x800, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5e480b0e, 0x1, @perf_config_ext={0x7fff, 0x3}, 0x4022, 0xa7, 0x6, 0x1, 0x5, 0x90d, 0x3, 0x0, 0x2, 0x0, 0x7fff}, r8, 0x5, r0, 0x0) [ 710.173888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:15 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:15 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:36:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) fork() 18:36:15 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:15 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:36:15 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 710.488700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:15 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:25 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:36:25 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x1c}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:36:25 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:36:25 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:25 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x40010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 18:36:25 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r2, r2, 0x0, 0xfdef) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xb9, 0x8, 0x3f, 0x3f, 0x0, 0x0, 0xc0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x40, 0x20, 0x56ae, 0x0, 0x5, 0x7fffffff, 0x9, 0x0, 0xffff, 0x0, 0x9}, r0, 0xc, r1, 0x8) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/190, 0xbe, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) flistxattr(0xffffffffffffffff, &(0x7f00000005c0)=""/151, 0x97) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000005700000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xc8, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x29301e69}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000054}, 0x4004080) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r7, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x882}, 0x40040) [ 720.665689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:25 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r4, r5, 0x0, 0xa0103) 18:36:25 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd(r0, &(0x7f0000000100)={[0xd99]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)='./file0\x00', 0x80, 0x1000}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1002401, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@privport}, {@debug={'debug', 0x3d, 0x9}}, {@afid={'afid', 0x3d, 0x8}}, {@cachetag={'cachetag', 0x3d, '\xda,[%'}}, {@msize={'msize', 0x3d, 0x5}}, {@nodevmap}, {@loose}, {@mmap}, {@noextend}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/hpet\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/hpet\x00'}}, {@pcr={'pcr', 0x3d, 0x3}}, {@context={'context', 0x3d, 'root'}}, {@euid_gt={'euid>', r5}}, {@seclabel}, {@measure}]}}) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 720.987509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:26 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) 18:36:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400) fcntl$setstatus(r1, 0x4, 0x44000) open_by_handle_at(r1, &(0x7f0000000100)=@reiserfs_5={0x14, 0x5, {0xbf1, 0x2, 0x800, 0xfff, 0x3ff}}, 0x400800) sendfile(r1, r2, 0x0, 0xfdef) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 18:36:36 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x716380, 0x0) 18:36:36 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r4, r5, 0x0, 0xa0103) 18:36:36 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x1d}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:36:36 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:36 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:36 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) 18:36:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 731.862343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000002fc0)=[{&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000640)=""/18, 0x12}], 0x3, &(0x7f00000029c0)=[{&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000440)=""/185, 0x5a}, {&(0x7f0000000040)=""/60, 0x38}, {&(0x7f0000000540)=""/230, 0xe6}], 0x4, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x8, 0xfc, 0xf4, 0x0, 0x2, 0x20000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x698a, 0x4, @perf_config_ext={0x9, 0xfffffffb}, 0x40000, 0x6, 0x5748412d, 0x5, 0x4, 0x3ff, 0x2, 0x0, 0xcc3, 0x0, 0x5}, r0, 0xffffffffffffffff, r1, 0xa) [ 732.169897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:48 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) 18:36:48 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:36:48 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x1e}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:36:48 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 18:36:48 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r4, r5, 0x0, 0xa0103) 18:36:48 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0x8, 0x0, 0xda, 0x0, 0x800, 0x800, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x20}, 0x2, 0x3, 0x5, 0x3, 0x6, 0x5, 0x1, 0x0, 0x7, 0x0, 0x1}, r1, 0x7, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) 18:36:48 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 743.125596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000440), 0x0, 0x4) syz_io_uring_complete(r3) sendfile(r0, r1, 0x0, 0xfdef) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x5c, 0xfc, 0x1, 0x3, 0x0, 0x100, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, @perf_config_ext={0x6000000000000, 0xfff}, 0x402, 0x2, 0x3, 0x2, 0xfffffffffffffffa, 0x1, 0x7ff, 0x0, 0x1, 0x0, 0xffffffffffff0000}, 0xffffffffffffffff, 0xf, r0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) write$binfmt_script(r4, &(0x7f0000000b00)={'#! ', './file0', [{0x20, '-'}, {0x20, '['}], 0xa, "f6f2ff66866b03030c08cdba149a0fa1dc8f9d190834c1d1595f98ab363bea06b82b35a7e039ec1c73ed297a8a1eb0d8756c1b276aa44fdbd7bf8b60711cf9dacf8561f80076bb87aee9ac53a589bf9156432cddc1a90ae9a1dd65c3231c6d3d84bf5c2e7e43af75b5a143f121f8908f9a66790f1b9a292c3d3740934482115279dff619ea0d4984f229fc386a11d198899ae67c8cf19092f67cfbd5a794e6f20d70de0a547ad9f5774bcfa6404c7a6726133e521d5ff20aa6f7cfc1d22979cca432ab30746e10a69531db07e4a8e7e6a2c5ed47d3971a9d81bf1ccb58b4d899de37e6a5efffe32fb4364719832522e7397f72aec351c98ef8bbf4e7fda172f3e5281226bb7a281160512d9f28f68d07f667f15b1dd6d153272b00be9a6e5e72071a5743ac41c5b2eaea12b9c628ab8d84224205f65d7242cde18bee385fe432dd33b128355674f147153b952999c565ad2deb51f41a7a7f356268519db5caba698dc3aeb1eaf0cb462dce1e6af20eaecaf1335addf0018f14321b7c89f38fb47223ff0d640c888cf4ee544ab9b0a54daecbefc82dfa97d6d1274cfb09f1b6b4bff673e8ba2e04800960ac2925138f02a0fbb2c2ca24a9a9197444363312901987ae533cfd93e90e355d1506da1cb4a61a359a9aa47807670b2b8f5f8c3b48f1372632295137a2ed6c69200481d28b314a6df98a5a2ba23f8a8e37b65ad748e1827226c6af93df83f212dbfb5fc658b39ef998488a612fe259cb6b2e940ad4a243cb9c577c8fed04dba0a3b15d9ccd57f0ad54239057e102b8f278b937ac8da4dbfbdc15c2d1c8b00fdb74f79fb0bdd15f9695a9283d5f1688399bf6f6ef70bb58ac9471bdf71d8687021d7decac57a64a07a6cce372bb492bded9045a55f8c6d900981494c90c747d3eaca69a3acb04208d4b6ab2b4e7604c804fc667b38a75d20fc3ef3ee88246c07e7bf284c9830cf7ecd43492c418a55d6e23cf45925114c2fc293106799a5f4b5c65652fc3a12b7f00bd6fd626c0274576f05988eb6e2e86104e85a8edfdfa900864f9715dd4d18c1ea2be1ae1c99869683fc79868c598a228784e043420198a5a347703d43e6ef5c0c44425a19e867ac2d4ae25d992fce54a290cb69a07c51435d24fd67bf1776730136fef962d6fc3f76cfc663635ac8fd653432374869639000bfcde5a94c6234eaaa0668b5fc16c04c3729812a4a2f971bd5124504ec067b6d8c4ed84f766234a08b1488f4a44b288c0b7eb4a1f5fc0a24a530da825a6333d979f2d06e37ce81c058e71070cda55092ce5057f6ca937d2b681c126a62f758715785f2c1937a3be61b709b868b7a828cf18a74e84ec9abb9a851e82905fd22b8d8ec154411c05f55706210809af9166d9ef58be78134f7f0e227c5fb3b5159ac0aa092e381df975d87c7f40c3cf21dd046eea271194c8ff075ced1f62d3f8159164db286a669354eb4272aedd3a8ece90678993edc51d49fcc2d70fb0d4e38fc8aecad980ac3280e4cd85be0113f0a3945e8b1f6d299d9a5a64a691839ad9e4fcedcef16880198860ad6fc6b4112470b665d3273b163849145934460e52d448002338f0c5429b92ba47b25333a88bd2e46dcfc1263b31bfa28441369326e556391e53b9a20f0c14c6dbaaefabdd98acf6cf4cbaaabe78c532c8603ab81cb5ca00cc95c250cc40cd7bdebf203c2e69117e0c67cfe871e437301faf273fefbac5a5bcc5fef5cff440877df8dacbbb3dab30e7e3b91a1b1c9e0aecd02e7c86ed3e0c732924c298a19beac0d763bfff356560285d94a30b2cbd6416640286844d9dcf88376e3409809c34992105c4bf411ce4d6f72c3d2c63bd85f2bc0d0d2997f434c02b2bbf6dc6dbb8d3e99837f54ad4e95199390707bc80058dba82b8921c559d06bc60f0f948405875467029ed0218ac9455948a0aa991d665e28fdf3e6b59e7b939119531d6fd8d3afbd2cd8914a8f625fdcbedab8cc49f70e1ba1947dd5e22bbe8c0388e6c442f911b6ea6571e5152a054896531e55f58e94f3185e4dda4a8d529e081ce0c22659953c0fc2421793d98de39654a3efd1ea02f0de0a3e441d66c905f360cbcece978aefa6bf2777b7d9107e45db5713e9395251d80fff8d54b5deec6360337212d7bf3dd08d28f1a2412f396cefa6a571cabe77d9335874bddc05477cc47ca8e756ecfccb92eac1cb577d7bc5bcec51a22531cb16497eaceaaa62b38484222bbc3a7fac5bc9f8f70e38d7ea33e0eedd5fd35329c4d4d900b7ef37fd256017c95fc85cd7e51da7020c3872ecef4b9f94f9d4594a8432202937d87bdc0fa1d5f94d44913c0ca6d0dfcc1714d27d7b37ad3c0654aaba6b019dd56c0ff7d771f2b7191242fe3ce09eb72bdadda56ead628c6a9d6229f09803b1a3f2191bc097fba460dc7b00443aa54930a7bfc64f6b918217c99df6212d16d219d7689a37c00ddf844d1f362b66c75c8afa52db79b67cc5e712aaf41205048b19ad14ba9f46aca381a3e84d0fa19abeea497189885aec86ae98db6abf9be9d90e6b9d544620fc8e636dbcb24abfc460657458f3de9b07efaad25950fbc74f452d97b76cd8b4f0f4d981a2ee86da2421ab68e5f455364e02ca894d5774caade9ce40cb1413ce0a9d796d498f29c83b2f133dc8723dd83bfe1ac618753029f7740a9fbf662d874552ee9be4b5868853ee76a74b3faec5edbe587905621e9616241bcec9c0c959d8e33a6a9fe81a1f185032ef0fa078434a031fe4ca7e876ea5f8878790ecb503216813cf0464c8c0b98e7af95b61bc7b21190acef578f42af043c4d448d9296cdb7a55c786cacec277963469a41774f09c57c68268c0caa93ca98849766664507acfbef8c9955983ea29b51ee5ab1dbdac923226a700ab4d7be54c4cd77996792d12e033d4db3d01a37da29c5f33a8fa00ce68666e9acc88f3e1d72e8a4c549a59d67735b1f000134f072e4e060d483fd8ea3e2bd38afe765788e78a45595488b860da89b71dd4adcc402aed7a2803ca738c6837d522c2724ce8fb18853546aa711344f7c2e4182afbc2db781b751319d8f78810570b0ef5254e88d95adfc3d0f199f8c825612c179d145ce3b90db1b82728c68d8454cce31fd03f6aec2510901ca9db6cccbf9c2e60a2210a64802844982b3c6d0998a6e8e9f166e6d55b1392647e5dabfb022fd50abc5ae9a6b654511a0770ba623135d0504d0244618b8967b7a57a1980a5a16950587455eee503d6ece56d2112ba2d5d459e2bde3ab63309520d7ebd26eb3b5096bc8cfc0326e537fb44ec7e2a060843d3cd550b269703b6c9851b87ac99f183d58edc2a09f3f2d15030f92239d40514ae58a432f89543e4e35a8e2678e32c993541d25903ddb4411f56f9b5f476b9ce76cabbc831c058f048e6ea24fa1fd296e2a26d441c53c04e9a2bf5ae58beab5760295a82d4e43a041ea2893afeddd53326d0b77eddb00611e3cc13362f9a2bc9f15b552807ccdbbc55a086101cae2cf802230df7ed1a0d4c8e276ff3d1fcd983a26b31d06092177da776b7212290110ad750a8b2267420f140bce7630e19983609268b24ba70102d34446200927c504e20833c01e4d9ded37ac79a348808045761d7e01532a3e8354ef0a47195db8ae6ebb087874fe72164226cdc74361b162b945b80c5d52c93b0a2510c6338f8c87fda182709129b87900e9017844877332e3d5dc852907e547da11f29b2b78367ff4e536789ee0652e087157125271430a87e718ea9c2aa46d153ff8ade9121885d3c19570b0bdaba59cea14d58bfb698d678b9c0f79070fe1a251161b79e58c1ea6e9e6750801d1402fe5cce5cb5fd543cbc0e5b0cc83248be72ce45da440437e81a2c38df500b875f38bdd86b32df2069e0fd4b933d23c47e6fd32f22d7ea17d5467de35d5573bbe0753f970e3c31954649602a0381fa55229b39850cd43a31254a560a34226c384755fad1f6656f5f602e5ffe2826f569eb7d462456e4243674f982d254a56af880508b6dae1a3cc464e842a75cd2538985d28008c77655f010e7ef45378c297dadc8230b6ea47ec918ccdc5c8884ac033f3578a99829f9e09386a1b3b737a44531531e304c7cd4d0ad8d7a31a240211fa4fdf5d298106264c7550b7d91d0b7d24226307db4d499656c2a91248d920f8183eeea38f9e2a14a7e5554e3dafb93524e4b1e339b9ba37d604302c16ff5d401f76d7c73374fe286998e8e675eda7c7358157c744a510dc2beb2c5f46a9fa90bc03622d2c28b0566030c5e4167e6fd726eaa657177d18341880e9100b8318f87da92fe6a95ec1164bc16f0df07b3980c38eebe7fa4a7000422809f7e12010e288de7ec1aeea4825751933c57eb422441f812ed39f643cda7e8e03b6332f6bcd89ff707ac904e2b47abc58104ddd10354da42c9f316e11e8bf9376303ffa79c56b1e22a33adeaf4ccf9ac08ee4162637f8df6dfbd31a03e41426b76b6f65b2fd98431f78fc62807cbbc6e14f1718961854211ca7a08b3269e0922e5c152be6468849332a3a6bd9d194f74419a3729199f9013f66e816125df77dc2da774494000f36d74d0fb2ef392cbc3ba9caf7648b4891cdea1aa5b709af50b0d382a09215dd757a04b156be96b0ec809d0f04559f2ca71838b928923ebeeccdd45e1d8e517a7701c1d1fd0a37da01665f180d545827627615b2083305e20ca61fd973a0c567ef72498c3a8eef82e5eb97ede2d985d614bc0474dcdc4fc485eeecf951f06a2b1cb420011e06ba2fe66c388b8b6a29d5dcf9e15e8c1d361810bff9486c82625e013c7c6c7511243d65f41a7366bdfd3bcbcc420a90d3a64eb59aa211546cc4efcd42b26a155d6b34ac54dcb5c6143a03a0f9fa59a02ec6ca40f0571d3d512e767c22a91e05eb33775e8681d5d8c3c0220b79ea1482586b5e62bc0da1ee32c58d508bd9e988b41b966299fd4ef289e8164119db15ddfffa12036055cdcc095fdb28eef76b20cc037fff088af18e1db637417c5652fbed145859ffc8762ffd6dde1a4ba7d6e43d3a24133a0a841752b3362c5b3b7a8c35e03b0b2e7d5f754d74ceff29aa89b1309c9dcbf21c0d803ad546bfb7b7ee9c17b9daae443240e77295893942e92d25333d7f8969046b69291655d174cb9e19521f3a19f678bca383e8d304c3a23f20a269f7881eaf7482ec46f14ae836c6dc76544c475dd53a834946dcb98c7b2c53b649bf817b195734988b461da1e217a7f0dbf93862880b21939e3a731bc2fe3c54a98323503d352d729fd2a21b531830eeaac7ee8fc57c4f9d2fdf45aeb4c8c3ce27061ef1a023c7252ba5fa4b5ef3ed6cc9424dcd096301f0212c35ba153d9559bbc0f453776e63e55d80f8cf8e829e89ac95ad5c1db5d7d4a5ff6a6bb7c12ccc820c9c72a23a08c9f66f1d8133bee94135b8e6eeb24e191862e90e796aed6ac6619d76b5f874c30196059ce9434f40bae0ed4e9f75bca095174ac1c4690dad32c7a65b4b533795879f3da171fb12bf64f2294d5ec722f9baa38e579346c8a8502d20a1780f8611fcaa4a491975aa732585759ea8f722144754366393757154ccf83938de4ab713091f5b99be015709a27acfae6d746a489ec3a8fa3ea2001e611fc16671ee13764a697a33557a4f1b736dba421c99aab790d1a00e1e88c929542b10bb08022c3a4dd8faab88b8449c691cdca0c102f4908c14f8e7adb6745058a175962983cf783bf3c2253013b66c5c24fbb14b70b5c0925bd9a3a1ee946dd1010b1c2f32f57998f7b079"}, 0x100f) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:36:48 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r4, r5, 0x0, 0xa0103) 18:36:48 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 18:36:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:36:48 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) [ 743.433558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:48 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:48 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:48 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x21}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 743.562301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.870758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:57 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) 18:36:57 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 18:36:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:36:57 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:57 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r4, r5, 0x0, 0xa0103) 18:36:57 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:57 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x22}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:36:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 752.585802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:36:57 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r2, 0x0, 0x6) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x8000, 0x0, 0x80000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r0, 0x25347d8b89c332a) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:36:57 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) [ 752.894029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:58 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 18:36:58 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x23}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:36:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:36:58 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 753.033593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:36:58 executing program 7: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:36:58 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:36:58 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) [ 753.349700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:13 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x24}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:37:13 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0x0) 18:37:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x4, 0x2, 0x4, 0x0, 0x0, 0x3, 0x18000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb7b, 0x0, @perf_config_ext={0xffffffffffff3ba8, 0x10000}, 0x80, 0xeae3, 0x7, 0x6, 0x400, 0xe0000000, 0x2df, 0x0, 0xffff, 0x0, 0x242}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:37:13 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:37:13 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:13 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 18:37:13 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 768.720681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:14 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0x0) 18:37:14 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r4, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000808}, 0xc040) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a80)={'wpan0\x00'}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r12, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000128bd7000fedbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="0a0001007770616e300000000a0001007770616e31000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10000005}, 0x40050) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 769.032069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:14 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x25}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:37:14 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:14 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 769.315682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.629551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x2ce, 0x1000, 0x1000, 0x1, 0x1, 0x101, 0x2, 0x9, 0x14, 0x3f, 0x3, 0x7, 0x100000001, 0xffff}}) 18:37:24 executing program 6: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0x0) 18:37:24 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x26}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:37:24 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:24 executing program 7: r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:37:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:24 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:24 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) [ 779.298740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.389402] Zero length message leads to an empty skb 18:37:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000000000, 0x0, 0x9, 0x0, 0x200, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:37:24 executing program 7: r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:37:24 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:24 executing program 4: ptrace$setopts(0x4200, 0xffffffffffffffff, 0x8, 0x100000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) close(r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'}) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x2, 0x79, &(0x7f0000000100)}) 18:37:24 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) 18:37:24 executing program 7: r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 779.607885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:24 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:37:24 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x56}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:37:24 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 779.722731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) close(r0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 780.033247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:37 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x60}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:37:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:37 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x6, 0x1, 0xc5, 0xc0, 0x0, 0x100000000, 0x40000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x30, 0x8, 0x7c1, 0x2, 0xdf, 0x6, 0x8, 0x0, 0x6, 0x0, 0xb5}, 0x0, 0x7, r0, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r7 = dup(r2) sendfile(0xffffffffffffffff, r7, &(0x7f00000007c0)=0x80000000000000, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000280)=""/25, 0x19}, {&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000540)=""/87, 0x57}, {&(0x7f00000005c0)=""/110, 0x6e}, {&(0x7f0000000640)=""/219, 0xdb}], 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="005700000008000300", @ANYRES32=r4, @ANYBLOB="053a0b813854aea48d14b6c1a0d8c871ab0f5cc796591fdb882e5ea3bb205897b4fb8d58ced3ab284d730440f4d3a793024a961af461b72a2fc7aa1ae93c8b1c3126dd96bfd30f344f86600f44e2e5aac4ac8f95d5678bcc84ce72defbb426d65c503ffbf70cd0"], 0x1c}}, 0x0) sendfile(r2, r3, &(0x7f0000000040)=0xc7, 0x95a) 18:37:37 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:37:37 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:37 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:37 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) [ 792.241708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:37 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 792.561394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:48 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:48 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:37:48 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:48 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:48 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0xbe}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:37:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x81, 0xb4, 0x0, 0x0, 0xae13, 0x10484, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x9, 0xcfb7}, 0x2000, 0x5, 0x7f8, 0x6, 0x2, 0x4ab2, 0x0, 0x0, 0x14, 0x0, 0x5}, 0x0, 0xf, r0, 0xa) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 803.153554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:48 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:37:48 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 803.476558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:48 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:37:48 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:48 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:48 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0xf5}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 803.697304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:49 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 804.012885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x40010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 18:37:49 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:37:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:59 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x81, 0xb4, 0x0, 0x0, 0xae13, 0x10484, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x9, 0xcfb7}, 0x2000, 0x5, 0x7f8, 0x6, 0x2, 0x4ab2, 0x0, 0x0, 0x14, 0x0, 0x5}, 0x0, 0xf, r0, 0xa) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:37:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5ffd6d3a2cd04519}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = fork() ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x2, &(0x7f0000004ac0)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x39, 0x1, 0x81, 0x0, 0x6, 0x801, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x88, 0x17}, 0x600, 0x3, 0x0, 0x0, 0x100000000, 0x6, 0xbd, 0x0, 0xffff1136, 0x0, 0x80000001}, r0, 0x2, r1, 0x2) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:37:59 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:59 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:37:59 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:37:59 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0xfc}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 814.532268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:59 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:37:59 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:59 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:37:59 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 814.840154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:37:59 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:37:59 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:37:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 815.020526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:00 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 815.340208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:12 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:12 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:12 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) sendfile(r0, r1, 0x0, 0xfdef) ioctl$RTC_UIE_OFF(r0, 0x7004) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:38:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:12 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x2}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:38:12 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:12 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 827.410629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:12 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:12 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 827.719823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:12 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:12 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:12 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:12 executing program 2: r0 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:12 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x3}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 827.993639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:13 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:13 executing program 2: inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 828.303770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:23 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:23 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:23 executing program 6: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r4, r5, 0x0, 0xa0103) 18:38:23 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:23 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:23 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x4}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:38:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 838.652794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x240240, 0x0) pwritev2(r0, &(0x7f0000001580)=[{&(0x7f0000000100)="5d6316378acbb0e5ad85c7528fdd1d38da56d28bcb6e7f82a3e3cf3d2838", 0x1e}, {&(0x7f0000000140)="304f3c71fb431560bff36ccda8d4cdcd4aae5055a0aa66e620b97212e467a88c58e5fe35e917decf88f7b355683613740aa28f23ad50efe13323b62b7588d5298703eabed460ca944cde2f2c71f2903871979225884158287a04f0ac16b263408db5d96dad2cdadcd65bdd8451c3d6cd683ab7c81bfa5da2cb9e0ac5015b675bab36ece1e7eb47489d2a53b032925cab6429f6038d3ea384e9273667ef5927c971c1e6f0c1eb3f9e2d319ff716eeb695dafdec2cf4985c4172ac7caaaeb0cf2a4065d009d0e22a", 0xc7}, {&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000340)="f07704d457adba4a0739b94db6b928cd53118f767e8fdb0e3c83fd1bfd98bd50e723c3662633eec863f2162d9b46a6a709b2a57b3649ace1161f5460c9a91ba816aee9159d65ca914ce29be8c519f7fe4986b84b7627d970b4661971a6b2e4b95ebd050dcc7318331c2115abbd36632a1fecb57b34924c6851f25a7a09df36883718e4ff906f2431fc78675d9c404441", 0x90}, {&(0x7f0000000400)="2e06cf1fae2cddadc0d305df71ab688effca322d22ea0bceda1c9f3fc7499e2bbc651b2b5f7ab4561ed8f2689af74b42824dca110af9f54e0b264d8031c98836a834fb09874089cc42da66d83fd15c1652a50314588f0a10cc2ddd5a9b1abf6cdf1761811a048f5e61578f1165c3afce46aed1108ccb0f11aee7be64e156f1d26b2f02e3a62cee25009653e3", 0x8c}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="6dd918028a3b8055f1882b2254a7e797bc4b2daab96482cd3ab3a346babe95553ea99db958ebdb5e77613175ce8cb17a49d686ac8c424a2701dd5eb1175724acf8eda7450e3e9cbe61c805dd5e5a733d615c19043559fa18d58aad96ff8557a66caf196e13774af8c79366101075c87ae812cd8ee8ac1d140434cd355841ea326b3d64a7cd7cc40505ba97ba56c812b04a7d67906efd4fc95f0af0f5c6ecb08c1c3a20b53b0cc539ad46fb86382e41c345b5", 0xb2}], 0x7, 0x3, 0x0, 0x8) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x371040, 0x0) 18:38:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 838.972186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:34 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x5}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:38:34 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:34 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:34 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:34 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:34 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 849.443931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:34 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32=r3, @ANYRES32=0x0], 0x71) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000008fc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_type(r1, &(0x7f0000009000), 0x2, 0x0) r9 = accept4$bt_l2cap(r1, &(0x7f0000009040), &(0x7f0000009080)=0xe, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) r13 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r14 = fsopen(&(0x7f00000090c0)='hfs\x00', 0x0) sendmmsg$unix(r1, &(0x7f0000009780)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)="1d3228674bbd14b82361457bc14cb785595c616a71f4ee45d3a0623c7d4c254dde5ef4438b29d9f3b920286e67b3a0a9e010788e6f27b4716cbfbd2fb7e18a7ea8feba9d94a63de53a988bd162b5eeadb5060e7a62a26de05c08b4f4f71d1181f643dfb15ea0ef78d05cf506370205f9dd25991bf5233338f7a4e11e14e762d2fc4c", 0x82}, {&(0x7f00000001c0)="3815b5b92374f683b41512c1b59f77226327000cc1f4378f1faecaa0e3eebe9354a628e09610b5a9cde20a8e2aae59c339846ee6d202b75479e17efce1e0ff53d778b60792821379cc5ad50aedd6c5f3e42388b8f2449cb684bbf1a631e43b57bdee0e006df110f80578cc4bf2332ff34245244861f0f1151406543cda5f91f574cdffd25cbbaa7c5f89121c362cc5a7ed590d288c92cd2f3853ddf571445315bb9ac0ea4440da57a87cbe9942a70f86122e48251da9d71b8838e1974b6df2e825a5e16d5450443587a88ca10cc8d5f91a89f6d9b0f6c8fcd072cbbcd7cf23", 0xdf}], 0x2, &(0x7f0000002780)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="38000000000099000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x15}}, {{&(0x7f0000002840)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003d00)=[{&(0x7f00000028c0)="f2134d5688a4678fc1e05d9a04d717803df9dd8cd14a5a86f27621210e0741e9b92fdba42a3c7406c3f08512cb9979776112785d12c15078bb2da3354f3c5fd45e1b63ed7ef4aa0f793c3a1988f6ee3001c7212b8d586fc371d5cc1fd4d883cea0bef9c991dc8f584e6351c965feb13503f6aff46c878bc03f6e992927633a80ecc9b0d9fdfe4801480125f9709f0d9bdfe95847073c849ef3c06f0b7e625698a588a6ced6ae64036e3f19d31ff1735ce0129a4e71effa09f5f402fe038b6706442a836aa18e8bde831a5d0d034a84b397a69d28eae5bc1afa0aa1dabb", 0xdd}, {&(0x7f00000029c0)="1dbeb3448978cb533ccd8c2668eedefc5c23e4332cf0c14dbf7fa5ec9d87dfe1be26ba8ca87848", 0x27}, {&(0x7f0000002a00)="724e4ad1e771999b228a48641a446595cd1cff5400292c90990c56108d5f2ea5cd999be4efac07cd9deb21f0367cda82267cade4b39ba020b1a5b74a12041737f16a72eaf31d7a028fca64dce1ed2940d768079615f054be23dfd6ec0c7abccc6773a35e58663f4e9178f5732730083ca853d1e0283ba2ce079f32bc23dba4cade45178aab2b49421abc34b509ca7d86a56b983310bbcd9d95429d8301ad955db6382d143861e0941cafc56189c82e949186faa3017932bad5459db0bb28abf535df565e976b7494a4d8fe7471742ade98a5491ac5a276c6c57405a22c2c3bbf8622f5cd67ff74114dfc1911b76593593cfc3cc5", 0xf4}, {&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000003b00)="e3e2fd7b45a98a40f0a0fdbbbff7c53880a5fbe722c94283df27bbbad4e6c8072aa1a32a84067554622fd0299086dfb0f00de1207b3e0f1e080c8e4adc2c82e72a9a8b7f70b6cf1f7f2b90ce08e36523189bb22354da6649740e30d7772d3dd04fdd6b609d037830ba5ed82d92778a1bd98e1cc8193bdbc88b9a00719a816d51b86f0b", 0x83}, {&(0x7f0000003bc0)="ac69620f30c1b5b5e775d57d54a2871f43f79265e6f364687a6eb17a514604bacb0ad1ce7ae087581df2f1b8fe8e4a3750357cd15f59d57a48", 0x39}, {&(0x7f0000003c00)="bbefe09577d37e8bc97b4e3c1481b64f108b20d116625419806343452b11c495af1ac65a761a2f68931293607b08a98ded09c363ae3f06239fc9adfb59131a2903fcfe00306b4bc2f2a26e09a2db3424d42ee069359b79e389b5dfac9983dcd1b887a1619fb85f2ab71d7477a53f937a59fdf27e6eef814f3b719a46600faefac35f17e5d2cd3d7f8fb16323a5ff4e66090bae86fec9f744ab79fc2161a22d99e6defc8c324455ef909c546f50432f9ed381c0de9aa5468041d896b928a19c80bb0aef0bf2d9c5b270db954dccfb45600e4d09a1039968c73d27e128d03924342d", 0xe1}], 0x7, &(0x7f0000004fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x60, 0x20000005}}, {{&(0x7f0000005040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005680)=[{&(0x7f00000050c0)="a1ee99f985d9102b152b88c4d8e13243df240d5542c3016b4078fbeb300fec9e77c2fd702869e32b49fa07e5badf271307ddcf05da91c24ceffe61e0c47b1b", 0x3f}, {&(0x7f0000005100)="b2231fdf25eed75da809399a1cfe160d6effb3cbfa6f4f2d92768a2179f5bf4992b6c42518fde3d4484edb24a0d36357ae53cec509dd6f7fe5fb08f155cdeee4276bd3218f80f1fa559bfb2eeed50bb88852d81891b253f4983f6338f8320367f2a587d64890ac1eda51", 0x6a}, {&(0x7f0000005180)="3a039c950fbaf70d8b61a57be9eec71c7b0f080a6e658a28fb9dea09cd7911f66d06489a7f9881f52afa07a4a49f1a10f17cb4dae5cefb9fc05f577657c6abeea17e66f1e695cb597038e99675de6b0e80e2a9cd4a10db541df0ac0da1506a5c420f9f343a728624be9c4992bfd3cd333a80b2511ed53c106d", 0x79}, {&(0x7f0000005200)="4e4b8426c3dd30f6bbbc239cbcd5e036cb3885cb770c90eb597fa658e286dcba6d72712ccefa3c44b9213f6c144662ce7665cb6b378fad9be6c3a9dae8cebdd5204bc9209255d06930179cad8d3aa2b2d48be188c817c2e796e6b7d7190144cfcaad3ec32eb941480ef985e1ba0fb40524404a990ca68dce85c4c1d714062830e3c189b8b4b963b9a68a38a91d083363b9f32f0b67672a6848159be5bd9fdc1b63c647271bce0d2bbf99326eefd770bd2774a2dfaf52bc743963629e5c84c48a9449df4e177e6ab7c3e4d2ff8ea958", 0xcf}, {&(0x7f0000005300)="34143ed39a8514629910efd9da", 0xd}, {&(0x7f0000005340)="df927477032c5e7b8d534a21f0cd034a5215eaae9b88ce41ef356bbe2b212dcda626955bc84c57d8ccd2f3fa7c7573723495501025610726d5f8ed109b9d7ffa61f0ed5229f1e25527a13a823970dd23d9b1cdbd9436ca92316b813fcf26a757970e4b5c9c02dea9c4141a61c9a9052f376798545340919afbc7f78742876cb4b3f48fa5e7c7c127a804c61863249345c92629986b6568ed1e74b817b7bd3fbf", 0xa0}, {&(0x7f0000005400)="1a148c8151be312642989eba043b7f78fd4b197ecca3368cf251813fde94036ebe157e360d1e79553d84d823551b1516fff579ffe028b25fea2c0bb8556278eb68da0e4c52f515f1501d04eecc4112517f710f3f9a2d62acad83aaa153866f18da69aa3f0b6f24729554c4a965bc5ba17d817191e9a388f1342abd471540bf1c33481a215036192f7262cfc147de97a34936ad1a52788d314b71d33c1e60d514b6010bf7d27f4531d6a6107beb08e1d2", 0xb0}, {&(0x7f00000054c0)="01bda94591e68fdbc047801cc06df1cfa951b7ef08cbd28ffa758bd28efdadbbd81bba32c5ae3018f48a55fb44c84b0efdb536b79dd7be0dc0f27f2a002090404768808a8ba3d2d0960571982165dd2586a75933ba1be62e220a2b94d85db6fb4f2a2ba7ffe418b8e98425cdd549667c311a7a30", 0x74}, {&(0x7f0000005540)="250d20675c1a31a5ac64eee5387a990c4e8662184ace5848047384c1e2c214f0514c03ef6f1f783660d20d290a1b1a8000c57785f6cbb438179a78444a6bdf113d9dd15eedd64242b1bfdaf12dc34eb0b88af18dd729afa8410bc357936061f15132eaf4f012d8a7817e84ee929ef3fcf719a096f5160d01fa92ec5107368ac0aae170339ea9ae3b166e90e36f1e0b9244b05a7d7c58d5c37ef08f11f36682b49325135d", 0xa4}, {&(0x7f0000005600)="f6c010988623ae33ec005ca09b202e574a0493a4edad2d4123a48a2820a60b69295335d2ae24c838743d0721e26d7c291172966f0aba0cc513b0f470b73f55b59ca7b8b812db7389418d86ba1976f0756094a4143f4608c98d1ee821", 0x5c}], 0xa, &(0x7f0000006b40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="2800000000000000eb623d897840001b", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32], 0xa0, 0x4050}}, {{0x0, 0x0, &(0x7f0000007cc0)=[{&(0x7f0000006c00)="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", 0x1000}, {&(0x7f0000007c00)="2f033e077cb07b4abd3474225ca8d8052fdd2b3406dda5b7d461fc4534e156ee5349ae302a7d5c641f753e576d74374512", 0x31}, {&(0x7f0000007c40)="d29649c1458dbcbab8958b3fb836917aa2eae8f76f5fc22ed45768114948d018fc0f5286a0a2da469b6bde3c29024a60912bd13d7b5b526761872bfb3f89d48d22c1e11c2db3", 0x46}], 0x3, &(0x7f0000009100)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r3}}}, @rights={{0x24, 0x1, 0x1, [r4, r0, r0, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r1, r8, r9, r10, r13, r1, r14]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x118, 0x40040}}, {{&(0x7f0000009240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009700)=[{&(0x7f00000092c0)="c12e1909ac1234b4c0d35f0cd85f6b452dedbfebec86c002725d3c7434d692b9d5e8e8abd5e2c9e75a1b77c828a2e57daf6ce40ea9780fb30a833fd6fbab4373fafc65c2cb887cc717191fcb9dabe7d29f4f4b544c3c6fd04271b6fc449460f7441a955e6ec46b4556e3800b162c3632b751cc00a531f27fc341f580656218744d3cdd612617", 0x86}, {&(0x7f0000009380)="b745e654f791504a621db5202989a75559f99a811a", 0x15}, {&(0x7f00000093c0)="b70ea2313eda3ba5a3269fdf88568a16d4c8cab6ee38c95c7397c1eeb5f28087ce8f0fb80681b6d77ef398181b745a563dc9cfe1f0cda8285bbde1c663f8d72a81db87580b5eaeafa948511c289abc5e4eb6020305ffa7c758b5d2522b2d14da4bf9114edadfa5773634ed55e788934a4cad4a96b1ae5f5bbb9db03e4519869d96942624ef32ef52fb8e14b366b0d4516dfe24384fb2c1e2c667e5cd6fa39989cdf8ce9af0485214f9", 0xa9}, {&(0x7f0000009480)="55689a4fd605e4f5ab246f7f8425670e5100f5da281d", 0x16}, {&(0x7f00000094c0)="23a0afdd5515a53d3efa325f77ca6987394252c86fbbf5ab3a29b58ee5f9d8bf291fecf045a05b051af98fcb76b20e9445e1f4642642b9eec7b0c9980d27bbaf98687cf146524f70cbdc1e7fc4cc7313b838c1f4b4c41022e9f7d64b191e4807f182743a6b1fba55362c7134b153984670b02a17a8dadfe5baaf0654e0b397d9acbe3819bdab6e94c30f854d966cba34e5b78d8d0f0baffc11099c5a8b2f8474cd36027ed55279e6499e38f2593785b09d59c6dfe4dba477c69bd560bf7f77e125456ca2f9dc3ec2323a2448", 0xcc}, {&(0x7f00000095c0)}, {&(0x7f0000009600)="02a19fffff713e394c4e7f40eddfa4312a68d38558dd434ff5cf567248e209fede26b6f9d862db29c968dfb2f62a60e542df91fdc67a972ee29a1409f057ce96feeb5289ec37f714e21b0b4dac326e945dc991985dda28e9959a9c8e72e77334a22bc7404c9f7914f5f48d413a8a5b5dfb1330c4eea1c1670014ec5a632a80dbda32ee8be6af670ff6b3dd3390df590e1c4200caf04755a149a34bbf4f3b86b5c369bbd082d2ca84684e95d86a9d1386676ffdfdd27135", 0xb7}, {&(0x7f00000096c0)="0900dd2181011731b43fc5cd2a6dc793efc8aa956f8a5ab42cee93058628dd6424421dbc", 0x24}], 0x8, 0x0, 0x0, 0x4}}], 0x5, 0x88338c66c6310ff6) 18:38:34 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:34 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x3) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = fork() ptrace(0x10, r1) ptrace$getsig(0x4202, r1, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) 18:38:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 849.779715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:34 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:34 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:34 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x6}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:38:35 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 850.043697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:35 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x3) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = fork() ptrace(0x10, r1) ptrace$getsig(0x4202, r1, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:35 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:35 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:35 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:35 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) 18:38:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 850.361318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:35 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:35 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 850.437636] FAULT_INJECTION: forcing a failure. [ 850.437636] name failslab, interval 1, probability 0, space 0, times 0 [ 850.438631] CPU: 1 UID: 0 PID: 14371 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 850.438648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 850.438656] Call Trace: [ 850.438661] [ 850.438666] dump_stack_lvl+0xfa/0x120 [ 850.438687] should_fail_ex+0x4d7/0x5e0 [ 850.438706] should_failslab+0xc2/0x120 [ 850.438729] __kmalloc_cache_noprof+0x81/0x6b0 [ 850.438753] ? __might_fault+0xe0/0x190 [ 850.438769] ? alloc_pipe_info+0x10d/0x5a0 [ 850.438787] ? perf_trace_lock_acquire+0xc9/0x700 [ 850.438813] ? alloc_pipe_info+0x10d/0x5a0 [ 850.438832] alloc_pipe_info+0x10d/0x5a0 [ 850.438857] splice_direct_to_actor+0x78c/0x9d0 [ 850.438872] ? __pfx_direct_splice_actor+0x10/0x10 [ 850.438885] ? lock_acquire+0xd2/0x2f0 [ 850.438906] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 850.438921] ? lock_acquire+0x15e/0x2f0 [ 850.438942] do_splice_direct+0x179/0x250 [ 850.438954] ? __pfx_do_splice_direct+0x10/0x10 [ 850.438967] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 850.438992] ? security_file_permission+0x22/0x90 [ 850.439016] do_sendfile+0xa8e/0xdc0 [ 850.439036] ? __pfx_do_sendfile+0x10/0x10 [ 850.439051] ? __fget_files+0x20d/0x3b0 [ 850.439077] __x64_sys_sendfile64+0x1d3/0x210 [ 850.439097] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 850.439123] do_syscall_64+0xbf/0x390 [ 850.439141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.439155] RIP: 0033:0x7f67a1df3b19 [ 850.439165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 850.439177] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 850.439189] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 850.439197] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 850.439204] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 850.439212] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 850.439219] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 850.439239] 18:38:47 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:47 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:38:47 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:47 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x7}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:38:47 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:47 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) 18:38:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00f1c9bfd0f9c8fb8055d8bf8f04", @ANYRES16=r2, @ANYBLOB="010000000000000000005700000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x1, 0x9, 0x6, 0x1, 0x3, [{0x800, 0xd8b, 0x5, '\x00', 0x2c81}, {0xa28, 0x5, 0x8, '\x00', 0x4}, {0xffffffffffffffff, 0x5, 0x0, '\x00', 0x480}]}) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) sendfile(r3, r4, 0x0, 0xfdef) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0x0], 0x71) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32=r5, @ANYRES32=0x0], 0x71) stat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000001dc0)={{}, {0x1, 0xa}, [{0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x4, 0xee01}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x5, 0xee00}, {0x2, 0x3}], {}, [{0x8, 0x8}, {0x8, 0x1}, {0x8, 0x6}, {0x8, 0x5}, {0x8, 0x6, 0xee01}, {0x8, 0x3, r5}, {0x8, 0x0, r6}], {0x10, 0x2}, {0x20, 0x4}}, 0x8c, 0x2) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x7, 0x8442, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1c, 0x0, @perf_config_ext={0x1, 0x40d08b58}, 0x11220, 0x40, 0x3f, 0x1, 0x10100000, 0x1, 0x3, 0x0, 0x4, 0x0, 0x3fe}, 0x0, 0x400b, r3, 0x2) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x161002, 0x0) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x10480, 0x0, 0x14}, 0x18) write(r7, &(0x7f0000000380)="17bbecdc26ffb15bb8d12083c3d779f420f15cfc080f6abd3e2e3f11f7d56d0d852136e1756adc2331215faa780dd3f3959b3254c9cfaef612f7fd68eab6e7c6899baa4ad238b9e84d269b47afa72bf9376683c1b205f207d6ee632f", 0x5c) [ 861.979990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 862.289675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:47 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:38:47 executing program 2: inotify_init() r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:47 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x9}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:38:47 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:47 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:47 executing program 2: inotify_init() r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 862.515293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.828795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:57 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 3) 18:38:57 executing program 2: inotify_init() r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x3, 0x0, 0x0, 0x228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x410880, 0x0) 18:38:57 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:38:57 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0xf}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:38:57 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:38:57 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:38:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 872.947109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:58 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x2) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 873.071673] FAULT_INJECTION: forcing a failure. [ 873.071673] name failslab, interval 1, probability 0, space 0, times 0 [ 873.073849] CPU: 1 UID: 0 PID: 14653 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 873.073891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 873.073907] Call Trace: [ 873.073917] [ 873.073929] dump_stack_lvl+0xfa/0x120 [ 873.073968] should_fail_ex+0x4d7/0x5e0 [ 873.074008] should_failslab+0xc2/0x120 [ 873.074051] __kmalloc_noprof+0xcd/0x680 [ 873.074104] ? alloc_pipe_info+0x1e8/0x5a0 [ 873.074142] alloc_pipe_info+0x1e8/0x5a0 [ 873.074176] splice_direct_to_actor+0x78c/0x9d0 [ 873.074203] ? __pfx_direct_splice_actor+0x10/0x10 [ 873.074226] ? lock_acquire+0xd2/0x2f0 [ 873.074263] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 873.074290] ? lock_acquire+0x15e/0x2f0 [ 873.074327] do_splice_direct+0x179/0x250 [ 873.074349] ? __pfx_do_splice_direct+0x10/0x10 [ 873.074373] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 873.074415] ? security_file_permission+0x22/0x90 [ 873.074455] do_sendfile+0xa8e/0xdc0 [ 873.074491] ? __pfx_do_sendfile+0x10/0x10 [ 873.074517] ? __fget_files+0x20d/0x3b0 [ 873.074557] __x64_sys_sendfile64+0x1d3/0x210 [ 873.074591] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 873.074637] do_syscall_64+0xbf/0x390 [ 873.074668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.074691] RIP: 0033:0x7f67a1df3b19 [ 873.074708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 873.074729] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 873.074751] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 873.074766] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 873.074779] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 873.074792] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 873.074805] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 873.074842] 18:38:58 executing program 2: inotify_init() creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 873.271499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:38:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:38:58 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x11}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:38:58 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 4) 18:38:58 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:38:58 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 873.514242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.846211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:10 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x4, 0x0, 0x20, 0x0, 0x3, 0x8800, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x46800, 0x7, 0x400, 0x3, 0x553e7917, 0x5, 0x7, 0x0, 0x48, 0x0, 0x6}, r0, 0xf, r1, 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:39:10 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:39:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:10 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 5) 18:39:10 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x12}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:39:10 executing program 2: inotify_init() creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:10 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) [ 885.140609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.179764] FAULT_INJECTION: forcing a failure. [ 885.179764] name failslab, interval 1, probability 0, space 0, times 0 [ 885.180882] CPU: 1 UID: 0 PID: 14900 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 885.180899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 885.180907] Call Trace: [ 885.180911] [ 885.180916] dump_stack_lvl+0xfa/0x120 [ 885.180937] should_fail_ex+0x4d7/0x5e0 [ 885.180956] should_failslab+0xc2/0x120 [ 885.180976] __kmalloc_noprof+0xcd/0x680 [ 885.180999] ? __pfx_perf_trace_lock+0x10/0x10 [ 885.181023] ? copy_splice_read+0x15b/0xc00 [ 885.181053] copy_splice_read+0x15b/0xc00 [ 885.181081] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 885.181101] ? __pfx_copy_splice_read+0x10/0x10 [ 885.181124] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 885.181142] ? look_up_lock_class+0x56/0x150 [ 885.181158] ? register_lock_class+0x41/0x560 [ 885.181178] ? lockdep_init_map_type+0x4b/0x240 [ 885.181200] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 885.181218] ? __pfx_copy_splice_read+0x10/0x10 [ 885.181243] do_splice_read+0x1f8/0x2a0 [ 885.181269] splice_direct_to_actor+0x2a8/0x9d0 [ 885.181282] ? __pfx_direct_splice_actor+0x10/0x10 [ 885.181300] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 885.181314] ? lock_acquire+0x15e/0x2f0 [ 885.181337] do_splice_direct+0x179/0x250 [ 885.181349] ? __pfx_do_splice_direct+0x10/0x10 [ 885.181362] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 885.181389] ? security_file_permission+0x22/0x90 [ 885.181413] do_sendfile+0xa8e/0xdc0 [ 885.181434] ? __pfx_do_sendfile+0x10/0x10 [ 885.181450] ? __fget_files+0x20d/0x3b0 [ 885.181473] __x64_sys_sendfile64+0x1d3/0x210 [ 885.181494] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 885.181522] do_syscall_64+0xbf/0x390 [ 885.181540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.181553] RIP: 0033:0x7f67a1df3b19 [ 885.181563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 885.181575] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 885.181587] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 885.181596] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 885.181603] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 885.181610] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 885.181618] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 885.181637] 18:39:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:10 executing program 2: inotify_init() creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:10 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 6) [ 885.454995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:20 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:39:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:39:20 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 7) 18:39:20 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 18:39:20 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x14}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:39:20 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:20 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 895.541976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:20 executing program 4: openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x8000, 0x0) 18:39:20 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 895.703163] FAULT_INJECTION: forcing a failure. [ 895.703163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 895.705332] CPU: 1 UID: 0 PID: 15046 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 895.705365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 895.705379] Call Trace: [ 895.705387] [ 895.705396] dump_stack_lvl+0xfa/0x120 [ 895.705431] should_fail_ex+0x4d7/0x5e0 [ 895.705464] should_fail_alloc_page+0xe0/0x110 [ 895.705502] prepare_alloc_pages+0x1eb/0x550 [ 895.705534] ? __pfx_perf_trace_lock+0x10/0x10 [ 895.705580] alloc_pages_bulk_noprof+0x148/0xc30 [ 895.705624] ? find_held_lock+0x2b/0x80 [ 895.705657] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 895.705701] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 895.705751] ? trace_kmalloc+0x1f/0xb0 [ 895.705781] ? __kmalloc_noprof+0x274/0x680 [ 895.705819] ? __pfx_perf_trace_lock+0x10/0x10 [ 895.705857] ? copy_splice_read+0x15b/0xc00 [ 895.705908] copy_splice_read+0x192/0xc00 [ 895.705962] ? __pfx_copy_splice_read+0x10/0x10 [ 895.706002] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 895.706038] ? look_up_lock_class+0x56/0x150 [ 895.706065] ? register_lock_class+0x41/0x560 [ 895.706108] ? lockdep_init_map_type+0x4b/0x240 [ 895.706148] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 895.706181] ? __pfx_copy_splice_read+0x10/0x10 [ 895.706226] do_splice_read+0x1f8/0x2a0 [ 895.706273] splice_direct_to_actor+0x2a8/0x9d0 [ 895.706300] ? __pfx_direct_splice_actor+0x10/0x10 [ 895.706334] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 895.706363] ? lock_acquire+0x15e/0x2f0 [ 895.706405] do_splice_direct+0x179/0x250 [ 895.706429] ? __pfx_do_splice_direct+0x10/0x10 [ 895.706456] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 895.706504] ? security_file_permission+0x22/0x90 [ 895.706548] do_sendfile+0xa8e/0xdc0 [ 895.706588] ? __pfx_do_sendfile+0x10/0x10 [ 895.706617] ? __fget_files+0x20d/0x3b0 [ 895.706661] __x64_sys_sendfile64+0x1d3/0x210 [ 895.706701] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 895.706753] do_syscall_64+0xbf/0x390 [ 895.706786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.706811] RIP: 0033:0x7f67a1df3b19 [ 895.706830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 895.706853] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 895.706877] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 895.706893] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 895.706907] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 895.706922] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 895.706936] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 895.706975] [ 895.857113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:20 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:20 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 18:39:20 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:21 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 8) 18:39:21 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x15}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:39:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:21 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7f}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 896.063255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.099893] FAULT_INJECTION: forcing a failure. [ 896.099893] name failslab, interval 1, probability 0, space 0, times 0 [ 896.100950] CPU: 0 UID: 0 PID: 15168 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 896.100967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.100975] Call Trace: [ 896.100980] [ 896.100985] dump_stack_lvl+0xfa/0x120 [ 896.101005] should_fail_ex+0x4d7/0x5e0 [ 896.101024] should_failslab+0xc2/0x120 [ 896.101044] __kmalloc_noprof+0xcd/0x680 [ 896.101072] ? iter_file_splice_write+0x1cd/0x11f0 [ 896.101092] iter_file_splice_write+0x1cd/0x11f0 [ 896.101109] ? kfree+0x284/0x550 [ 896.101133] ? copy_splice_read+0x83d/0xc00 [ 896.101158] ? __pfx_iter_file_splice_write+0x10/0x10 [ 896.101173] ? __lock_acquire+0xc65/0x1b70 [ 896.101208] ? lock_is_held_type+0x9e/0x120 [ 896.101223] ? __pfx_iter_file_splice_write+0x10/0x10 [ 896.101238] direct_splice_actor+0x192/0x7b0 [ 896.101253] splice_direct_to_actor+0x347/0x9d0 [ 896.101267] ? __pfx_direct_splice_actor+0x10/0x10 [ 896.101284] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 896.101299] ? lock_acquire+0x15e/0x2f0 [ 896.101320] do_splice_direct+0x179/0x250 [ 896.101333] ? __pfx_do_splice_direct+0x10/0x10 [ 896.101346] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 896.101371] ? security_file_permission+0x22/0x90 [ 896.101394] do_sendfile+0xa8e/0xdc0 [ 896.101414] ? __pfx_do_sendfile+0x10/0x10 [ 896.101430] ? __fget_files+0x20d/0x3b0 [ 896.101452] __x64_sys_sendfile64+0x1d3/0x210 [ 896.101472] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 896.101499] do_syscall_64+0xbf/0x390 [ 896.101516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.101530] RIP: 0033:0x7f67a1df3b19 [ 896.101539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.101551] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 896.101563] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 896.101572] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 896.101579] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 896.101586] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 896.101593] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 896.101613] 18:39:21 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:21 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:39:21 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 9) 18:39:21 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100040001000000180000004901e5768ad14b13f639408fed21685866fb078376246e84d6a27b886050965f35064b5877c9b3a4aef73b3511ec35098fb5f51c84b7ee9c000043571d3e520923ee72bb57e49408a855e773a3e70220af86b3d919e1da753c117a072adeffea44af657ddc391ff6ada96aa9ef3435ff01", @ANYRES32=r2, @ANYBLOB="00800000000000002e2f66696c653000"]) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x24182, 0x0) 18:39:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:21 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 896.404315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:32 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x16}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:39:32 executing program 4: syz_io_uring_setup(0x508, &(0x7f0000000000)={0x0, 0xc4c6, 0x2, 0x2, 0x26f}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:39:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:32 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 10) 18:39:32 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:39:32 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:32 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:32 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) [ 907.176767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.246220] FAULT_INJECTION: forcing a failure. [ 907.246220] name failslab, interval 1, probability 0, space 0, times 0 [ 907.247424] CPU: 0 UID: 0 PID: 15417 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 907.247442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 907.247450] Call Trace: [ 907.247454] [ 907.247459] dump_stack_lvl+0xfa/0x120 [ 907.247480] should_fail_ex+0x4d7/0x5e0 [ 907.247498] ? jbd2__journal_start+0x193/0x6b0 [ 907.247513] should_failslab+0xc2/0x120 [ 907.247532] kmem_cache_alloc_noprof+0x80/0x690 [ 907.247561] ? jbd2__journal_start+0x193/0x6b0 [ 907.247574] jbd2__journal_start+0x193/0x6b0 [ 907.247591] __ext4_journal_start_sb+0x325/0x5d0 [ 907.247611] ? ext4_dirty_inode+0xa5/0x130 [ 907.247635] ext4_dirty_inode+0xa5/0x130 [ 907.247655] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 907.247674] __mark_inode_dirty+0x1b7/0xd00 [ 907.247697] generic_update_time+0xcb/0xf0 [ 907.247718] file_modified+0x1f0/0x230 [ 907.247739] ext4_file_write_iter+0x1185/0x1a00 [ 907.247765] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 907.247785] ? splice_from_pipe_next.part.0+0x165/0x510 [ 907.247804] iter_file_splice_write+0xa3a/0x11f0 [ 907.247829] ? __pfx_iter_file_splice_write+0x10/0x10 [ 907.247861] ? lock_is_held_type+0x9e/0x120 [ 907.247876] ? __pfx_iter_file_splice_write+0x10/0x10 [ 907.247891] direct_splice_actor+0x192/0x7b0 [ 907.247906] splice_direct_to_actor+0x347/0x9d0 [ 907.247920] ? __pfx_direct_splice_actor+0x10/0x10 [ 907.247938] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 907.247952] ? lock_acquire+0x15e/0x2f0 [ 907.247977] do_splice_direct+0x179/0x250 [ 907.247990] ? __pfx_do_splice_direct+0x10/0x10 [ 907.248003] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 907.248027] ? security_file_permission+0x22/0x90 [ 907.248051] do_sendfile+0xa8e/0xdc0 [ 907.248076] ? __pfx_do_sendfile+0x10/0x10 [ 907.248091] ? __fget_files+0x20d/0x3b0 [ 907.248114] __x64_sys_sendfile64+0x1d3/0x210 [ 907.248133] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 907.248160] do_syscall_64+0xbf/0x390 [ 907.248177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.248190] RIP: 0033:0x7f67a1df3b19 [ 907.248200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 907.248212] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 907.248225] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 907.248233] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 907.248240] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 907.248248] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 907.248255] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 907.248275] 18:39:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002280), 0x1ea80, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}}, 0x0) sendmmsg$unix(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8669346f587f2e91d14e49975025b8a97f1c6785d4962665c748bc50fd9707b50362e53606759e270aafc91ad9b829053fe291d4fc5288898dabd97eb014c2ff4175ae08e7e39aaa80747cfb8f01cd92af84a93f1f4176bccd610b1136741dd935f9526691906db80e69214d7620db73b3775", 0x73}, {&(0x7f0000000100)="bf4d4b090ff7736b501a087fc9340f70443083bce860867671dad373710d443d947e86294e367255d45032cf43acd218c4c5e652b0ea9d01a910e000ddd9b43f78d058f92cf8c02a39db", 0x4a}, {&(0x7f0000000180)="6993b085283dab81f6040a9d4db12bb2d7c2d6f88a4f28cff0aef547dd901ff10b41c84bb86129092cfa8fe1268d6d7d896a6860a03f7dbfd37c399ecf7611e020e4fb98299d6cd572d28e8df474ad6eea5cd8c2fc5ee44a1dd980291c842d758b8e3ba30089936142c3cf0bb4a0f73fc78ec8e74b74f35c37da222348a454a79e6c594b2719466af9c32b91a335ea4a622a9f5d758fd6c9a271", 0x9a}, {&(0x7f0000000240)="99a7b35163047c86d64e21fbfaaf4db76865aba81ca3", 0x16}, {&(0x7f0000000280)="a24feb7ad36a902e04eb1af55186f45e373f198728616c9fc06d66cddfb39b4ec10ff28475e82d31b8087ab5992408216e2b6fe6f808ae6a14a9b8e9e392cbefc4529b2f4d6727ec1a1fd4865ea921c08d2f8400129c40ebe0d427a9cad7022f239a74734c304b1a09ab5f50d20a319ee7ba6478611b9df58b3e5162b7ecb93c38cc84b55adf7886c274c8e1837c63e5f6d89e0b2c172ba3a679a4b5add2d62cc4f9f2342053f12ab39f6141dd420b26e4e9537ee454f0564efd55d131a80a0ef5bc7b71f0ffbef4", 0xc8}], 0x5, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40, 0x8010}}, {{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)="594ce1484eb883341f08cb405bc02ce4db4fb6fcd7b370e355c370304f1dbb14014d202c59eb760f1b63aa63ea6cfa289c98cf97e69b0bc1bd9fba178069b86268afe42f4236340bc2879a1c0b553b4513f6d73a8fb5ed5ee902c543", 0x5c}, {&(0x7f0000000580)="883380ceb120bfaf4cfc7ce400f2edffb9944c97f34b61a0150e0fffeb373b4b33fe8bb38b5afd827decd591bb701a2fdacdb1185dc967395285a7f6c9054399c55c52c57d966a9e3fd5937f8cdb244ebfba747923c21b7fc35be709f2d80c15fb84b5516a135383a4fe477a4fd6dbdb1a1db23fe2585212e9d0070312be627369d82568756c88db7156094c73f743555711cd122f2b151dff6cdac345b66c67cb2f628aae9a26a9128a3c1294b34dd5d1c5a4c5e2413e61b7f5027f8671acd69c598bfb70ea16e9b27d2edcbfc066892a536d6ed1598cb1b64cd7ba", 0xdc}, {&(0x7f0000000680)="4e55c7", 0x3}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="9708688d255dc239f629fc4fb477ffe08f72edbb223afc032c3fbb11dbfb16b2345c587f552484182309f5c2ae0df34e668419331b1fada421318da823f02efa06eba6de85eca021625533745d54237239642499432a80ed80eaf90a332a71217bebe392fa2c8255d56cae78c140e78a1d6f3350a2671f6c849577cdb57fd71bd093e96bd373dff58993797ebb8fb86c25cb3d21e8360052b725361a99ab8f78412d00f84c2ef7b714fd2d5b29aba665231363d181a4169c1b26db64a4e783f9c39d5203a7c3", 0xc6}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f00000017c0)="921380a4c5f482497155a30a5a1259e5ef0c32555aff0bf582e14064036fcb6baada6c9cadb12288aa4a83fc3c898f9224552fe6a650903413ea530c91033eaaf6a5faf67ff5a0ce5da3c5190e94a3fc0ce345c1d961ce53a9546a14ebe5faca700abad941635120db8c7e9c22aa7853cf84bfb877c48c0ee3eb7dd827ded9727be36e476c0401ff901911957d1c6e17ad98e16036e17114f7b8c67ba31a603b1e4346ab3c2e84d9bcdec1054112498f6f0894e5d516a494944a8a5dca5a6d6c164c74", 0xc3}, {&(0x7f00000018c0)="b7bbaadf6edb83c134", 0x9}, {&(0x7f0000001900)="294dc7ba5f59dc18b1163d5147ab1c8799d3f36cbdd21a8194990847a4de03687d857b20b46108e16914", 0x2a}], 0xa, &(0x7f00000022c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}, @rights={{0x24, 0x1, 0x1, [r5, r8, r11, r1, r12]}}], 0x128, 0x8000}}], 0x2, 0x40004) 18:39:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:32 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xfffffffffffffeb8, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0x0, 0x99, {0x200006, 0x61}}}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r4, @ANYRESHEX, @ANYRES32=r6, @ANYBLOB="cb9602ba83fa89e3e70a31a95b2ca584dfb85062063ef952a35369424a3cc2fc9e49f3a97d508863d45c92ebed911015fa332e954fd5ce3053252dbcae57ba5444d897c6959ecc6fbc23990de4fa23809d01b31596d120aa1308f808d94997c7d01ca0e89bdd50d9751dfb810690c874162d20050aae2e4eb4bacedd3bb1e7e98962cd45fabb36c670836100b4d886bc99905d61b48fc0cc1c863700", @ANYRES32=r2], 0x1c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r5, r7], 0x7) dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x8, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000100)={0x0, 0x100000001, 0x0, 0x1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x58bc, 0x0, 0x85b, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 907.498705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:32 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 18:39:32 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x17}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 907.686452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.996787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:42 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:42 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:39:42 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x18}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:39:42 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 18:39:42 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 11) 18:39:42 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:39:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:42 executing program 4: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000000)=""/16, 0x10}], 0x3}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000380)=""/249, 0xf9}, {&(0x7f0000000480)=""/168, 0xa8}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/120, 0x78}, {&(0x7f00000017c0)=""/237, 0xed}, {&(0x7f00000018c0)=""/185, 0xb9}, {&(0x7f0000001980)=""/90, 0x5a}, {&(0x7f0000001a00)=""/121, 0x79}, {&(0x7f0000001a80)=""/173, 0xad}, {&(0x7f0000001b40)=""/171, 0xab}, {&(0x7f0000001c00)=""/36, 0x24}, {&(0x7f0000001c40)=""/153, 0x99}], 0xa, &(0x7f0000001dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x3, 0x2001, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 917.330725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 18:39:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe074}, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 917.661149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:42 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:42 executing program 4: membarrier(0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:39:42 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r1, r2, 0x0, 0xa0103) 18:39:42 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 12) 18:39:42 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x19}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:39:42 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 917.883596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.973424] FAULT_INJECTION: forcing a failure. [ 917.973424] name failslab, interval 1, probability 0, space 0, times 0 [ 917.974570] CPU: 1 UID: 0 PID: 15801 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 917.974608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 917.974622] Call Trace: [ 917.974630] [ 917.974641] dump_stack_lvl+0xfa/0x120 [ 917.974677] should_fail_ex+0x4d7/0x5e0 [ 917.974714] should_failslab+0xc2/0x120 [ 917.974750] __kmalloc_cache_noprof+0x81/0x6b0 [ 917.974769] ? lock_acquire+0x15e/0x2f0 [ 917.974789] ? __virt_addr_valid+0x1c6/0x5d0 [ 917.974803] ? __iomap_dio_rw+0x262/0x1cd0 [ 917.974820] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 917.974843] ? __iomap_dio_rw+0x262/0x1cd0 [ 917.974856] __iomap_dio_rw+0x262/0x1cd0 [ 917.974874] ? mark_held_locks+0x49/0x80 [ 917.974892] ? kasan_quarantine_put+0x84/0x1e0 [ 917.974910] ? kmem_cache_free+0x2a4/0x540 [ 917.974922] ? __pfx___iomap_dio_rw+0x10/0x10 [ 917.974941] ? jbd2_journal_stop+0x184/0xe20 [ 917.974974] ? ext4_dirty_inode+0xf1/0x130 [ 917.974993] ? __mark_inode_dirty+0x254/0xd00 [ 917.975015] iomap_dio_rw+0x40/0xa0 [ 917.975032] ext4_file_write_iter+0x11f3/0x1a00 [ 917.975058] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 917.975081] ? splice_from_pipe_next.part.0+0x165/0x510 [ 917.975098] iter_file_splice_write+0xa3a/0x11f0 [ 917.975122] ? __pfx_iter_file_splice_write+0x10/0x10 [ 917.975152] ? lock_is_held_type+0x9e/0x120 [ 917.975167] ? __pfx_iter_file_splice_write+0x10/0x10 [ 917.975181] direct_splice_actor+0x192/0x7b0 [ 917.975196] splice_direct_to_actor+0x347/0x9d0 [ 917.975209] ? __pfx_direct_splice_actor+0x10/0x10 [ 917.975226] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 917.975240] ? lock_acquire+0x15e/0x2f0 [ 917.975259] do_splice_direct+0x179/0x250 [ 917.975270] ? __pfx_do_splice_direct+0x10/0x10 [ 917.975283] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 917.975305] ? security_file_permission+0x22/0x90 [ 917.975327] do_sendfile+0xa8e/0xdc0 [ 917.975347] ? __pfx_do_sendfile+0x10/0x10 [ 917.975360] ? __fget_files+0x20d/0x3b0 [ 917.975383] __x64_sys_sendfile64+0x1d3/0x210 [ 917.975409] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 917.975433] do_syscall_64+0xbf/0x390 [ 917.975449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.975461] RIP: 0033:0x7f67a1df3b19 [ 917.975471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 917.975482] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 917.975494] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 917.975502] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 917.975509] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 917.975516] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 917.975523] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 917.975543] [ 918.201360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = clone3(&(0x7f00000003c0)={0x4000000, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), {0xc}, &(0x7f0000000200)=""/95, 0x5f, &(0x7f0000000280)=""/213, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xc6, 0x98, 0x0, 0x8d, 0x0, 0x8000, 0x3010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x19cb8411, 0x4, @perf_config_ext={0x6, 0x165}, 0x4008, 0x8000, 0x6, 0x6, 0x3, 0x7f, 0x8001, 0x0, 0xffffffff, 0x0, 0x90}, r2, 0x2, r0, 0x3) 18:39:54 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x1a}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:39:54 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:39:54 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r1, r2, 0x0, 0xa0103) 18:39:54 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 13) 18:39:54 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:39:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:39:54 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) [ 929.685615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:39:54 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:39:54 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r1, r2, 0x0, 0xa0103) [ 929.933883] syz-executor.7 (15817) used greatest stack depth: 22320 bytes left 18:39:55 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:39:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 930.010236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:06 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 14) 18:40:06 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:06 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x1b}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:40:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:06 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:40:06 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:40:06 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:40:06 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r8, &(0x7f0000000900)="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", 0x200) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x44000) sendfile(r8, r9, 0x0, 0xfdef) io_submit(0x0, 0xa, &(0x7f0000000a40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000100)="f370165c04569452ca9a4ec5a14270c03c61debb5679b40d387ad75fbd5b7920a10ed813e5ef021d6d21f75ab32d404af78b31fb8f62682f7d8aa8cb611a95efbe8e01cc993fefe891fd0304", 0x4c, 0x100000000, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xb3, 0xffffffffffffffff, &(0x7f00000001c0)="30f6279b9affef915d12adb3045f77a0fd594888d80eaa60afabcdcc50fa4d24ce2e18ef665bcbddb970a939d4887d563944407b54bcf320936467604861c75890d06f7ef8a81a6efb80a66598e73aa2a8dae3", 0x53, 0x9, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x2, r0, &(0x7f0000000280)="b120d9bc08feea95ca5ea2f07d005c97210f9cae492cff2f707d91e82a46db3f22d3efcffd1139dcd2f42ae456232897c3ca9399cf5faf23580e4c47532ffc35986cbb2c778d3d5efa14bf21dc1dfc7844646a48a6c1f1acdb2cf7319eb4a27ceb9bbf0ee44da39c87b26944a1ff83c0abfb2f6d8412777b7801f5e596865779afeff978f9a7ea82be75bfee7bd5d8d72fe0226e545ec3bab291a0e67508d8661483bbe14bb0b51f706685085ce71bd4ca5f6d208b5276ff06a0c713a4d5c82b6c956cfb56a06165", 0xc8, 0x1, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x8001, 0xffffffffffffffff, &(0x7f00000003c0)="6c80f36b4a01e766e35347439d57d592dab55e2b13b35dbbf121c347fcea3af1cc31140d4d865875bd2cce7c2b348770d26098d47e9b4aa2395c97ac6418807c8e2eaaa7a8b8ee9b0b2729b4cd3c95875e49215b62b52e39f35f07293024f6a97745ebc8cb52f532c0fc435e7b80898cf55b4dd640e8b2a20ed0e5c814d7ef20dff01151c584472a3ba02d760f1494411a0dafcb6d9162e3247c9a3ccc8429e8ee950932b9c1b7dc2bcf68fb157cfd1622153c96a0f2cab443b03760c3345888262d9e473a8487b117abd0f38211cc44564bfad451572af4e8feee8cf7fdbc", 0xdf, 0x401, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000500)="829d1a5c7050252482b87a2b541af6cfb4b6dea06c11cb70c4f936803ce5845c968f", 0x22, 0x1, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x42b, r0, &(0x7f0000000580)="fb271820ea84db053be5c87e7efa0bebacde5af3a0574d26b2f279a059b8dc6aeda7ca5102f4c7b5e7bf9062edc15fd717aa9c910996024017231f9fb8100f", 0x3f, 0xc73, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000600)="34e1f5ff20c5eed751e6446c23474cf45b57fec840da1b6fe072a2b3e64b5ac58e8036708b232972bb85523f94d98f043291dd23676a15c8d9b5f7c7bcad7467f9ed9f92bd416955d2a082371154d5d4de9e28c0ea859d2726260bb16ed1dc0a9957f7685aa8745d1dc081a30bbdeccf9b259efff714294d6aca315b62fc7b1d7027e799a6b52af08a526ff5990b77f2e590139aef81537b155513368b103d340b15e9231dbfb1f7794221112909740fba217112fe4ca6a1d495b2e7b5f418af31adf4f618ad8c4bd3d6e0411361838079fde4892b90023445f041ad05091a9eef4cff681958b1c4dbafaea1f12dd4", 0xef, 0x2, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000740)="5747cfd0eed4d2d5e9aa9d715535a531b9283571b2c27028d217bb4d8d59d24bdd2c1690e0c56703b79b473e4727c80ab1d4dc2988aa74dd6198c70f2343ba3c7d43ae31c8e61a35f1eb35e66c6ea42f751b84d876ca8f0ea255cf9b15cad3f090d926d427e0", 0x66, 0x8, 0x0, 0x0, r2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x9, r4, &(0x7f0000000800)="c53098a7307635a93da6a3c585e1605c29b6640c129fd43e2ea79964dc6afe63e440f52fd22e2a7ac3ac37b0057e62420c9aa88457b950c7e27317053409be497f5b5cf3c57a6c64eee0847a8e6bcf06dcf0ea904b54aec3924c3dd927198f8ae3259d73dc5dcd1a048828ff27de43afee38815f8d7408a255a2d793ce4bf205e6cf249caab3c0f858bd05b918308e6ec7b4573759641851bedf3c1f879f605e75ad1a520d393f0d8a52b9f10715d5d5ad7ea6d310f240e1ba10", 0xba, 0x20, 0x0, 0x2}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2, 0xe14, r5, &(0x7f0000000900)="e9a1f92de884703f13a598db8025fc67929e6d2881082802961efe8afa8cdf7e7073314446c647c84f814feb522b4693b257f3aae4f8a21ec43afa6a04294ff707cef566823f390ae356e946c3a47e632abaa679757b506ebec7af7b712470e91626266623e46738e069770171f9fd7f1e5a5a6fea3a95f5ec604e18431e8b9e1b28c564f82bd9475f5a55a6d5ea10c0b04acff52fc08dec436cfdaf4e077bdbca96859e41530d57685a88271b517dfd383cef254f40aacb954d8bc83e34398b4bb809079116f8df751d7219d5d4050adcd48a", 0xd3, 0x4, 0x0, 0x2, r8}]) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 941.791468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:06 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:40:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:07 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 942.050223] FAULT_INJECTION: forcing a failure. [ 942.050223] name failslab, interval 1, probability 0, space 0, times 0 [ 942.051338] CPU: 1 UID: 0 PID: 16073 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 942.051355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.051363] Call Trace: [ 942.051368] [ 942.051373] dump_stack_lvl+0xfa/0x120 [ 942.051393] should_fail_ex+0x4d7/0x5e0 [ 942.051410] ? jbd2__journal_start+0x193/0x6b0 [ 942.051426] should_failslab+0xc2/0x120 [ 942.051446] kmem_cache_alloc_noprof+0x80/0x690 [ 942.051472] ? lock_is_held_type+0x9e/0x120 [ 942.051491] ? jbd2__journal_start+0x193/0x6b0 [ 942.051505] jbd2__journal_start+0x193/0x6b0 [ 942.051522] __ext4_journal_start_sb+0x325/0x5d0 [ 942.051543] ? ext4_iomap_begin+0x5b8/0xe80 [ 942.051563] ? ext4_meta_trans_blocks+0x256/0x310 [ 942.051585] ext4_iomap_begin+0x5b8/0xe80 [ 942.051615] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 942.051635] ? mark_held_locks+0x49/0x80 [ 942.051659] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 942.051700] ? __create_object+0x59/0x80 [ 942.051724] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 942.051745] iomap_iter+0x544/0xdb0 [ 942.051766] __iomap_dio_rw+0x698/0x1cd0 [ 942.051789] ? kasan_quarantine_put+0x84/0x1e0 [ 942.051810] ? __pfx___iomap_dio_rw+0x10/0x10 [ 942.051850] ? ext4_dirty_inode+0xf1/0x130 [ 942.051871] ? __mark_inode_dirty+0x254/0xd00 [ 942.051894] iomap_dio_rw+0x40/0xa0 [ 942.051913] ext4_file_write_iter+0x11f3/0x1a00 [ 942.051939] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 942.051960] ? splice_from_pipe_next.part.0+0x165/0x510 [ 942.051978] iter_file_splice_write+0xa3a/0x11f0 [ 942.052003] ? __pfx_iter_file_splice_write+0x10/0x10 [ 942.052035] ? lock_is_held_type+0x9e/0x120 [ 942.052047] ? __pfx_iter_file_splice_write+0x10/0x10 [ 942.052062] direct_splice_actor+0x192/0x7b0 [ 942.052082] splice_direct_to_actor+0x347/0x9d0 [ 942.052096] ? __pfx_direct_splice_actor+0x10/0x10 [ 942.052113] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 942.052128] ? lock_acquire+0x15e/0x2f0 [ 942.052150] do_splice_direct+0x179/0x250 [ 942.052162] ? __pfx_do_splice_direct+0x10/0x10 [ 942.052176] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 942.052200] ? security_file_permission+0x22/0x90 [ 942.052223] do_sendfile+0xa8e/0xdc0 [ 942.052244] ? __pfx_do_sendfile+0x10/0x10 [ 942.052259] ? __fget_files+0x20d/0x3b0 [ 942.052281] __x64_sys_sendfile64+0x1d3/0x210 [ 942.052301] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 942.052328] do_syscall_64+0xbf/0x390 [ 942.052344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.052358] RIP: 0033:0x7f67a1df3b19 [ 942.052368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 942.052380] RSP: 002b:00007f679f327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 942.052392] RAX: ffffffffffffffda RBX: 00007f67a1f070e0 RCX: 00007f67a1df3b19 [ 942.052400] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 942.052407] RBP: 00007f679f3271d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.052415] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 942.052422] R13: 00007ffd73202ddf R14: 00007f679f327300 R15: 0000000000022000 [ 942.052442] [ 942.108908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:07 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x1c}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:40:07 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:07 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 942.307279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:07 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 15) 18:40:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 942.622917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:17 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 16) 18:40:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:17 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x1d}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:40:17 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:40:17 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:40:17 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:40:17 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 952.926891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 953.095175] FAULT_INJECTION: forcing a failure. [ 953.095175] name failslab, interval 1, probability 0, space 0, times 0 [ 953.096876] CPU: 0 UID: 0 PID: 16324 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 953.096907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 953.096920] Call Trace: [ 953.096928] [ 953.096937] dump_stack_lvl+0xfa/0x120 [ 953.096971] should_fail_ex+0x4d7/0x5e0 [ 953.097001] ? jbd2__journal_start+0x193/0x6b0 [ 953.097027] should_failslab+0xc2/0x120 [ 953.097064] kmem_cache_alloc_noprof+0x80/0x690 [ 953.097127] ? jbd2__journal_start+0x193/0x6b0 [ 953.097150] jbd2__journal_start+0x193/0x6b0 [ 953.097183] __ext4_journal_start_sb+0x325/0x5d0 [ 953.097222] ? ext4_dirty_inode+0xa5/0x130 [ 953.097268] ext4_dirty_inode+0xa5/0x130 [ 953.097310] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 953.097347] __mark_inode_dirty+0x1b7/0xd00 [ 953.097386] generic_update_time+0xcb/0xf0 [ 953.097424] file_modified+0x1f0/0x230 [ 953.097461] ext4_buffered_write_iter+0xf4/0x430 [ 953.097498] ext4_file_write_iter+0x1053/0x1a00 [ 953.097545] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 953.097583] ? splice_from_pipe_next.part.0+0x165/0x510 [ 953.097617] iter_file_splice_write+0xa3a/0x11f0 [ 953.097663] ? __pfx_iter_file_splice_write+0x10/0x10 [ 953.097722] ? lock_is_held_type+0x9e/0x120 [ 953.097747] ? __pfx_iter_file_splice_write+0x10/0x10 [ 953.097775] direct_splice_actor+0x192/0x7b0 [ 953.097803] splice_direct_to_actor+0x347/0x9d0 [ 953.097829] ? __pfx_direct_splice_actor+0x10/0x10 [ 953.097862] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 953.097889] ? lock_acquire+0x15e/0x2f0 [ 953.097930] do_splice_direct+0x179/0x250 [ 953.097953] ? __pfx_do_splice_direct+0x10/0x10 [ 953.097978] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 953.098023] ? security_file_permission+0x22/0x90 [ 953.098064] do_sendfile+0xa8e/0xdc0 [ 953.098102] ? __pfx_do_sendfile+0x10/0x10 [ 953.098129] ? __fget_files+0x20d/0x3b0 [ 953.098170] __x64_sys_sendfile64+0x1d3/0x210 [ 953.098207] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 953.098256] do_syscall_64+0xbf/0x390 [ 953.098287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.098311] RIP: 0033:0x7f67a1df3b19 [ 953.098329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 953.098350] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 953.098373] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 953.098388] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 953.098401] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 953.098414] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 953.098428] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 953.098465] 18:40:18 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r1 = fork() process_vm_readv(r1, &(0x7f0000002fc0)=[{&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000640)=""/18, 0x12}], 0x3, &(0x7f00000029c0)=[{&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000440)=""/185, 0x5a}, {&(0x7f0000000040)=""/60, 0x38}, {&(0x7f0000000540)=""/230, 0xe6}], 0x4, 0x0) clone3(&(0x7f0000002380)={0x20200080, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x18}, &(0x7f0000000340)=""/4096, 0x1000, &(0x7f0000001340)=""/4096, &(0x7f0000002340)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000002440)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) clone3(&(0x7f0000002480)={0x90002000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0xe}, &(0x7f0000003000)=""/102400, 0x19000, &(0x7f0000000180)=""/56, &(0x7f0000002500), 0x0, {r2}}, 0x58) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 953.239910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:18 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x1e}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:40:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 953.403059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:18 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:18 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:40:18 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:40:18 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 17) [ 953.718159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:27 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:40:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:40:27 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x21}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:40:27 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:40:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:27 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:27 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 18) [ 962.882152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/204, 0xcc}, {&(0x7f0000000000)=""/98, 0x62}, {&(0x7f0000000200)=""/220, 0xdc}], 0x3) [ 962.954330] FAULT_INJECTION: forcing a failure. [ 962.954330] name failslab, interval 1, probability 0, space 0, times 0 [ 962.956241] CPU: 0 UID: 0 PID: 16579 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 962.956270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.956282] Call Trace: [ 962.956290] [ 962.956298] dump_stack_lvl+0xfa/0x120 [ 962.956330] should_fail_ex+0x4d7/0x5e0 [ 962.956359] ? __es_insert_extent+0xed2/0x1370 [ 962.956385] should_failslab+0xc2/0x120 [ 962.956416] kmem_cache_alloc_noprof+0x80/0x690 [ 962.956454] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 962.956486] ? __es_insert_extent+0xed2/0x1370 [ 962.956507] __es_insert_extent+0xed2/0x1370 [ 962.956550] ext4_es_insert_delayed_extent+0x383/0x8a0 [ 962.956583] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 962.956612] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 962.956635] ? find_held_lock+0x2b/0x80 [ 962.956659] ? ext4_da_reserve_space+0x1e0/0x430 [ 962.956685] ? lock_release+0xc8/0x290 [ 962.956716] ? do_raw_spin_unlock+0x53/0x220 [ 962.956737] ? _raw_spin_unlock+0x1e/0x40 [ 962.956769] ? ext4_da_reserve_space+0xf9/0x430 [ 962.956800] ext4_da_get_block_prep+0x8f6/0x1050 [ 962.956834] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 962.956864] ? find_held_lock+0x2b/0x80 [ 962.956886] ? create_empty_buffers+0x219/0x460 [ 962.956914] ? lock_release+0xc8/0x290 [ 962.956945] ? do_raw_spin_unlock+0x53/0x220 [ 962.956966] ? _raw_spin_unlock+0x1e/0x40 [ 962.956996] ? create_empty_buffers+0x219/0x460 [ 962.957028] ext4_block_write_begin+0x7d1/0xcd0 [ 962.957076] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 962.957106] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 962.957140] ? __filemap_get_folio_mpol+0x2c4/0x9a0 [ 962.957180] ext4_da_write_begin+0x4d8/0xb40 [ 962.957225] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 962.957259] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 962.957304] generic_perform_write+0x391/0x810 [ 962.957333] ? __pfx_current_time+0x10/0x10 [ 962.957370] ? __pfx_generic_perform_write+0x10/0x10 [ 962.957414] ext4_buffered_write_iter+0x11a/0x430 [ 962.957448] ext4_file_write_iter+0x1053/0x1a00 [ 962.957492] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 962.957527] ? splice_from_pipe_next.part.0+0x165/0x510 [ 962.957560] iter_file_splice_write+0xa3a/0x11f0 [ 962.957604] ? __pfx_iter_file_splice_write+0x10/0x10 [ 962.957661] ? lock_is_held_type+0x9e/0x120 [ 962.957683] ? __pfx_iter_file_splice_write+0x10/0x10 [ 962.957709] direct_splice_actor+0x192/0x7b0 [ 962.957736] splice_direct_to_actor+0x347/0x9d0 [ 962.957761] ? __pfx_direct_splice_actor+0x10/0x10 [ 962.957792] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 962.957817] ? lock_acquire+0x15e/0x2f0 [ 962.957853] do_splice_direct+0x179/0x250 [ 962.957874] ? __pfx_do_splice_direct+0x10/0x10 [ 962.957897] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 962.957938] ? security_file_permission+0x22/0x90 [ 962.957976] do_sendfile+0xa8e/0xdc0 [ 962.958010] ? __pfx_do_sendfile+0x10/0x10 [ 962.958036] ? __fget_files+0x20d/0x3b0 [ 962.958074] __x64_sys_sendfile64+0x1d3/0x210 [ 962.958106] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 962.958151] do_syscall_64+0xbf/0x390 [ 962.958179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.958201] RIP: 0033:0x7f67a1df3b19 [ 962.958219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.958239] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 962.958259] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 962.958274] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 962.958286] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.958299] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 962.958311] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 962.958347] 18:40:28 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0x3, 0x3, 0x800, 0x1}, 0x4f10, 0x3}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = pidfd_getfd(r2, r0, 0x0) close_range(r3, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x1) close_range(r6, r9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000)={0x3, 'sit0\x00', {0x80}, 0x80}) 18:40:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 963.218053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:28 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:28 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x22}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:40:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 963.435800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:28 executing program 4: ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@remote, 0x1a}) [ 963.750808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:39 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 19) 18:40:39 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:40:39 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x23}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:40:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() fchdir(r0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@remote, @broadcast}, 0xc) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:40:39 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0x3, 0x3, 0x800, 0x1}, 0x4f10, 0x3}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = pidfd_getfd(r2, r0, 0x0) close_range(r3, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x1) close_range(r6, r9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000)={0x3, 'sit0\x00', {0x80}, 0x80}) 18:40:39 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:39 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 974.210453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:39 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x52) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x80, 0x0, 0x3, 0x0, 0x0, 0x243, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x48, 0x4, @perf_config_ext={0xffffffffffffff00, 0x9}, 0x10010, 0x4, 0xe95, 0x0, 0x7, 0x400, 0x7, 0x0, 0x8, 0x0, 0xfff}, 0xffffffffffffffff, 0x0, r0, 0xb) 18:40:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:39 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 974.522138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000871000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cramfs\x00', 0x0) fadvise64(r0, 0x7fffffff, 0x2, 0x0) 18:40:39 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:40:48 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:48 executing program 4: munlockall() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) munlockall() sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x7fff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}}, 0xc041) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:40:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:48 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 20) 18:40:48 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:40:48 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:40:48 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x24}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 983.915768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5a}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000}, 0x8c000) [ 983.980890] FAULT_INJECTION: forcing a failure. [ 983.980890] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 983.982199] CPU: 0 UID: 0 PID: 16975 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 983.982217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 983.982225] Call Trace: [ 983.982229] [ 983.982234] dump_stack_lvl+0xfa/0x120 [ 983.982255] should_fail_ex+0x4d7/0x5e0 [ 983.982274] should_fail_alloc_page+0xe0/0x110 [ 983.982299] prepare_alloc_pages+0x1eb/0x550 [ 983.982316] ? ext4_es_insert_delayed_extent+0x42b/0x8a0 [ 983.982340] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 983.982368] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 983.982386] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 983.982400] ? find_held_lock+0x2b/0x80 [ 983.982417] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 983.982439] ? lock_release+0xc8/0x290 [ 983.982463] ? ext4_da_reserve_space+0xf9/0x430 [ 983.982483] ? perf_trace_lock+0xb5/0x5d0 [ 983.982504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 983.982533] ? policy_nodemask+0xeb/0x4e0 [ 983.982560] alloc_pages_mpol+0xed/0x340 [ 983.982572] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 983.982582] ? find_held_lock+0x2b/0x80 [ 983.982596] ? filemap_get_entry+0x1b1/0x3b0 [ 983.982618] ? lock_release+0xc8/0x290 [ 983.982640] folio_alloc_noprof+0x21/0x80 [ 983.982654] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 983.982672] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 983.982688] ? perf_trace_lock+0xb5/0x5d0 [ 983.982712] __filemap_get_folio_mpol+0x513/0x9a0 [ 983.982736] ext4_da_write_begin+0x3e4/0xb40 [ 983.982765] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 983.982788] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 983.982817] generic_perform_write+0x391/0x810 [ 983.982840] ? __pfx_generic_perform_write+0x10/0x10 [ 983.982865] ext4_buffered_write_iter+0x11a/0x430 [ 983.982886] ext4_file_write_iter+0x1053/0x1a00 [ 983.982912] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 983.982934] ? splice_from_pipe_next.part.0+0x165/0x510 [ 983.982954] iter_file_splice_write+0xa3a/0x11f0 [ 983.982979] ? __pfx_iter_file_splice_write+0x10/0x10 [ 983.983011] ? lock_is_held_type+0x9e/0x120 [ 983.983025] ? __pfx_iter_file_splice_write+0x10/0x10 [ 983.983040] direct_splice_actor+0x192/0x7b0 [ 983.983056] splice_direct_to_actor+0x347/0x9d0 [ 983.983075] ? __pfx_direct_splice_actor+0x10/0x10 [ 983.983092] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 983.983107] ? lock_acquire+0x15e/0x2f0 [ 983.983130] do_splice_direct+0x179/0x250 [ 983.983143] ? __pfx_do_splice_direct+0x10/0x10 [ 983.983156] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 983.983184] ? security_file_permission+0x22/0x90 [ 983.983209] do_sendfile+0xa8e/0xdc0 [ 983.983231] ? __pfx_do_sendfile+0x10/0x10 [ 983.983247] ? __fget_files+0x20d/0x3b0 [ 983.983271] __x64_sys_sendfile64+0x1d3/0x210 [ 983.983292] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 983.983321] do_syscall_64+0xbf/0x390 [ 983.983339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.983353] RIP: 0033:0x7f67a1df3b19 [ 983.983363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 983.983376] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 983.983388] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 983.983396] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 983.983404] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 983.983411] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 983.983418] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 983.983439] 18:40:49 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:40:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x1, 0x800, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) 18:40:49 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 21) [ 984.240367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:49 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:40:49 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x25}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:40:49 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 984.454493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:49 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:40:49 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 984.769658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:49 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x26}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 985.026000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:50 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 18:40:50 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 22) 18:40:50 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:50 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 985.347037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:40:59 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 18:40:59 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 23) 18:40:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pidfd_open(0x0, 0x0) close(r0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:40:59 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x56}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:40:59 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:40:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:40:59 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:40:59 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:40:59 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 994.950681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:00 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:41:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x98000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x63e2, 0x2, @perf_bp, 0x808d, 0x1, 0x2, 0x0, 0xc0000, 0x5, 0x7, 0x0, 0x0, 0x0, 0x4}, r3, 0xb, 0xffffffffffffffff, 0x9) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x7a1b90a1f6d1e7ed, 0x80, 0x2, 0x0, 0x9, 0x1, 0x0, 0x1f, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa9, 0x4, @perf_config_ext={0x800, 0x9}, 0x1000, 0x3, 0x10001, 0x4, 0x2, 0x8, 0x2, 0x0, 0x4d793012, 0x0, 0x8001}, 0x0, 0xc, 0xffffffffffffffff, 0xa) [ 995.010903] FAULT_INJECTION: forcing a failure. [ 995.010903] name failslab, interval 1, probability 0, space 0, times 0 [ 995.011822] CPU: 0 UID: 0 PID: 17364 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 995.011838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 995.011846] Call Trace: [ 995.011850] [ 995.011856] dump_stack_lvl+0xfa/0x120 [ 995.011876] should_fail_ex+0x4d7/0x5e0 [ 995.011894] should_failslab+0xc2/0x120 [ 995.011915] __kmalloc_cache_noprof+0x81/0x6b0 [ 995.011935] ? __might_fault+0xe0/0x190 [ 995.011948] ? alloc_pipe_info+0x10d/0x5a0 [ 995.011964] ? perf_trace_lock_acquire+0xc9/0x700 [ 995.011987] ? alloc_pipe_info+0x10d/0x5a0 [ 995.012001] alloc_pipe_info+0x10d/0x5a0 [ 995.012019] splice_direct_to_actor+0x78c/0x9d0 [ 995.012034] ? __pfx_direct_splice_actor+0x10/0x10 [ 995.012046] ? lock_acquire+0xd2/0x2f0 [ 995.012069] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 995.012083] ? lock_acquire+0x15e/0x2f0 [ 995.012101] do_splice_direct+0x179/0x250 [ 995.012113] ? __pfx_do_splice_direct+0x10/0x10 [ 995.012125] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 995.012148] ? security_file_permission+0x22/0x90 [ 995.012170] do_sendfile+0xa8e/0xdc0 [ 995.012189] ? __pfx_do_sendfile+0x10/0x10 [ 995.012203] ? __fget_files+0x20d/0x3b0 [ 995.012224] __x64_sys_sendfile64+0x1d3/0x210 [ 995.012241] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 995.012265] do_syscall_64+0xbf/0x390 [ 995.012290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.012303] RIP: 0033:0x7fa44b7e2b19 [ 995.012312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 995.012323] RSP: 002b:00007fa448d37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 995.012335] RAX: ffffffffffffffda RBX: 00007fa44b8f6020 RCX: 00007fa44b7e2b19 [ 995.012342] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 995.012349] RBP: 00007fa448d371d0 R08: 0000000000000000 R09: 0000000000000000 [ 995.012356] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 995.012363] R13: 00007fffae33b3bf R14: 00007fa448d37300 R15: 0000000000022000 [ 995.012382] 18:41:00 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) [ 995.283817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:41:00 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:41:00 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x60}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:41:00 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 995.519998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.839284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:09 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:41:09 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 24) 18:41:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:41:09 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:41:09 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 18:41:09 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x88) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) 18:41:09 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:41:09 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0xbe}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1004.398337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1004000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@cache_fscache}], [{@smackfshat={'smackfshat', 0x3d, '/dev/hpet\x00'}}, {@pcr={'pcr', 0x3d, 0x14}}, {@uid_gt={'uid>', 0xee00}}, {@hash}]}}) 18:41:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:41:09 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) [ 1004.548484] FAULT_INJECTION: forcing a failure. [ 1004.548484] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.549857] FAULT_INJECTION: forcing a failure. [ 1004.549857] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1004.550514] CPU: 1 UID: 0 PID: 17623 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1004.550544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.550557] Call Trace: [ 1004.550564] [ 1004.550572] dump_stack_lvl+0xfa/0x120 [ 1004.550602] should_fail_ex+0x4d7/0x5e0 [ 1004.550630] should_failslab+0xc2/0x120 [ 1004.550660] __kmalloc_noprof+0xcd/0x680 [ 1004.550696] ? alloc_pipe_info+0x1e8/0x5a0 [ 1004.550731] alloc_pipe_info+0x1e8/0x5a0 [ 1004.550764] splice_direct_to_actor+0x78c/0x9d0 [ 1004.550790] ? __pfx_direct_splice_actor+0x10/0x10 [ 1004.550812] ? lock_acquire+0xd2/0x2f0 [ 1004.550847] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1004.550873] ? lock_acquire+0x15e/0x2f0 [ 1004.550908] do_splice_direct+0x179/0x250 [ 1004.550929] ? __pfx_do_splice_direct+0x10/0x10 [ 1004.550952] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1004.550992] ? security_file_permission+0x22/0x90 [ 1004.551029] do_sendfile+0xa8e/0xdc0 [ 1004.551063] ? __pfx_do_sendfile+0x10/0x10 [ 1004.551095] ? __fget_files+0x20d/0x3b0 [ 1004.551133] __x64_sys_sendfile64+0x1d3/0x210 [ 1004.551165] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1004.551209] do_syscall_64+0xbf/0x390 [ 1004.551238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.551260] RIP: 0033:0x7fa44b7e2b19 [ 1004.551276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.551296] RSP: 002b:00007fa448d16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1004.551317] RAX: ffffffffffffffda RBX: 00007fa44b8f60e0 RCX: 00007fa44b7e2b19 [ 1004.551332] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1004.551344] RBP: 00007fa448d161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.551356] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1004.551368] R13: 00007fffae33b3bf R14: 00007fa448d16300 R15: 0000000000022000 [ 1004.551403] [ 1004.566938] CPU: 0 UID: 0 PID: 17619 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1004.566954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.566961] Call Trace: [ 1004.566966] [ 1004.566972] dump_stack_lvl+0xfa/0x120 [ 1004.566993] should_fail_ex+0x4d7/0x5e0 [ 1004.567012] should_fail_alloc_page+0xe0/0x110 [ 1004.567035] prepare_alloc_pages+0x1eb/0x550 [ 1004.567050] ? ext4_es_insert_delayed_extent+0x42b/0x8a0 [ 1004.567077] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1004.567100] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1004.567117] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1004.567130] ? find_held_lock+0x2b/0x80 [ 1004.567146] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1004.567164] ? lock_release+0xc8/0x290 [ 1004.567184] ? ext4_da_reserve_space+0xf9/0x430 [ 1004.567203] ? perf_trace_lock+0xb5/0x5d0 [ 1004.567221] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1004.567245] ? policy_nodemask+0xeb/0x4e0 [ 1004.567268] alloc_pages_mpol+0xed/0x340 [ 1004.567279] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1004.567289] ? find_held_lock+0x2b/0x80 [ 1004.567301] ? filemap_get_entry+0x1b1/0x3b0 [ 1004.567319] ? lock_release+0xc8/0x290 [ 1004.567338] folio_alloc_noprof+0x21/0x80 [ 1004.567351] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1004.567367] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1004.567382] ? perf_trace_lock+0xb5/0x5d0 [ 1004.567402] __filemap_get_folio_mpol+0x513/0x9a0 [ 1004.567423] ext4_da_write_begin+0x3e4/0xb40 [ 1004.567448] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1004.567467] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1004.567491] generic_perform_write+0x391/0x810 [ 1004.567513] ? __pfx_generic_perform_write+0x10/0x10 [ 1004.567535] ext4_buffered_write_iter+0x11a/0x430 [ 1004.567553] ext4_file_write_iter+0x1053/0x1a00 [ 1004.567577] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1004.567596] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1004.567615] iter_file_splice_write+0xa3a/0x11f0 [ 1004.567638] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1004.567669] ? lock_is_held_type+0x9e/0x120 [ 1004.567683] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1004.567697] direct_splice_actor+0x192/0x7b0 [ 1004.567711] splice_direct_to_actor+0x347/0x9d0 [ 1004.567725] ? __pfx_direct_splice_actor+0x10/0x10 [ 1004.567741] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1004.567755] ? lock_acquire+0x15e/0x2f0 [ 1004.567775] do_splice_direct+0x179/0x250 [ 1004.567786] ? __pfx_do_splice_direct+0x10/0x10 [ 1004.567799] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1004.567822] ? security_file_permission+0x22/0x90 [ 1004.567845] do_sendfile+0xa8e/0xdc0 [ 1004.567866] ? __pfx_do_sendfile+0x10/0x10 [ 1004.567879] ? __fget_files+0x20d/0x3b0 [ 1004.567901] __x64_sys_sendfile64+0x1d3/0x210 [ 1004.567919] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1004.567943] do_syscall_64+0xbf/0x390 [ 1004.567959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.567972] RIP: 0033:0x7f67a1df3b19 [ 1004.567984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.567995] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1004.568007] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 1004.568015] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1004.568021] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.568028] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1004.568035] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 1004.568055] [ 1004.707406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:09 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:41:09 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0xf5}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1004.793921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x7f, 0x1, 0x40, 0x0, 0x7, 0x24, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x910, 0x4, 0xfff, 0x8, 0x5, 0x80000000, 0x9, 0x0, 0x8, 0x0, 0x3d5}, 0xffffffffffffffff, 0x4, r0, 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x4, 0x2, 0x4, 0x0, 0x10001, 0x80800, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x400}, 0x50, 0x32a, 0x4, 0x6, 0x20, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6d19}, 0xffffffffffffffff, 0x0, r1, 0x9) r2 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x3, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000300)="3a636b72ed84422930c913b72460f9d01e932565126ed0b9981460197ee9dbbbea8c7c46d27fb8af3b1d5d6e08bcb147e860bca13d529a54dc911fa13ea0f20f2ba1f0", 0x43, 0x8}, {&(0x7f0000000380)="1a0611b55a7fbabbb8a56cf905dd72675bed918e7ab8ea22a8dbcd6361989a3d6afe546240aa9cd630c60197244098f252a052fbd1fe5134e8f732e43452829939b3af85274e9cd2c43572104d184cd615581ffe9987d3578d4da35ac6e237e4fbd4c3c129691fd5f4e81c8e235c6a4eb46c204f91b6e6e95ea47dd725218d1053dfff73204ea7e7c5f38ecc44c03e1790c50d4addf809dd081d60c00feb6e45ae8fa3458fa909351e5f791968d0d83146958268325e35bccae14a6080dd0dbc739896a526f5ceae1f10b01507a7f2b6b95e260e4168176be6532ecd043cbda68ae2a14d87906f90678d2d606bd358f324", 0xf1, 0x3f}, {&(0x7f0000000480)="6d4bbc8e29c2b68b1b24259e6cefd55aad8d176931f02a8dae4cdc4bed50d163f0208a39", 0x24, 0x4}], 0xc00, &(0x7f0000000540)={[{@utf8no}, {@utf8no}, {@utf8}], [{@obj_user={'obj_user', 0x3d, '/dev/hpet\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/hpet\x00'}}, {@appraise}]}) dup2(r2, r1) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x1f, 0xaf, 0xfb, 0x8, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x1a000, 0x7, 0x6, 0x7, 0x1f, 0xc0, 0x3, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0xd, r1, 0x2) 18:41:09 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 18:41:10 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 1004.985336] vfat: Unknown parameter 'obj_user' [ 1005.055057] vfat: Unknown parameter 'obj_user' [ 1005.104481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:22 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:41:22 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 25) 18:41:22 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 18:41:22 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:41:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:41:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x9, 0x49, 0x52, 0x0, 0x9f5, 0x40242, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_bp, 0x0, 0x1, 0x7ff, 0x2, 0x5, 0x0, 0x6, 0x0, 0x39, 0x0, 0x3ff}, 0x0, 0x5, r0, 0x0) 18:41:22 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0xfc}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:41:22 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) [ 1017.569390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:22 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x20) 18:41:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:41:22 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) 18:41:22 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$getsig(0x4202, r1, 0xa23, &(0x7f0000004ac0)) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(r2, &(0x7f0000000740)=[{&(0x7f0000000100)=""/144, 0x90}, {&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/11, 0xb}, {&(0x7f00000004c0)=""/200, 0xc8}, {&(0x7f00000005c0)=""/4, 0x4}, {&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f00000006c0)=""/120, 0x78}], 0xa, &(0x7f0000000840)=[{&(0x7f0000000800)=""/10, 0xa}], 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7f, 0xfe, 0xff, 0x81, 0x0, 0x8001, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x7, 0xd9e3}, 0x40c81, 0x8, 0x8051, 0x2, 0x7fff, 0x3, 0x20, 0x0, 0x2, 0x0, 0x100000001}, r1, 0xf, r0, 0x6) [ 1017.876192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:22 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1017.979038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1018.285292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:35 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x2}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:41:35 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:41:35 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 26) 18:41:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x98000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x63e2, 0x2, @perf_bp, 0x808d, 0x1, 0x2, 0x0, 0xc0000, 0x5, 0x7, 0x0, 0x0, 0x0, 0x4}, r3, 0xb, 0xffffffffffffffff, 0x9) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x7a1b90a1f6d1e7ed, 0x80, 0x2, 0x0, 0x9, 0x1, 0x0, 0x1f, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa9, 0x4, @perf_config_ext={0x800, 0x9}, 0x1000, 0x3, 0x10001, 0x4, 0x2, 0x8, 0x2, 0x0, 0x4d793012, 0x0, 0x8001}, 0x0, 0xc, 0xffffffffffffffff, 0xa) 18:41:35 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:41:35 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) 18:41:35 executing program 0: r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:41:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1030.530866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:35 executing program 0: r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:41:35 executing program 0: r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1030.674561] FAULT_INJECTION: forcing a failure. [ 1030.674561] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.675627] CPU: 0 UID: 0 PID: 17922 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1030.675662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.675677] Call Trace: [ 1030.675685] [ 1030.675695] dump_stack_lvl+0xfa/0x120 [ 1030.675727] should_fail_ex+0x4d7/0x5e0 [ 1030.675761] should_failslab+0xc2/0x120 [ 1030.675800] __kmalloc_noprof+0xcd/0x680 [ 1030.675826] ? __pfx_perf_trace_lock+0x10/0x10 [ 1030.675849] ? copy_splice_read+0x15b/0xc00 [ 1030.675878] copy_splice_read+0x15b/0xc00 [ 1030.675902] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 1030.675922] ? __pfx_copy_splice_read+0x10/0x10 [ 1030.675945] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1030.675963] ? look_up_lock_class+0x56/0x150 [ 1030.675979] ? register_lock_class+0x41/0x560 [ 1030.676000] ? lockdep_init_map_type+0x4b/0x240 [ 1030.676022] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1030.676040] ? __pfx_copy_splice_read+0x10/0x10 [ 1030.676069] do_splice_read+0x1f8/0x2a0 [ 1030.676095] splice_direct_to_actor+0x2a8/0x9d0 [ 1030.676109] ? __pfx_direct_splice_actor+0x10/0x10 [ 1030.676126] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1030.676141] ? lock_acquire+0x15e/0x2f0 [ 1030.676163] do_splice_direct+0x179/0x250 [ 1030.676176] ? __pfx_do_splice_direct+0x10/0x10 [ 1030.676189] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1030.676215] ? security_file_permission+0x22/0x90 [ 1030.676240] do_sendfile+0xa8e/0xdc0 [ 1030.676261] ? __pfx_do_sendfile+0x10/0x10 [ 1030.676276] ? __fget_files+0x20d/0x3b0 [ 1030.676300] __x64_sys_sendfile64+0x1d3/0x210 [ 1030.676322] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1030.676350] do_syscall_64+0xbf/0x390 [ 1030.676368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.676381] RIP: 0033:0x7fa44b7e2b19 [ 1030.676391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1030.676403] RSP: 002b:00007fa448d37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1030.676415] RAX: ffffffffffffffda RBX: 00007fa44b8f6020 RCX: 00007fa44b7e2b19 [ 1030.676424] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1030.676431] RBP: 00007fa448d371d0 R08: 0000000000000000 R09: 0000000000000000 [ 1030.676439] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1030.676446] R13: 00007fffae33b3bf R14: 00007fa448d37300 R15: 0000000000022000 [ 1030.676466] [ 1030.737971] FAULT_INJECTION: forcing a failure. [ 1030.737971] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1030.739126] CPU: 0 UID: 0 PID: 18021 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) 18:41:35 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1030.739143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.739150] Call Trace: [ 1030.739154] [ 1030.739159] dump_stack_lvl+0xfa/0x120 [ 1030.739175] should_fail_ex+0x4d7/0x5e0 [ 1030.739191] should_fail_alloc_page+0xe0/0x110 [ 1030.739211] prepare_alloc_pages+0x1eb/0x550 [ 1030.739228] ? ext4_es_insert_delayed_extent+0x42b/0x8a0 [ 1030.739252] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1030.739278] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1030.739296] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1030.739310] ? find_held_lock+0x2b/0x80 [ 1030.739324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1030.739344] ? lock_release+0xc8/0x290 [ 1030.739366] ? ext4_da_reserve_space+0xf9/0x430 [ 1030.739386] ? perf_trace_lock+0xb5/0x5d0 [ 1030.739405] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1030.739432] ? policy_nodemask+0xeb/0x4e0 [ 1030.739457] alloc_pages_mpol+0xed/0x340 [ 1030.739469] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1030.739479] ? find_held_lock+0x2b/0x80 [ 1030.739492] ? filemap_get_entry+0x1b1/0x3b0 [ 1030.739512] ? lock_release+0xc8/0x290 [ 1030.739533] folio_alloc_noprof+0x21/0x80 [ 1030.739547] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1030.739564] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1030.739579] ? perf_trace_lock+0xb5/0x5d0 [ 1030.739602] __filemap_get_folio_mpol+0x513/0x9a0 [ 1030.739625] ext4_da_write_begin+0x3e4/0xb40 [ 1030.739653] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1030.739674] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1030.739701] generic_perform_write+0x391/0x810 [ 1030.739724] ? __pfx_generic_perform_write+0x10/0x10 [ 1030.739748] ext4_buffered_write_iter+0x11a/0x430 [ 1030.739768] ext4_file_write_iter+0x1053/0x1a00 [ 1030.739793] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1030.739814] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1030.739832] iter_file_splice_write+0xa3a/0x11f0 [ 1030.739857] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1030.739889] ? lock_is_held_type+0x9e/0x120 [ 1030.739901] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1030.739916] direct_splice_actor+0x192/0x7b0 [ 1030.739932] splice_direct_to_actor+0x347/0x9d0 [ 1030.739946] ? __pfx_direct_splice_actor+0x10/0x10 [ 1030.739963] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1030.739978] ? lock_acquire+0x15e/0x2f0 [ 1030.739999] do_splice_direct+0x179/0x250 [ 1030.740012] ? __pfx_do_splice_direct+0x10/0x10 [ 1030.740025] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1030.740049] ? security_file_permission+0x22/0x90 [ 1030.740075] do_sendfile+0xa8e/0xdc0 [ 1030.740095] ? __pfx_do_sendfile+0x10/0x10 [ 1030.740110] ? __fget_files+0x20d/0x3b0 [ 1030.740132] __x64_sys_sendfile64+0x1d3/0x210 [ 1030.740152] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1030.740182] do_syscall_64+0xbf/0x390 [ 1030.740198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.740210] RIP: 0033:0x7f67a1df3b19 [ 1030.740220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1030.740231] RSP: 002b:00007f679f327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1030.740243] RAX: ffffffffffffffda RBX: 00007f67a1f070e0 RCX: 00007f67a1df3b19 [ 1030.740251] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1030.740258] RBP: 00007f679f3271d0 R08: 0000000000000000 R09: 0000000000000000 [ 1030.740265] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1030.740272] R13: 00007ffd73202ddf R14: 00007f679f327300 R15: 0000000000022000 [ 1030.740292] 18:41:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1030.841245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:35 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x3}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:41:36 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) [ 1031.014899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.330803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:47 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x4}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:41:47 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:41:47 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:41:47 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) 18:41:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x98000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x63e2, 0x2, @perf_bp, 0x808d, 0x1, 0x2, 0x0, 0xc0000, 0x5, 0x7, 0x0, 0x0, 0x0, 0x4}, r3, 0xb, 0xffffffffffffffff, 0x9) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x7a1b90a1f6d1e7ed, 0x80, 0x2, 0x0, 0x9, 0x1, 0x0, 0x1f, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa9, 0x4, @perf_config_ext={0x800, 0x9}, 0x1000, 0x3, 0x10001, 0x4, 0x2, 0x8, 0x2, 0x0, 0x4d793012, 0x0, 0x8001}, 0x0, 0xc, 0xffffffffffffffff, 0xa) 18:41:47 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:41:47 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 27) 18:41:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1042.168229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.190444] FAULT_INJECTION: forcing a failure. [ 1042.190444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1042.191471] CPU: 1 UID: 0 PID: 18157 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1042.191488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.191496] Call Trace: [ 1042.191501] [ 1042.191506] dump_stack_lvl+0xfa/0x120 [ 1042.191526] should_fail_ex+0x4d7/0x5e0 [ 1042.191544] should_fail_alloc_page+0xe0/0x110 [ 1042.191566] prepare_alloc_pages+0x1eb/0x550 [ 1042.191583] ? __pfx_perf_trace_lock+0x10/0x10 [ 1042.191608] alloc_pages_bulk_noprof+0x148/0xc30 [ 1042.191632] ? find_held_lock+0x2b/0x80 [ 1042.191650] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1042.191675] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1042.191702] ? trace_kmalloc+0x1f/0xb0 [ 1042.191719] ? __kmalloc_noprof+0x274/0x680 [ 1042.191740] ? __pfx_perf_trace_lock+0x10/0x10 [ 1042.191761] ? copy_splice_read+0x15b/0xc00 [ 1042.191790] copy_splice_read+0x192/0xc00 [ 1042.191819] ? __pfx_copy_splice_read+0x10/0x10 [ 1042.191842] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1042.191860] ? look_up_lock_class+0x56/0x150 [ 1042.191875] ? register_lock_class+0x41/0x560 [ 1042.191894] ? lockdep_init_map_type+0x4b/0x240 [ 1042.191913] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1042.191930] ? __pfx_copy_splice_read+0x10/0x10 [ 1042.191953] do_splice_read+0x1f8/0x2a0 [ 1042.191976] splice_direct_to_actor+0x2a8/0x9d0 [ 1042.191990] ? __pfx_direct_splice_actor+0x10/0x10 [ 1042.192007] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1042.192022] ? lock_acquire+0x15e/0x2f0 [ 1042.192043] do_splice_direct+0x179/0x250 [ 1042.192055] ? __pfx_do_splice_direct+0x10/0x10 [ 1042.192072] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1042.192097] ? security_file_permission+0x22/0x90 [ 1042.192120] do_sendfile+0xa8e/0xdc0 [ 1042.192140] ? __pfx_do_sendfile+0x10/0x10 [ 1042.192155] ? __fget_files+0x20d/0x3b0 [ 1042.192178] __x64_sys_sendfile64+0x1d3/0x210 [ 1042.192198] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1042.192224] do_syscall_64+0xbf/0x390 [ 1042.192241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.192255] RIP: 0033:0x7fa44b7e2b19 [ 1042.192264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.192276] RSP: 002b:00007fa448d37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1042.192288] RAX: ffffffffffffffda RBX: 00007fa44b8f6020 RCX: 00007fa44b7e2b19 [ 1042.192297] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1042.192304] RBP: 00007fa448d371d0 R08: 0000000000000000 R09: 0000000000000000 [ 1042.192312] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1042.192319] R13: 00007fffae33b3bf R14: 00007fa448d37300 R15: 0000000000022000 [ 1042.192338] 18:41:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:41:47 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 1042.503792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:41:47 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) [ 1042.666266] FAULT_INJECTION: forcing a failure. [ 1042.666266] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.667282] CPU: 1 UID: 0 PID: 18276 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1042.667299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.667307] Call Trace: [ 1042.667311] [ 1042.667316] dump_stack_lvl+0xfa/0x120 [ 1042.667337] should_fail_ex+0x4d7/0x5e0 [ 1042.667356] should_failslab+0xc2/0x120 [ 1042.667376] __kmalloc_noprof+0xcd/0x680 [ 1042.667401] ? iter_file_splice_write+0x1cd/0x11f0 [ 1042.667421] iter_file_splice_write+0x1cd/0x11f0 [ 1042.667437] ? kfree+0x284/0x550 [ 1042.667457] ? copy_splice_read+0x83d/0xc00 [ 1042.667486] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1042.667501] ? __lock_acquire+0xc65/0x1b70 [ 1042.667538] ? lock_is_held_type+0x9e/0x120 [ 1042.667553] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1042.667568] direct_splice_actor+0x192/0x7b0 [ 1042.667584] splice_direct_to_actor+0x347/0x9d0 [ 1042.667598] ? __pfx_direct_splice_actor+0x10/0x10 [ 1042.667615] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1042.667630] ? lock_acquire+0x15e/0x2f0 [ 1042.667653] do_splice_direct+0x179/0x250 [ 1042.667665] ? __pfx_do_splice_direct+0x10/0x10 [ 1042.667679] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1042.667705] ? security_file_permission+0x22/0x90 [ 1042.667729] do_sendfile+0xa8e/0xdc0 [ 1042.667751] ? __pfx_do_sendfile+0x10/0x10 [ 1042.667766] ? __fget_files+0x20d/0x3b0 [ 1042.667790] __x64_sys_sendfile64+0x1d3/0x210 [ 1042.667812] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1042.667840] do_syscall_64+0xbf/0x390 [ 1042.667859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.667872] RIP: 0033:0x7fa44b7e2b19 [ 1042.667882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.667894] RSP: 002b:00007fa448d37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1042.667906] RAX: ffffffffffffffda RBX: 00007fa44b8f6020 RCX: 00007fa44b7e2b19 [ 1042.667914] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1042.667921] RBP: 00007fa448d371d0 R08: 0000000000000000 R09: 0000000000000000 [ 1042.667929] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1042.667936] R13: 00007fffae33b3bf R14: 00007fa448d37300 R15: 0000000000022000 [ 1042.667956] 18:41:58 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 28) 18:41:58 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:41:58 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:41:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x0, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:41:58 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x5}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:41:58 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:41:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x98000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x63e2, 0x2, @perf_bp, 0x808d, 0x1, 0x2, 0x0, 0xc0000, 0x5, 0x7, 0x0, 0x0, 0x0, 0x4}, r3, 0xb, 0xffffffffffffffff, 0x9) openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x7a1b90a1f6d1e7ed, 0x80, 0x2, 0x0, 0x9, 0x1, 0x0, 0x1f, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa9, 0x4, @perf_config_ext={0x800, 0x9}, 0x1000, 0x3, 0x10001, 0x4, 0x2, 0x8, 0x2, 0x0, 0x4d793012, 0x0, 0x8001}, 0x0, 0xc, 0xffffffffffffffff, 0xa) 18:41:58 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1053.095158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x0, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:41:58 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x0, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1053.296739] FAULT_INJECTION: forcing a failure. [ 1053.296739] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1053.298492] CPU: 0 UID: 0 PID: 18306 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1053.298522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.298534] Call Trace: [ 1053.298542] [ 1053.298551] dump_stack_lvl+0xfa/0x120 [ 1053.298583] should_fail_ex+0x4d7/0x5e0 [ 1053.298613] should_fail_alloc_page+0xe0/0x110 [ 1053.298647] prepare_alloc_pages+0x1eb/0x550 [ 1053.298673] ? ext4_es_insert_delayed_extent+0x42b/0x8a0 [ 1053.298711] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1053.298754] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1053.298783] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1053.298807] ? find_held_lock+0x2b/0x80 [ 1053.298832] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1053.298865] ? lock_release+0xc8/0x290 [ 1053.298901] ? ext4_da_reserve_space+0xf9/0x430 [ 1053.298933] ? perf_trace_lock+0xb5/0x5d0 [ 1053.298966] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1053.299007] ? policy_nodemask+0xeb/0x4e0 [ 1053.299046] alloc_pages_mpol+0xed/0x340 [ 1053.299074] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1053.299092] ? find_held_lock+0x2b/0x80 [ 1053.299114] ? filemap_get_entry+0x1b1/0x3b0 [ 1053.299146] ? lock_release+0xc8/0x290 [ 1053.299180] folio_alloc_noprof+0x21/0x80 [ 1053.299204] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1053.299234] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1053.299260] ? perf_trace_lock+0xb5/0x5d0 [ 1053.299298] __filemap_get_folio_mpol+0x513/0x9a0 [ 1053.299336] ext4_da_write_begin+0x3e4/0xb40 [ 1053.299381] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1053.299415] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1053.299460] generic_perform_write+0x391/0x810 [ 1053.299504] ? __pfx_generic_perform_write+0x10/0x10 [ 1053.299526] ? __mark_inode_dirty+0x254/0xd00 [ 1053.299562] ? generic_update_time+0xcb/0xf0 [ 1053.299591] ? mnt_put_write_access_file+0x45/0xe0 [ 1053.299623] ext4_buffered_write_iter+0x11a/0x430 [ 1053.299656] ext4_file_write_iter+0x1053/0x1a00 [ 1053.299699] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1053.299733] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1053.299765] iter_file_splice_write+0xa3a/0x11f0 [ 1053.299808] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1053.299864] ? lock_is_held_type+0x9e/0x120 [ 1053.299888] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1053.299914] direct_splice_actor+0x192/0x7b0 [ 1053.299940] splice_direct_to_actor+0x347/0x9d0 [ 1053.299965] ? __pfx_direct_splice_actor+0x10/0x10 [ 1053.299995] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1053.300020] ? lock_acquire+0x15e/0x2f0 [ 1053.300056] do_splice_direct+0x179/0x250 [ 1053.300077] ? __pfx_do_splice_direct+0x10/0x10 [ 1053.300100] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1053.300139] ? security_file_permission+0x22/0x90 [ 1053.300177] do_sendfile+0xa8e/0xdc0 [ 1053.300213] ? __pfx_do_sendfile+0x10/0x10 [ 1053.300238] ? __fget_files+0x20d/0x3b0 [ 1053.300276] __x64_sys_sendfile64+0x1d3/0x210 [ 1053.300308] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1053.300352] do_syscall_64+0xbf/0x390 [ 1053.300380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.300402] RIP: 0033:0x7f67a1df3b19 [ 1053.300419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.300440] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1053.300461] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 1053.300475] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1053.300487] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.300499] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1053.300512] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 1053.300548] 18:41:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x0, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1053.403505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:58 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x6}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1053.533614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:41:58 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:41:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x0, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:41:58 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:41:58 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) 18:41:58 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 29) 18:41:58 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) [ 1053.771825] FAULT_INJECTION: forcing a failure. [ 1053.771825] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.773380] CPU: 0 UID: 0 PID: 18435 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1053.773424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.773441] Call Trace: [ 1053.773451] [ 1053.773459] dump_stack_lvl+0xfa/0x120 [ 1053.773499] should_fail_ex+0x4d7/0x5e0 [ 1053.773542] should_failslab+0xc2/0x120 [ 1053.773591] __kmalloc_cache_noprof+0x81/0x6b0 [ 1053.773642] ? __might_fault+0xe0/0x190 [ 1053.773673] ? alloc_pipe_info+0x10d/0x5a0 [ 1053.773708] ? perf_trace_lock_acquire+0xc9/0x700 [ 1053.773740] ? alloc_pipe_info+0x10d/0x5a0 [ 1053.773762] alloc_pipe_info+0x10d/0x5a0 [ 1053.773793] splice_direct_to_actor+0x78c/0x9d0 [ 1053.773813] ? __pfx_direct_splice_actor+0x10/0x10 [ 1053.773830] ? lock_acquire+0xd2/0x2f0 [ 1053.773857] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1053.773877] ? lock_acquire+0x15e/0x2f0 [ 1053.773904] do_splice_direct+0x179/0x250 [ 1053.773921] ? __pfx_do_splice_direct+0x10/0x10 [ 1053.773939] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1053.773971] ? security_file_permission+0x22/0x90 [ 1053.774001] do_sendfile+0xa8e/0xdc0 [ 1053.774028] ? __pfx_do_sendfile+0x10/0x10 [ 1053.774047] ? __fget_files+0x20d/0x3b0 [ 1053.774084] __x64_sys_sendfile64+0x1d3/0x210 [ 1053.774110] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1053.774144] do_syscall_64+0xbf/0x390 [ 1053.774168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.774186] RIP: 0033:0x7fe11506eb19 [ 1053.774199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.774215] RSP: 002b:00007fe1125c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1053.774231] RAX: ffffffffffffffda RBX: 00007fe115182020 RCX: 00007fe11506eb19 [ 1053.774242] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1053.774252] RBP: 00007fe1125c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.774262] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1053.774272] R13: 00007fff78cc76bf R14: 00007fe1125c3300 R15: 0000000000022000 [ 1053.774299] [ 1053.838003] FAULT_INJECTION: forcing a failure. [ 1053.838003] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.839424] CPU: 0 UID: 0 PID: 18439 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1053.839446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.839456] Call Trace: [ 1053.839461] [ 1053.839468] dump_stack_lvl+0xfa/0x120 [ 1053.839491] should_fail_ex+0x4d7/0x5e0 [ 1053.839513] ? jbd2__journal_start+0x193/0x6b0 [ 1053.839531] should_failslab+0xc2/0x120 [ 1053.839554] kmem_cache_alloc_noprof+0x80/0x690 [ 1053.839589] ? jbd2__journal_start+0x193/0x6b0 [ 1053.839605] jbd2__journal_start+0x193/0x6b0 [ 1053.839627] __ext4_journal_start_sb+0x325/0x5d0 [ 1053.839652] ? ext4_dirty_inode+0xa5/0x130 [ 1053.839681] ext4_dirty_inode+0xa5/0x130 [ 1053.839706] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1053.839728] __mark_inode_dirty+0x1b7/0xd00 [ 1053.839756] generic_update_time+0xcb/0xf0 [ 1053.839782] file_modified+0x1f0/0x230 [ 1053.839806] ext4_file_write_iter+0xcae/0x1a00 [ 1053.839840] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1053.839860] ? trace_kmalloc+0x1f/0xb0 [ 1053.839879] ? __kmalloc_noprof+0x274/0x680 [ 1053.839904] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1053.839928] iter_file_splice_write+0xa3a/0x11f0 [ 1053.839961] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1053.840003] ? lock_is_held_type+0x9e/0x120 [ 1053.840022] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1053.840041] direct_splice_actor+0x192/0x7b0 [ 1053.840067] splice_direct_to_actor+0x347/0x9d0 [ 1053.840085] ? __pfx_direct_splice_actor+0x10/0x10 [ 1053.840108] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1053.840127] ? lock_acquire+0x15e/0x2f0 [ 1053.840156] do_splice_direct+0x179/0x250 [ 1053.840172] ? __pfx_do_splice_direct+0x10/0x10 [ 1053.840189] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1053.840219] ? security_file_permission+0x22/0x90 [ 1053.840248] do_sendfile+0xa8e/0xdc0 [ 1053.840274] ? __pfx_do_sendfile+0x10/0x10 [ 1053.840293] ? __fget_files+0x20d/0x3b0 [ 1053.840322] __x64_sys_sendfile64+0x1d3/0x210 [ 1053.840346] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1053.840380] do_syscall_64+0xbf/0x390 [ 1053.840401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.840418] RIP: 0033:0x7fa44b7e2b19 [ 1053.840431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.840446] RSP: 002b:00007fa448d37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1053.840461] RAX: ffffffffffffffda RBX: 00007fa44b8f6020 RCX: 00007fa44b7e2b19 [ 1053.840472] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1053.840481] RBP: 00007fa448d371d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.840490] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1053.840499] R13: 00007fffae33b3bf R14: 00007fa448d37300 R15: 0000000000022000 [ 1053.840526] [ 1053.844132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:08 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 11) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:42:08 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:42:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x0, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:42:08 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:42:08 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 1) 18:42:08 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:42:08 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 30) 18:42:08 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) [ 1063.398431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.423416] FAULT_INJECTION: forcing a failure. [ 1063.423416] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.424430] CPU: 1 UID: 0 PID: 18451 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1063.424447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1063.424455] Call Trace: [ 1063.424459] [ 1063.424464] dump_stack_lvl+0xfa/0x120 [ 1063.424484] should_fail_ex+0x4d7/0x5e0 [ 1063.424503] should_failslab+0xc2/0x120 [ 1063.424525] __kmalloc_noprof+0xcd/0x680 [ 1063.424549] ? copy_splice_read+0x15b/0xc00 [ 1063.424578] copy_splice_read+0x15b/0xc00 [ 1063.424605] ? _parse_integer_limit+0x181/0x1e0 [ 1063.424627] ? __pfx_copy_splice_read+0x10/0x10 [ 1063.424652] ? _kstrtoull+0x13e/0x200 [ 1063.424670] ? __pfx__kstrtoull+0x10/0x10 [ 1063.424692] ? __might_fault+0xe0/0x190 [ 1063.424708] ? perf_trace_lock_acquire+0xc9/0x700 [ 1063.424734] ? __pfx_copy_splice_read+0x10/0x10 [ 1063.424759] do_splice_read+0x1f8/0x2a0 [ 1063.424784] splice_direct_to_actor+0x2a8/0x9d0 [ 1063.424798] ? __pfx_direct_splice_actor+0x10/0x10 [ 1063.424815] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1063.424830] ? lock_acquire+0x15e/0x2f0 [ 1063.424851] do_splice_direct+0x179/0x250 [ 1063.424864] ? __pfx_do_splice_direct+0x10/0x10 [ 1063.424877] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1063.424901] ? security_file_permission+0x22/0x90 [ 1063.424925] do_sendfile+0xa8e/0xdc0 [ 1063.424946] ? __pfx_do_sendfile+0x10/0x10 [ 1063.424961] ? __fget_files+0x20d/0x3b0 [ 1063.424984] __x64_sys_sendfile64+0x1d3/0x210 [ 1063.425004] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1063.425030] do_syscall_64+0xbf/0x390 [ 1063.425048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.425070] RIP: 0033:0x7f52b3ebab19 [ 1063.425080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1063.425092] RSP: 002b:00007f52b1430188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1063.425104] RAX: ffffffffffffffda RBX: 00007f52b3fcdf60 RCX: 00007f52b3ebab19 [ 1063.425113] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1063.425120] RBP: 00007f52b14301d0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.425128] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1063.425135] R13: 00007ffead1c39bf R14: 00007f52b1430300 R15: 0000000000022000 [ 1063.425155] 18:42:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x0, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:42:08 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 2) [ 1063.716092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:08 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x9}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1064.008003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.320450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:21 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0xf}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:42:21 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 31) 18:42:21 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 3) 18:42:21 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:42:21 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 12) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:42:21 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:42:21 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 3) 18:42:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x0, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1076.826347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.831722] FAULT_INJECTION: forcing a failure. [ 1076.831722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1076.832700] CPU: 0 UID: 0 PID: 18597 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1076.832717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.832725] Call Trace: [ 1076.832729] [ 1076.832734] dump_stack_lvl+0xfa/0x120 [ 1076.832754] should_fail_ex+0x4d7/0x5e0 [ 1076.832772] should_fail_alloc_page+0xe0/0x110 [ 1076.832793] prepare_alloc_pages+0x1eb/0x550 [ 1076.832810] ? __pfx_perf_trace_lock+0x10/0x10 [ 1076.832834] alloc_pages_bulk_noprof+0x148/0xc30 [ 1076.832855] ? find_held_lock+0x2b/0x80 [ 1076.832872] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1076.832894] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1076.832919] ? trace_kmalloc+0x1f/0xb0 [ 1076.832935] ? __kmalloc_noprof+0x274/0x680 [ 1076.832956] ? copy_splice_read+0x15b/0xc00 [ 1076.832982] copy_splice_read+0x192/0xc00 [ 1076.833006] ? _parse_integer_limit+0x181/0x1e0 [ 1076.833026] ? __pfx_copy_splice_read+0x10/0x10 [ 1076.833048] ? _kstrtoull+0x13e/0x200 [ 1076.833069] ? __pfx__kstrtoull+0x10/0x10 [ 1076.833089] ? __might_fault+0xe0/0x190 [ 1076.833104] ? perf_trace_lock_acquire+0xc9/0x700 [ 1076.833127] ? __pfx_copy_splice_read+0x10/0x10 [ 1076.833149] do_splice_read+0x1f8/0x2a0 [ 1076.833172] splice_direct_to_actor+0x2a8/0x9d0 [ 1076.833186] ? __pfx_direct_splice_actor+0x10/0x10 [ 1076.833203] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1076.833227] ? lock_acquire+0x15e/0x2f0 [ 1076.833249] do_splice_direct+0x179/0x250 [ 1076.833261] ? __pfx_do_splice_direct+0x10/0x10 [ 1076.833274] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1076.833298] ? security_file_permission+0x22/0x90 [ 1076.833321] do_sendfile+0xa8e/0xdc0 [ 1076.833341] ? __pfx_do_sendfile+0x10/0x10 [ 1076.833356] ? __fget_files+0x20d/0x3b0 [ 1076.833378] __x64_sys_sendfile64+0x1d3/0x210 [ 1076.833398] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1076.833424] do_syscall_64+0xbf/0x390 [ 1076.833441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.833454] RIP: 0033:0x7f52b3ebab19 [ 1076.833464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.833476] RSP: 002b:00007f52b1430188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1076.833488] RAX: ffffffffffffffda RBX: 00007f52b3fcdf60 RCX: 00007f52b3ebab19 [ 1076.833496] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1076.833503] RBP: 00007f52b14301d0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.833511] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1076.833518] R13: 00007ffead1c39bf R14: 00007f52b1430300 R15: 0000000000022000 [ 1076.833537] [ 1076.924823] FAULT_INJECTION: forcing a failure. [ 1076.924823] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.926819] CPU: 1 UID: 0 PID: 18605 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1076.926859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.926873] Call Trace: [ 1076.926882] [ 1076.926892] dump_stack_lvl+0xfa/0x120 [ 1076.926926] should_fail_ex+0x4d7/0x5e0 [ 1076.926959] should_failslab+0xc2/0x120 [ 1076.926998] __kmalloc_noprof+0xcd/0x680 [ 1076.927044] ? alloc_pipe_info+0x1e8/0x5a0 [ 1076.927096] alloc_pipe_info+0x1e8/0x5a0 [ 1076.927138] splice_direct_to_actor+0x78c/0x9d0 [ 1076.927167] ? __pfx_direct_splice_actor+0x10/0x10 [ 1076.927193] ? lock_acquire+0xd2/0x2f0 [ 1076.927241] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1076.927270] ? lock_acquire+0x15e/0x2f0 [ 1076.927315] do_splice_direct+0x179/0x250 [ 1076.927340] ? __pfx_do_splice_direct+0x10/0x10 [ 1076.927366] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1076.927418] ? security_file_permission+0x22/0x90 [ 1076.927465] do_sendfile+0xa8e/0xdc0 [ 1076.927506] ? __pfx_do_sendfile+0x10/0x10 [ 1076.927537] ? __fget_files+0x20d/0x3b0 [ 1076.927582] __x64_sys_sendfile64+0x1d3/0x210 [ 1076.927624] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1076.927679] do_syscall_64+0xbf/0x390 [ 1076.927714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.927740] RIP: 0033:0x7fe11506eb19 [ 1076.927759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.927782] RSP: 002b:00007fe1125c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1076.927805] RAX: ffffffffffffffda RBX: 00007fe115182020 RCX: 00007fe11506eb19 [ 1076.927822] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1076.927836] RBP: 00007fe1125c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.927850] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1076.927865] R13: 00007fff78cc76bf R14: 00007fe1125c3300 R15: 0000000000022000 [ 1076.927903] 18:42:22 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 4) [ 1076.985612] FAULT_INJECTION: forcing a failure. [ 1076.985612] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.987638] CPU: 1 UID: 0 PID: 18604 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1076.987670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.987683] Call Trace: [ 1076.987690] [ 1076.987699] dump_stack_lvl+0xfa/0x120 [ 1076.987729] should_fail_ex+0x4d7/0x5e0 [ 1076.987760] should_failslab+0xc2/0x120 [ 1076.987793] __kmalloc_cache_noprof+0x81/0x6b0 [ 1076.987828] ? lock_acquire+0x15e/0x2f0 [ 1076.987860] ? __virt_addr_valid+0x1c6/0x5d0 [ 1076.987886] ? __iomap_dio_rw+0x262/0x1cd0 [ 1076.987914] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1076.987955] ? __iomap_dio_rw+0x262/0x1cd0 [ 1076.987983] __iomap_dio_rw+0x262/0x1cd0 [ 1076.988019] ? mark_held_locks+0x49/0x80 [ 1076.988056] ? kasan_quarantine_put+0x84/0x1e0 [ 1076.988100] ? kmem_cache_free+0x2a4/0x540 [ 1076.988124] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1076.988162] ? jbd2_journal_stop+0x184/0xe20 [ 1076.988229] ? ext4_dirty_inode+0xf1/0x130 [ 1076.988266] ? __mark_inode_dirty+0x254/0xd00 [ 1076.988307] iomap_dio_rw+0x40/0xa0 [ 1076.988342] ext4_file_write_iter+0x11f3/0x1a00 [ 1076.988393] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1076.988432] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1076.988467] iter_file_splice_write+0xa3a/0x11f0 [ 1076.988516] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1076.988579] ? lock_is_held_type+0x9e/0x120 [ 1076.988604] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1076.988633] direct_splice_actor+0x192/0x7b0 [ 1076.988664] splice_direct_to_actor+0x347/0x9d0 [ 1076.988691] ? __pfx_direct_splice_actor+0x10/0x10 [ 1076.988725] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1076.988754] ? lock_acquire+0x15e/0x2f0 [ 1076.988793] do_splice_direct+0x179/0x250 [ 1076.988817] ? __pfx_do_splice_direct+0x10/0x10 [ 1076.988843] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1076.988888] ? security_file_permission+0x22/0x90 [ 1076.988929] do_sendfile+0xa8e/0xdc0 [ 1076.988967] ? __pfx_do_sendfile+0x10/0x10 [ 1076.988995] ? __fget_files+0x20d/0x3b0 [ 1076.989038] __x64_sys_sendfile64+0x1d3/0x210 [ 1076.989074] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1076.989124] do_syscall_64+0xbf/0x390 [ 1076.989155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.989178] RIP: 0033:0x7fa44b7e2b19 [ 1076.989196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.989231] RSP: 002b:00007fa448d37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1076.989254] RAX: ffffffffffffffda RBX: 00007fa44b8f6020 RCX: 00007fa44b7e2b19 [ 1076.989270] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1076.989283] RBP: 00007fa448d371d0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.989298] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1076.989314] R13: 00007fffae33b3bf R14: 00007fa448d37300 R15: 0000000000022000 [ 1076.989362] 18:42:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1077.163390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:22 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:42:22 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x11}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:42:22 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 13) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:42:22 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 4) [ 1077.418028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:22 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 5) 18:42:22 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:42:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:42:22 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 32) [ 1077.767294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:22 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1077.840508] FAULT_INJECTION: forcing a failure. [ 1077.840508] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.841940] CPU: 0 UID: 0 PID: 18837 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1077.841966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.841977] Call Trace: [ 1077.841984] [ 1077.841992] dump_stack_lvl+0xfa/0x120 [ 1077.842020] should_fail_ex+0x4d7/0x5e0 [ 1077.842047] should_failslab+0xc2/0x120 [ 1077.842084] __kmalloc_noprof+0xcd/0x680 [ 1077.842115] ? __pfx_perf_trace_lock+0x10/0x10 [ 1077.842146] ? obj_cgroup_charge_account+0x11a/0x6e0 [ 1077.842169] ? copy_splice_read+0x15b/0xc00 [ 1077.842209] copy_splice_read+0x15b/0xc00 [ 1077.842242] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 1077.842271] ? __pfx_copy_splice_read+0x10/0x10 [ 1077.842302] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1077.842329] ? look_up_lock_class+0x56/0x150 [ 1077.842353] ? register_lock_class+0x41/0x560 [ 1077.842381] ? lockdep_init_map_type+0x4b/0x240 [ 1077.842412] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1077.842438] ? __pfx_copy_splice_read+0x10/0x10 [ 1077.842473] do_splice_read+0x1f8/0x2a0 [ 1077.842510] splice_direct_to_actor+0x2a8/0x9d0 [ 1077.842531] ? __pfx_direct_splice_actor+0x10/0x10 [ 1077.842558] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1077.842580] ? lock_acquire+0x15e/0x2f0 [ 1077.842613] do_splice_direct+0x179/0x250 [ 1077.842632] ? __pfx_do_splice_direct+0x10/0x10 [ 1077.842652] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1077.842689] ? security_file_permission+0x22/0x90 [ 1077.842725] do_sendfile+0xa8e/0xdc0 [ 1077.842755] ? __pfx_do_sendfile+0x10/0x10 [ 1077.842778] ? __fget_files+0x20d/0x3b0 [ 1077.842813] __x64_sys_sendfile64+0x1d3/0x210 [ 1077.842843] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1077.842884] do_syscall_64+0xbf/0x390 [ 1077.842910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.842930] RIP: 0033:0x7f52b3ebab19 [ 1077.842945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.842963] RSP: 002b:00007f52b140f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1077.842981] RAX: ffffffffffffffda RBX: 00007f52b3fce020 RCX: 00007f52b3ebab19 [ 1077.842997] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1077.843009] RBP: 00007f52b140f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.843022] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1077.843033] R13: 00007ffead1c39bf R14: 00007f52b140f300 R15: 0000000000022000 [ 1077.843063] 18:42:23 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x12}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:42:23 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) [ 1078.015755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.052835] FAULT_INJECTION: forcing a failure. [ 1078.052835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1078.054707] CPU: 1 UID: 0 PID: 18878 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1078.054739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1078.054752] Call Trace: [ 1078.054760] [ 1078.054769] dump_stack_lvl+0xfa/0x120 [ 1078.054802] should_fail_ex+0x4d7/0x5e0 [ 1078.054833] should_fail_alloc_page+0xe0/0x110 [ 1078.054872] prepare_alloc_pages+0x1eb/0x550 [ 1078.054902] ? ext4_es_insert_delayed_extent+0x42b/0x8a0 [ 1078.054944] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1078.054996] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1078.055030] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1078.055056] ? find_held_lock+0x2b/0x80 [ 1078.055089] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1078.055130] ? lock_release+0xc8/0x290 [ 1078.055173] ? ext4_da_reserve_space+0xf9/0x430 [ 1078.055209] ? perf_trace_lock+0xb5/0x5d0 [ 1078.055247] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1078.055293] ? policy_nodemask+0xeb/0x4e0 [ 1078.055342] alloc_pages_mpol+0xed/0x340 [ 1078.055364] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1078.055383] ? find_held_lock+0x2b/0x80 [ 1078.055408] ? filemap_get_entry+0x1b1/0x3b0 [ 1078.055445] ? lock_release+0xc8/0x290 [ 1078.055487] folio_alloc_noprof+0x21/0x80 [ 1078.055514] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1078.055546] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1078.055575] ? perf_trace_lock+0xb5/0x5d0 [ 1078.055620] __filemap_get_folio_mpol+0x513/0x9a0 [ 1078.055666] ext4_da_write_begin+0x3e4/0xb40 [ 1078.055717] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1078.055756] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1078.055806] generic_perform_write+0x391/0x810 [ 1078.055847] ? __pfx_generic_perform_write+0x10/0x10 [ 1078.055872] ? __mark_inode_dirty+0x254/0xd00 [ 1078.055911] ? generic_update_time+0xcb/0xf0 [ 1078.055945] ? mnt_put_write_access_file+0x45/0xe0 [ 1078.055979] ext4_buffered_write_iter+0x11a/0x430 [ 1078.056016] ext4_file_write_iter+0x1053/0x1a00 [ 1078.056063] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1078.056101] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1078.056135] iter_file_splice_write+0xa3a/0x11f0 [ 1078.056181] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1078.056239] ? lock_is_held_type+0x9e/0x120 [ 1078.056264] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1078.056292] direct_splice_actor+0x192/0x7b0 [ 1078.056321] splice_direct_to_actor+0x347/0x9d0 [ 1078.056347] ? __pfx_direct_splice_actor+0x10/0x10 [ 1078.056379] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1078.056407] ? lock_acquire+0x15e/0x2f0 [ 1078.056446] do_splice_direct+0x179/0x250 [ 1078.056469] ? __pfx_do_splice_direct+0x10/0x10 [ 1078.056494] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1078.056539] ? security_file_permission+0x22/0x90 [ 1078.056581] do_sendfile+0xa8e/0xdc0 [ 1078.056624] ? __pfx_do_sendfile+0x10/0x10 [ 1078.056652] ? __fget_files+0x20d/0x3b0 [ 1078.056693] __x64_sys_sendfile64+0x1d3/0x210 [ 1078.056729] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1078.056779] do_syscall_64+0xbf/0x390 [ 1078.056809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.056833] RIP: 0033:0x7f67a1df3b19 [ 1078.056851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1078.056872] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1078.056894] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 1078.056910] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1078.056923] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.056936] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1078.056949] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 1078.056986] 18:42:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:42:23 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 6) [ 1078.264865] FAULT_INJECTION: forcing a failure. [ 1078.264865] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.266890] CPU: 1 UID: 0 PID: 18951 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1078.266935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1078.266955] Call Trace: [ 1078.266965] [ 1078.266979] dump_stack_lvl+0xfa/0x120 [ 1078.267023] should_fail_ex+0x4d7/0x5e0 [ 1078.267075] ? jbd2__journal_start+0x193/0x6b0 [ 1078.267115] should_failslab+0xc2/0x120 [ 1078.267158] kmem_cache_alloc_noprof+0x80/0x690 [ 1078.267198] ? lock_is_held_type+0x9e/0x120 [ 1078.267230] ? jbd2__journal_start+0x193/0x6b0 [ 1078.267255] jbd2__journal_start+0x193/0x6b0 [ 1078.267287] __ext4_journal_start_sb+0x325/0x5d0 [ 1078.267322] ? ext4_iomap_begin+0x5b8/0xe80 [ 1078.267354] ? ext4_meta_trans_blocks+0x256/0x310 [ 1078.267393] ext4_iomap_begin+0x5b8/0xe80 [ 1078.267445] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1078.267480] ? mark_held_locks+0x49/0x80 [ 1078.267520] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1078.267559] ? __create_object+0x59/0x80 [ 1078.267599] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1078.267635] iomap_iter+0x544/0xdb0 [ 1078.267672] __iomap_dio_rw+0x698/0x1cd0 [ 1078.267715] ? kasan_quarantine_put+0x84/0x1e0 [ 1078.267758] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1078.267834] ? ext4_dirty_inode+0xf1/0x130 [ 1078.267871] ? __mark_inode_dirty+0x254/0xd00 [ 1078.267914] iomap_dio_rw+0x40/0xa0 [ 1078.267949] ext4_file_write_iter+0x11f3/0x1a00 [ 1078.267997] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1078.268035] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1078.268069] iter_file_splice_write+0xa3a/0x11f0 [ 1078.268115] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1078.268174] ? lock_is_held_type+0x9e/0x120 [ 1078.268197] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1078.268225] direct_splice_actor+0x192/0x7b0 [ 1078.268254] splice_direct_to_actor+0x347/0x9d0 [ 1078.268280] ? __pfx_direct_splice_actor+0x10/0x10 [ 1078.268312] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1078.268339] ? lock_acquire+0x15e/0x2f0 [ 1078.268379] do_splice_direct+0x179/0x250 [ 1078.268402] ? __pfx_do_splice_direct+0x10/0x10 [ 1078.268427] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1078.268472] ? security_file_permission+0x22/0x90 [ 1078.268514] do_sendfile+0xa8e/0xdc0 [ 1078.268551] ? __pfx_do_sendfile+0x10/0x10 [ 1078.268579] ? __fget_files+0x20d/0x3b0 [ 1078.268620] __x64_sys_sendfile64+0x1d3/0x210 [ 1078.268657] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1078.268706] do_syscall_64+0xbf/0x390 [ 1078.268737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.268761] RIP: 0033:0x7fa44b7e2b19 [ 1078.268779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1078.268800] RSP: 002b:00007fa448d37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1078.268822] RAX: ffffffffffffffda RBX: 00007fa44b8f6020 RCX: 00007fa44b7e2b19 [ 1078.268838] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1078.268851] RBP: 00007fa448d371d0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.268864] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1078.268878] R13: 00007fffae33b3bf R14: 00007fa448d37300 R15: 0000000000022000 [ 1078.268915] [ 1078.331637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:35 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 5) 18:42:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x0, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:42:35 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 33) 18:42:35 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 15) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:42:35 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:42:35 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 7) 18:42:35 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x14}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:42:35 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1090.596782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1090.680056] FAULT_INJECTION: forcing a failure. [ 1090.680056] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.681464] CPU: 0 UID: 0 PID: 19090 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1090.681498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.681513] Call Trace: [ 1090.681521] [ 1090.681535] dump_stack_lvl+0xfa/0x120 [ 1090.681568] should_fail_ex+0x4d7/0x5e0 [ 1090.681601] should_failslab+0xc2/0x120 [ 1090.681640] __kmalloc_noprof+0xcd/0x680 [ 1090.681682] ? __pfx_perf_trace_lock+0x10/0x10 [ 1090.681725] ? copy_splice_read+0x15b/0xc00 [ 1090.681765] copy_splice_read+0x15b/0xc00 [ 1090.681788] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 1090.681809] ? __pfx_copy_splice_read+0x10/0x10 [ 1090.681831] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1090.681849] ? look_up_lock_class+0x56/0x150 [ 1090.681865] ? register_lock_class+0x41/0x560 [ 1090.681882] ? lockdep_init_map_type+0x4b/0x240 [ 1090.681902] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1090.681920] ? __pfx_copy_splice_read+0x10/0x10 [ 1090.681942] do_splice_read+0x1f8/0x2a0 [ 1090.681966] splice_direct_to_actor+0x2a8/0x9d0 [ 1090.681980] ? __pfx_direct_splice_actor+0x10/0x10 [ 1090.681997] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1090.682011] ? lock_acquire+0x15e/0x2f0 [ 1090.682032] do_splice_direct+0x179/0x250 [ 1090.682045] ? __pfx_do_splice_direct+0x10/0x10 [ 1090.682062] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1090.682086] ? security_file_permission+0x22/0x90 [ 1090.682110] do_sendfile+0xa8e/0xdc0 [ 1090.682130] ? __pfx_do_sendfile+0x10/0x10 [ 1090.682145] ? __fget_files+0x20d/0x3b0 [ 1090.682168] __x64_sys_sendfile64+0x1d3/0x210 [ 1090.682188] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1090.682214] do_syscall_64+0xbf/0x390 [ 1090.682231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.682244] RIP: 0033:0x7fe11506eb19 [ 1090.682254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.682266] RSP: 002b:00007fe1125c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1090.682278] RAX: ffffffffffffffda RBX: 00007fe115182020 RCX: 00007fe11506eb19 [ 1090.682287] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1090.682295] RBP: 00007fe1125c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.682302] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1090.682310] R13: 00007fff78cc76bf R14: 00007fe1125c3300 R15: 0000000000022000 [ 1090.682330] [ 1090.730301] FAULT_INJECTION: forcing a failure. [ 1090.730301] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1090.731299] CPU: 0 UID: 0 PID: 19189 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1090.731315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.731322] Call Trace: [ 1090.731326] [ 1090.731330] dump_stack_lvl+0xfa/0x120 [ 1090.731346] should_fail_ex+0x4d7/0x5e0 [ 1090.731362] should_fail_alloc_page+0xe0/0x110 [ 1090.731382] prepare_alloc_pages+0x1eb/0x550 [ 1090.731399] ? __pfx_perf_trace_lock+0x10/0x10 [ 1090.731422] alloc_pages_bulk_noprof+0x148/0xc30 [ 1090.731447] ? find_held_lock+0x2b/0x80 [ 1090.731464] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1090.731488] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1090.731515] ? trace_kmalloc+0x1f/0xb0 [ 1090.731531] ? __kmalloc_noprof+0x274/0x680 [ 1090.731552] ? __pfx_perf_trace_lock+0x10/0x10 [ 1090.731572] ? copy_splice_read+0x15b/0xc00 [ 1090.731599] copy_splice_read+0x192/0xc00 [ 1090.731628] ? __pfx_copy_splice_read+0x10/0x10 [ 1090.731650] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1090.731668] ? look_up_lock_class+0x56/0x150 [ 1090.731682] ? register_lock_class+0x41/0x560 [ 1090.731702] ? lockdep_init_map_type+0x4b/0x240 [ 1090.731723] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1090.731741] ? __pfx_copy_splice_read+0x10/0x10 [ 1090.731766] do_splice_read+0x1f8/0x2a0 [ 1090.731791] splice_direct_to_actor+0x2a8/0x9d0 [ 1090.731805] ? __pfx_direct_splice_actor+0x10/0x10 [ 1090.731822] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1090.731837] ? lock_acquire+0x15e/0x2f0 [ 1090.731860] do_splice_direct+0x179/0x250 [ 1090.731872] ? __pfx_do_splice_direct+0x10/0x10 [ 1090.731885] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1090.731911] ? security_file_permission+0x22/0x90 [ 1090.731934] do_sendfile+0xa8e/0xdc0 [ 1090.731954] ? __pfx_do_sendfile+0x10/0x10 [ 1090.731970] ? __fget_files+0x20d/0x3b0 [ 1090.731992] __x64_sys_sendfile64+0x1d3/0x210 [ 1090.732014] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1090.732041] do_syscall_64+0xbf/0x390 [ 1090.732063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.732075] RIP: 0033:0x7f52b3ebab19 [ 1090.732084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.732096] RSP: 002b:00007f52b13ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1090.732107] RAX: ffffffffffffffda RBX: 00007f52b3fce0e0 RCX: 00007f52b3ebab19 [ 1090.732115] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1090.732123] RBP: 00007f52b13ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.732130] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1090.732137] R13: 00007ffead1c39bf R14: 00007f52b13ee300 R15: 0000000000022000 [ 1090.732156] 18:42:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x0, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:42:35 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1090.905099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:35 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 8) 18:42:36 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 6) 18:42:36 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x15}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:42:36 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 1091.112332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.151639] FAULT_INJECTION: forcing a failure. [ 1091.151639] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.152683] CPU: 0 UID: 0 PID: 19256 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1091.152701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.152708] Call Trace: [ 1091.152713] [ 1091.152718] dump_stack_lvl+0xfa/0x120 [ 1091.152738] should_fail_ex+0x4d7/0x5e0 [ 1091.152756] should_failslab+0xc2/0x120 [ 1091.152775] __kmalloc_noprof+0xcd/0x680 [ 1091.152798] ? iter_file_splice_write+0x1cd/0x11f0 [ 1091.152818] iter_file_splice_write+0x1cd/0x11f0 [ 1091.152834] ? kfree+0x284/0x550 [ 1091.152852] ? copy_splice_read+0x83d/0xc00 [ 1091.152879] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1091.152894] ? __lock_acquire+0xc65/0x1b70 [ 1091.152931] ? lock_is_held_type+0x9e/0x120 [ 1091.152946] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1091.152961] direct_splice_actor+0x192/0x7b0 [ 1091.152977] splice_direct_to_actor+0x347/0x9d0 [ 1091.152991] ? __pfx_direct_splice_actor+0x10/0x10 [ 1091.153008] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1091.153023] ? lock_acquire+0x15e/0x2f0 [ 1091.153044] do_splice_direct+0x179/0x250 [ 1091.153057] ? __pfx_do_splice_direct+0x10/0x10 [ 1091.153074] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1091.153099] ? security_file_permission+0x22/0x90 [ 1091.153122] do_sendfile+0xa8e/0xdc0 [ 1091.153143] ? __pfx_do_sendfile+0x10/0x10 [ 1091.153158] ? __fget_files+0x20d/0x3b0 [ 1091.153181] __x64_sys_sendfile64+0x1d3/0x210 [ 1091.153201] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1091.153228] do_syscall_64+0xbf/0x390 [ 1091.153245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.153258] RIP: 0033:0x7f52b3ebab19 [ 1091.153268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.153280] RSP: 002b:00007f52b140f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1091.153293] RAX: ffffffffffffffda RBX: 00007f52b3fce020 RCX: 00007f52b3ebab19 [ 1091.153301] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1091.153308] RBP: 00007f52b140f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.153316] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1091.153323] R13: 00007ffead1c39bf R14: 00007f52b140f300 R15: 0000000000022000 [ 1091.153343] [ 1091.428400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:46 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 16) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:42:46 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:42:46 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x16}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:42:46 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:42:46 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 34) 18:42:46 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 9) 18:42:46 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 7) 18:42:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x0, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1101.632676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x0, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1101.722477] FAULT_INJECTION: forcing a failure. [ 1101.722477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1101.723471] CPU: 0 UID: 0 PID: 19332 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1101.723487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1101.723495] Call Trace: [ 1101.723500] [ 1101.723505] dump_stack_lvl+0xfa/0x120 [ 1101.723526] should_fail_ex+0x4d7/0x5e0 [ 1101.723544] should_fail_alloc_page+0xe0/0x110 [ 1101.723564] prepare_alloc_pages+0x1eb/0x550 [ 1101.723580] ? __pfx_perf_trace_lock+0x10/0x10 [ 1101.723603] alloc_pages_bulk_noprof+0x148/0xc30 [ 1101.723623] ? find_held_lock+0x2b/0x80 [ 1101.723639] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1101.723663] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1101.723685] ? trace_kmalloc+0x1f/0xb0 [ 1101.723699] ? __kmalloc_noprof+0x274/0x680 [ 1101.723716] ? __pfx_perf_trace_lock+0x10/0x10 [ 1101.723733] ? copy_splice_read+0x15b/0xc00 [ 1101.723758] copy_splice_read+0x192/0xc00 [ 1101.723782] ? __pfx_copy_splice_read+0x10/0x10 [ 1101.723800] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1101.723817] ? look_up_lock_class+0x56/0x150 [ 1101.723833] ? register_lock_class+0x41/0x560 [ 1101.723850] ? lockdep_init_map_type+0x4b/0x240 [ 1101.723868] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1101.723884] ? __pfx_copy_splice_read+0x10/0x10 [ 1101.723903] do_splice_read+0x1f8/0x2a0 [ 1101.723924] splice_direct_to_actor+0x2a8/0x9d0 [ 1101.723937] ? __pfx_direct_splice_actor+0x10/0x10 [ 1101.723953] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1101.723967] ? lock_acquire+0x15e/0x2f0 [ 1101.723986] do_splice_direct+0x179/0x250 [ 1101.723997] ? __pfx_do_splice_direct+0x10/0x10 [ 1101.724010] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1101.724031] ? security_file_permission+0x22/0x90 [ 1101.724054] do_sendfile+0xa8e/0xdc0 [ 1101.724077] ? __pfx_do_sendfile+0x10/0x10 [ 1101.724090] ? __fget_files+0x20d/0x3b0 [ 1101.724111] __x64_sys_sendfile64+0x1d3/0x210 [ 1101.724129] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1101.724153] do_syscall_64+0xbf/0x390 [ 1101.724169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.724182] RIP: 0033:0x7fe11506eb19 [ 1101.724192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1101.724204] RSP: 002b:00007fe1125c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1101.724215] RAX: ffffffffffffffda RBX: 00007fe115182020 RCX: 00007fe11506eb19 [ 1101.724223] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1101.724230] RBP: 00007fe1125c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.724237] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1101.724245] R13: 00007fff78cc76bf R14: 00007fe1125c3300 R15: 0000000000022000 [ 1101.724264] [ 1101.744780] FAULT_INJECTION: forcing a failure. [ 1101.744780] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1101.745864] CPU: 0 UID: 0 PID: 19331 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1101.745879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1101.745885] Call Trace: [ 1101.745889] [ 1101.745893] dump_stack_lvl+0xfa/0x120 [ 1101.745907] should_fail_ex+0x4d7/0x5e0 [ 1101.745922] should_fail_alloc_page+0xe0/0x110 [ 1101.745940] prepare_alloc_pages+0x1eb/0x550 [ 1101.745958] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1101.745986] ? lock_acquire+0x15e/0x2f0 [ 1101.746001] ? __is_insn_slot_addr+0x2e/0x290 [ 1101.746017] ? find_held_lock+0x2b/0x80 [ 1101.746029] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1101.746047] ? lock_release+0xc8/0x290 [ 1101.746075] ? perf_trace_lock+0xb5/0x5d0 [ 1101.746092] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1101.746112] ? policy_nodemask+0xeb/0x4e0 [ 1101.746135] alloc_pages_mpol+0xed/0x340 [ 1101.746146] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1101.746156] ? find_held_lock+0x2b/0x80 [ 1101.746168] ? filemap_get_entry+0x1b1/0x3b0 [ 1101.746185] ? lock_release+0xc8/0x290 [ 1101.746204] folio_alloc_noprof+0x21/0x80 [ 1101.746217] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1101.746234] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1101.746248] ? perf_trace_lock+0xb5/0x5d0 [ 1101.746268] __filemap_get_folio_mpol+0x513/0x9a0 [ 1101.746289] ext4_da_write_begin+0x3e4/0xb40 [ 1101.746316] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1101.746335] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1101.746359] generic_perform_write+0x391/0x810 [ 1101.746376] ? __pfx_current_time+0x10/0x10 [ 1101.746395] ? __pfx_generic_perform_write+0x10/0x10 [ 1101.746418] ext4_buffered_write_iter+0x11a/0x430 [ 1101.746437] ext4_file_write_iter+0x1053/0x1a00 [ 1101.746461] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1101.746480] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1101.746497] iter_file_splice_write+0xa3a/0x11f0 [ 1101.746521] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1101.746551] ? lock_is_held_type+0x9e/0x120 [ 1101.746563] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1101.746577] direct_splice_actor+0x192/0x7b0 [ 1101.746591] splice_direct_to_actor+0x347/0x9d0 [ 1101.746604] ? __pfx_direct_splice_actor+0x10/0x10 [ 1101.746621] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1101.746635] ? lock_acquire+0x15e/0x2f0 [ 1101.746654] do_splice_direct+0x179/0x250 [ 1101.746666] ? __pfx_do_splice_direct+0x10/0x10 [ 1101.746678] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1101.746700] ? security_file_permission+0x22/0x90 [ 1101.746720] do_sendfile+0xa8e/0xdc0 [ 1101.746738] ? __pfx_do_sendfile+0x10/0x10 [ 1101.746752] ? __fget_files+0x20d/0x3b0 [ 1101.746772] __x64_sys_sendfile64+0x1d3/0x210 [ 1101.746790] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1101.746814] do_syscall_64+0xbf/0x390 [ 1101.746829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.746840] RIP: 0033:0x7fa44b7e2b19 [ 1101.746850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1101.746860] RSP: 002b:00007fa448d37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1101.746871] RAX: ffffffffffffffda RBX: 00007fa44b8f6020 RCX: 00007fa44b7e2b19 [ 1101.746879] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1101.746886] RBP: 00007fa448d371d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.746893] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1101.746899] R13: 00007fffae33b3bf R14: 00007fa448d37300 R15: 0000000000022000 [ 1101.746919] 18:42:46 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 10) 18:42:46 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1101.947127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.089376] FAULT_INJECTION: forcing a failure. [ 1102.089376] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.091274] CPU: 1 UID: 0 PID: 19445 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1102.091305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1102.091319] Call Trace: [ 1102.091326] [ 1102.091335] dump_stack_lvl+0xfa/0x120 [ 1102.091367] should_fail_ex+0x4d7/0x5e0 [ 1102.091397] ? jbd2__journal_start+0x193/0x6b0 [ 1102.091422] should_failslab+0xc2/0x120 [ 1102.091456] kmem_cache_alloc_noprof+0x80/0x690 [ 1102.091507] ? jbd2__journal_start+0x193/0x6b0 [ 1102.091531] jbd2__journal_start+0x193/0x6b0 [ 1102.091563] __ext4_journal_start_sb+0x325/0x5d0 [ 1102.091598] ? ext4_dirty_inode+0xa5/0x130 [ 1102.091641] ext4_dirty_inode+0xa5/0x130 [ 1102.091681] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1102.091719] __mark_inode_dirty+0x1b7/0xd00 [ 1102.091760] generic_update_time+0xcb/0xf0 [ 1102.091797] file_modified+0x1f0/0x230 [ 1102.091834] ext4_file_write_iter+0x1185/0x1a00 [ 1102.091881] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1102.091919] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1102.091960] iter_file_splice_write+0xa3a/0x11f0 [ 1102.092006] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1102.092072] ? lock_is_held_type+0x9e/0x120 [ 1102.092097] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1102.092125] direct_splice_actor+0x192/0x7b0 [ 1102.092153] splice_direct_to_actor+0x347/0x9d0 [ 1102.092179] ? __pfx_direct_splice_actor+0x10/0x10 [ 1102.092212] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1102.092239] ? lock_acquire+0x15e/0x2f0 [ 1102.092280] do_splice_direct+0x179/0x250 [ 1102.092303] ? __pfx_do_splice_direct+0x10/0x10 [ 1102.092328] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1102.092373] ? security_file_permission+0x22/0x90 [ 1102.092414] do_sendfile+0xa8e/0xdc0 [ 1102.092452] ? __pfx_do_sendfile+0x10/0x10 [ 1102.092480] ? __fget_files+0x20d/0x3b0 [ 1102.092520] __x64_sys_sendfile64+0x1d3/0x210 [ 1102.092557] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1102.092606] do_syscall_64+0xbf/0x390 [ 1102.092637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.092661] RIP: 0033:0x7f52b3ebab19 [ 1102.092679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.092700] RSP: 002b:00007f52b140f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1102.092722] RAX: ffffffffffffffda RBX: 00007f52b3fce020 RCX: 00007f52b3ebab19 [ 1102.092738] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1102.092751] RBP: 00007f52b140f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.092764] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1102.092778] R13: 00007ffead1c39bf R14: 00007f52b140f300 R15: 0000000000022000 [ 1102.092815] 18:42:58 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 17) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:42:58 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:42:58 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 11) 18:42:58 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:42:58 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 8) 18:42:58 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 35) 18:42:58 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x17}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:42:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x0, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1113.038741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.121690] FAULT_INJECTION: forcing a failure. [ 1113.121690] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.123623] CPU: 0 UID: 0 PID: 19469 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1113.123655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.123668] Call Trace: [ 1113.123676] [ 1113.123685] dump_stack_lvl+0xfa/0x120 [ 1113.123718] should_fail_ex+0x4d7/0x5e0 [ 1113.123750] should_failslab+0xc2/0x120 [ 1113.123787] __kmalloc_noprof+0xcd/0x680 [ 1113.123831] ? iter_file_splice_write+0x1cd/0x11f0 [ 1113.123866] iter_file_splice_write+0x1cd/0x11f0 [ 1113.123896] ? kfree+0x284/0x550 [ 1113.123934] ? copy_splice_read+0x83d/0xc00 [ 1113.123988] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1113.124015] ? __lock_acquire+0xc65/0x1b70 [ 1113.124091] ? lock_is_held_type+0x9e/0x120 [ 1113.124118] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1113.124146] direct_splice_actor+0x192/0x7b0 [ 1113.124175] splice_direct_to_actor+0x347/0x9d0 [ 1113.124201] ? __pfx_direct_splice_actor+0x10/0x10 [ 1113.124234] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1113.124261] ? lock_acquire+0x15e/0x2f0 [ 1113.124304] do_splice_direct+0x179/0x250 [ 1113.124327] ? __pfx_do_splice_direct+0x10/0x10 [ 1113.124352] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1113.124401] ? security_file_permission+0x22/0x90 [ 1113.124446] do_sendfile+0xa8e/0xdc0 [ 1113.124485] ? __pfx_do_sendfile+0x10/0x10 [ 1113.124514] ? __fget_files+0x20d/0x3b0 [ 1113.124557] __x64_sys_sendfile64+0x1d3/0x210 [ 1113.124597] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1113.124649] do_syscall_64+0xbf/0x390 [ 1113.124682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.124706] RIP: 0033:0x7fe11506eb19 [ 1113.124724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1113.124746] RSP: 002b:00007fe1125c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1113.124768] RAX: ffffffffffffffda RBX: 00007fe115182020 RCX: 00007fe11506eb19 [ 1113.124783] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1113.124797] RBP: 00007fe1125c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.124810] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1113.124824] R13: 00007fff78cc76bf R14: 00007fe1125c3300 R15: 0000000000022000 [ 1113.124861] 18:42:58 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:42:58 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 12) [ 1113.217821] FAULT_INJECTION: forcing a failure. [ 1113.217821] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.219996] CPU: 0 UID: 0 PID: 19511 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1113.220026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.220038] Call Trace: [ 1113.220046] [ 1113.220054] dump_stack_lvl+0xfa/0x120 [ 1113.220094] should_fail_ex+0x4d7/0x5e0 [ 1113.220123] ? jbd2__journal_start+0x193/0x6b0 [ 1113.220147] should_failslab+0xc2/0x120 [ 1113.220177] kmem_cache_alloc_noprof+0x80/0x690 [ 1113.220212] ? stack_trace_save+0x8e/0xc0 [ 1113.220245] ? lock_is_held_type+0x9e/0x120 [ 1113.220276] ? jbd2__journal_start+0x193/0x6b0 [ 1113.220298] jbd2__journal_start+0x193/0x6b0 [ 1113.220328] __ext4_journal_start_sb+0x325/0x5d0 [ 1113.220360] ? ext4_iomap_begin+0x5b8/0xe80 [ 1113.220389] ? ext4_meta_trans_blocks+0x256/0x310 [ 1113.220423] ext4_iomap_begin+0x5b8/0xe80 [ 1113.220452] ? __pfx_perf_trace_lock+0x10/0x10 [ 1113.220500] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1113.220530] ? mark_held_locks+0x49/0x80 [ 1113.220564] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1113.220600] ? __create_object+0x59/0x80 [ 1113.220636] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1113.220668] iomap_iter+0x544/0xdb0 [ 1113.220704] __iomap_dio_rw+0x698/0x1cd0 [ 1113.220737] ? __virt_addr_valid+0x1c6/0x5d0 [ 1113.220766] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1113.220804] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1113.220843] ? kasan_quarantine_put+0x84/0x1e0 [ 1113.220897] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1113.220922] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1113.220947] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1113.220990] iomap_dio_rw+0x40/0xa0 [ 1113.221021] ext4_file_write_iter+0xe16/0x1a00 [ 1113.221067] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1113.221095] ? trace_kmalloc+0x1f/0xb0 [ 1113.221120] ? __kmalloc_noprof+0x274/0x680 [ 1113.221154] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1113.221187] iter_file_splice_write+0xa3a/0x11f0 [ 1113.221231] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1113.221288] ? lock_is_held_type+0x9e/0x120 [ 1113.221309] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1113.221335] direct_splice_actor+0x192/0x7b0 [ 1113.221362] splice_direct_to_actor+0x347/0x9d0 [ 1113.221387] ? __pfx_direct_splice_actor+0x10/0x10 [ 1113.221418] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1113.221443] ? lock_acquire+0x15e/0x2f0 [ 1113.221479] do_splice_direct+0x179/0x250 [ 1113.221501] ? __pfx_do_splice_direct+0x10/0x10 [ 1113.221524] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1113.221565] ? security_file_permission+0x22/0x90 [ 1113.221603] do_sendfile+0xa8e/0xdc0 [ 1113.221652] ? __pfx_do_sendfile+0x10/0x10 [ 1113.221677] ? __fget_files+0x20d/0x3b0 [ 1113.221716] __x64_sys_sendfile64+0x1d3/0x210 [ 1113.221749] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1113.221794] do_syscall_64+0xbf/0x390 [ 1113.221822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.221844] RIP: 0033:0x7fa44b7e2b19 [ 1113.221862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1113.221882] RSP: 002b:00007fa448d16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1113.221903] RAX: ffffffffffffffda RBX: 00007fa44b8f60e0 RCX: 00007fa44b7e2b19 [ 1113.221917] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1113.221930] RBP: 00007fa448d161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.221942] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1113.221955] R13: 00007fffae33b3bf R14: 00007fa448d16300 R15: 0000000000022000 [ 1113.221991] 18:42:58 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:42:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x0, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1113.398721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:42:58 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:42:58 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x18}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:42:58 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1113.528701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.550042] FAULT_INJECTION: forcing a failure. [ 1113.550042] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.551001] CPU: 1 UID: 0 PID: 19582 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1113.551038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.551054] Call Trace: [ 1113.551065] [ 1113.551076] dump_stack_lvl+0xfa/0x120 [ 1113.551111] should_fail_ex+0x4d7/0x5e0 [ 1113.551147] should_failslab+0xc2/0x120 [ 1113.551173] __kmalloc_cache_noprof+0x81/0x6b0 [ 1113.551196] ? lock_acquire+0x15e/0x2f0 [ 1113.551218] ? __virt_addr_valid+0x1c6/0x5d0 [ 1113.551233] ? __iomap_dio_rw+0x262/0x1cd0 [ 1113.551250] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1113.551275] ? __iomap_dio_rw+0x262/0x1cd0 [ 1113.551291] __iomap_dio_rw+0x262/0x1cd0 [ 1113.551311] ? mark_held_locks+0x49/0x80 [ 1113.551332] ? kasan_quarantine_put+0x84/0x1e0 [ 1113.551351] ? kmem_cache_free+0x2a4/0x540 [ 1113.551364] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1113.551385] ? jbd2_journal_stop+0x184/0xe20 [ 1113.551419] ? ext4_dirty_inode+0xf1/0x130 [ 1113.551441] ? __mark_inode_dirty+0x254/0xd00 [ 1113.551465] iomap_dio_rw+0x40/0xa0 [ 1113.551483] ext4_file_write_iter+0x11f3/0x1a00 [ 1113.551510] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1113.551531] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1113.551549] iter_file_splice_write+0xa3a/0x11f0 [ 1113.551574] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1113.551606] ? lock_is_held_type+0x9e/0x120 [ 1113.551621] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1113.551636] direct_splice_actor+0x192/0x7b0 [ 1113.551651] splice_direct_to_actor+0x347/0x9d0 [ 1113.551665] ? __pfx_direct_splice_actor+0x10/0x10 [ 1113.551683] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1113.551698] ? lock_acquire+0x15e/0x2f0 [ 1113.551719] do_splice_direct+0x179/0x250 [ 1113.551732] ? __pfx_do_splice_direct+0x10/0x10 [ 1113.551745] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1113.551770] ? security_file_permission+0x22/0x90 [ 1113.551795] do_sendfile+0xa8e/0xdc0 [ 1113.551816] ? __pfx_do_sendfile+0x10/0x10 [ 1113.551831] ? __fget_files+0x20d/0x3b0 [ 1113.551854] __x64_sys_sendfile64+0x1d3/0x210 [ 1113.551875] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1113.551901] do_syscall_64+0xbf/0x390 [ 1113.551919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.551932] RIP: 0033:0x7f52b3ebab19 [ 1113.551942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1113.551955] RSP: 002b:00007f52b140f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1113.551967] RAX: ffffffffffffffda RBX: 00007f52b3fce020 RCX: 00007f52b3ebab19 [ 1113.551975] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1113.551982] RBP: 00007f52b140f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.551990] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1113.551997] R13: 00007ffead1c39bf R14: 00007f52b140f300 R15: 0000000000022000 [ 1113.552017] 18:42:58 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 9) 18:42:58 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 36) 18:42:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:42:58 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 13) [ 1113.760319] FAULT_INJECTION: forcing a failure. [ 1113.760319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1113.761412] CPU: 1 UID: 0 PID: 19698 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1113.761429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.761437] Call Trace: [ 1113.761441] [ 1113.761446] dump_stack_lvl+0xfa/0x120 [ 1113.761466] should_fail_ex+0x4d7/0x5e0 [ 1113.761485] should_fail_alloc_page+0xe0/0x110 [ 1113.761508] prepare_alloc_pages+0x1eb/0x550 [ 1113.761523] ? ext4_es_insert_delayed_extent+0x42b/0x8a0 [ 1113.761546] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1113.761569] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1113.761589] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1113.761603] ? find_held_lock+0x2b/0x80 [ 1113.761618] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1113.761644] ? lock_release+0xc8/0x290 [ 1113.761664] ? ext4_da_reserve_space+0xf9/0x430 [ 1113.761682] ? perf_trace_lock+0xb5/0x5d0 [ 1113.761699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1113.761720] ? policy_nodemask+0xeb/0x4e0 [ 1113.761743] alloc_pages_mpol+0xed/0x340 [ 1113.761755] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1113.761764] ? find_held_lock+0x2b/0x80 [ 1113.761776] ? filemap_get_entry+0x1b1/0x3b0 [ 1113.761794] ? lock_release+0xc8/0x290 [ 1113.761813] folio_alloc_noprof+0x21/0x80 [ 1113.761825] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1113.761842] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1113.761856] ? perf_trace_lock+0xb5/0x5d0 [ 1113.761877] __filemap_get_folio_mpol+0x513/0x9a0 [ 1113.761898] ext4_da_write_begin+0x3e4/0xb40 [ 1113.761923] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1113.761941] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1113.761966] generic_perform_write+0x391/0x810 [ 1113.761987] ? __pfx_generic_perform_write+0x10/0x10 [ 1113.762010] ext4_buffered_write_iter+0x11a/0x430 [ 1113.762028] ext4_file_write_iter+0x1053/0x1a00 [ 1113.762052] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1113.762075] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1113.762094] iter_file_splice_write+0xa3a/0x11f0 [ 1113.762118] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1113.762149] ? lock_is_held_type+0x9e/0x120 [ 1113.762163] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1113.762177] direct_splice_actor+0x192/0x7b0 [ 1113.762192] splice_direct_to_actor+0x347/0x9d0 [ 1113.762206] ? __pfx_direct_splice_actor+0x10/0x10 [ 1113.762222] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1113.762236] ? lock_acquire+0x15e/0x2f0 [ 1113.762255] do_splice_direct+0x179/0x250 [ 1113.762267] ? __pfx_do_splice_direct+0x10/0x10 [ 1113.762279] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1113.762302] ? security_file_permission+0x22/0x90 [ 1113.762325] do_sendfile+0xa8e/0xdc0 [ 1113.762346] ? __pfx_do_sendfile+0x10/0x10 [ 1113.762360] ? __fget_files+0x20d/0x3b0 [ 1113.762381] __x64_sys_sendfile64+0x1d3/0x210 [ 1113.762399] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1113.762423] do_syscall_64+0xbf/0x390 [ 1113.762439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.762453] RIP: 0033:0x7f67a1df3b19 [ 1113.762463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1113.762475] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1113.762486] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 1113.762494] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1113.762501] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.762508] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1113.762515] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 1113.762535] [ 1113.809878] FAULT_INJECTION: forcing a failure. [ 1113.809878] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.810807] CPU: 1 UID: 0 PID: 19696 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1113.810822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.810829] Call Trace: [ 1113.810832] [ 1113.810837] dump_stack_lvl+0xfa/0x120 [ 1113.810853] should_fail_ex+0x4d7/0x5e0 [ 1113.810868] ? __es_insert_extent+0xed2/0x1370 [ 1113.810881] should_failslab+0xc2/0x120 [ 1113.810896] kmem_cache_alloc_noprof+0x80/0x690 [ 1113.810919] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 1113.810936] ? __es_insert_extent+0xed2/0x1370 [ 1113.810948] __es_insert_extent+0xed2/0x1370 [ 1113.810971] ext4_es_insert_delayed_extent+0x383/0x8a0 [ 1113.810989] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1113.811005] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1113.811017] ? find_held_lock+0x2b/0x80 [ 1113.811029] ? ext4_da_reserve_space+0x1e0/0x430 [ 1113.811043] ? lock_release+0xc8/0x290 [ 1113.811065] ? do_raw_spin_unlock+0x53/0x220 [ 1113.811076] ? _raw_spin_unlock+0x1e/0x40 [ 1113.811099] ? ext4_da_reserve_space+0xf9/0x430 [ 1113.811116] ext4_da_get_block_prep+0x8f6/0x1050 [ 1113.811134] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1113.811151] ? find_held_lock+0x2b/0x80 [ 1113.811163] ? create_empty_buffers+0x219/0x460 [ 1113.811181] ? lock_release+0xc8/0x290 [ 1113.811198] ? do_raw_spin_unlock+0x53/0x220 [ 1113.811210] ? _raw_spin_unlock+0x1e/0x40 [ 1113.811226] ? create_empty_buffers+0x219/0x460 [ 1113.811244] ext4_block_write_begin+0x7d1/0xcd0 [ 1113.811266] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1113.811283] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 1113.811301] ? __filemap_get_folio_mpol+0x2c4/0x9a0 [ 1113.811323] ext4_da_write_begin+0x4d8/0xb40 [ 1113.811347] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1113.811366] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1113.811391] generic_perform_write+0x391/0x810 [ 1113.811407] ? __pfx_current_time+0x10/0x10 [ 1113.811426] ? __pfx_generic_perform_write+0x10/0x10 [ 1113.811449] ext4_buffered_write_iter+0x11a/0x430 [ 1113.811467] ext4_file_write_iter+0x1053/0x1a00 [ 1113.811491] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1113.811510] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1113.811528] iter_file_splice_write+0xa3a/0x11f0 [ 1113.811552] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1113.811583] ? lock_is_held_type+0x9e/0x120 [ 1113.811595] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1113.811609] direct_splice_actor+0x192/0x7b0 [ 1113.811623] splice_direct_to_actor+0x347/0x9d0 [ 1113.811637] ? __pfx_direct_splice_actor+0x10/0x10 [ 1113.811653] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1113.811667] ? lock_acquire+0x15e/0x2f0 [ 1113.811687] do_splice_direct+0x179/0x250 [ 1113.811699] ? __pfx_do_splice_direct+0x10/0x10 [ 1113.811711] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1113.811733] ? security_file_permission+0x22/0x90 [ 1113.811754] do_sendfile+0xa8e/0xdc0 [ 1113.811772] ? __pfx_do_sendfile+0x10/0x10 [ 1113.811786] ? __fget_files+0x20d/0x3b0 [ 1113.811807] __x64_sys_sendfile64+0x1d3/0x210 [ 1113.811824] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1113.811849] do_syscall_64+0xbf/0x390 [ 1113.811864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.811875] RIP: 0033:0x7fa44b7e2b19 [ 1113.811884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1113.811895] RSP: 002b:00007fa448d16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1113.811906] RAX: ffffffffffffffda RBX: 00007fa44b8f60e0 RCX: 00007fa44b7e2b19 [ 1113.811914] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1113.811921] RBP: 00007fa448d161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.811928] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1113.811935] R13: 00007fffae33b3bf R14: 00007fa448d16300 R15: 0000000000022000 [ 1113.811954] [ 1113.845674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:09 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x19}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:43:09 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 10) 18:43:09 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 14) 18:43:09 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 19) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:43:09 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:43:09 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 37) 18:43:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:43:09 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1124.939692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.066691] FAULT_INJECTION: forcing a failure. [ 1125.066691] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.068726] CPU: 1 UID: 0 PID: 19828 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1125.068757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.068770] Call Trace: [ 1125.068778] [ 1125.068787] dump_stack_lvl+0xfa/0x120 [ 1125.068819] should_fail_ex+0x4d7/0x5e0 [ 1125.068850] ? jbd2__journal_start+0x193/0x6b0 [ 1125.068876] should_failslab+0xc2/0x120 [ 1125.068912] kmem_cache_alloc_noprof+0x80/0x690 [ 1125.068958] ? lock_is_held_type+0x9e/0x120 [ 1125.068991] ? jbd2__journal_start+0x193/0x6b0 [ 1125.069015] jbd2__journal_start+0x193/0x6b0 [ 1125.069046] __ext4_journal_start_sb+0x325/0x5d0 [ 1125.069088] ? ext4_iomap_begin+0x5b8/0xe80 [ 1125.069118] ? ext4_meta_trans_blocks+0x256/0x310 [ 1125.069155] ext4_iomap_begin+0x5b8/0xe80 [ 1125.069205] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1125.069238] ? mark_held_locks+0x49/0x80 [ 1125.069276] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1125.069313] ? __create_object+0x59/0x80 [ 1125.069350] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1125.069385] iomap_iter+0x544/0xdb0 [ 1125.069421] __iomap_dio_rw+0x698/0x1cd0 [ 1125.069463] ? kasan_quarantine_put+0x84/0x1e0 [ 1125.069500] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1125.069574] ? ext4_dirty_inode+0xf1/0x130 [ 1125.069609] ? __mark_inode_dirty+0x254/0xd00 [ 1125.069650] iomap_dio_rw+0x40/0xa0 [ 1125.069683] ext4_file_write_iter+0x11f3/0x1a00 [ 1125.069731] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1125.069782] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1125.069816] iter_file_splice_write+0xa3a/0x11f0 [ 1125.069862] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1125.069920] ? lock_is_held_type+0x9e/0x120 [ 1125.069943] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1125.069971] direct_splice_actor+0x192/0x7b0 [ 1125.069999] splice_direct_to_actor+0x347/0x9d0 [ 1125.070025] ? __pfx_direct_splice_actor+0x10/0x10 [ 1125.070057] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1125.070084] ? lock_acquire+0x15e/0x2f0 [ 1125.070122] do_splice_direct+0x179/0x250 [ 1125.070145] ? __pfx_do_splice_direct+0x10/0x10 [ 1125.070169] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1125.070212] ? security_file_permission+0x22/0x90 [ 1125.070252] do_sendfile+0xa8e/0xdc0 [ 1125.070288] ? __pfx_do_sendfile+0x10/0x10 [ 1125.070315] ? __fget_files+0x20d/0x3b0 [ 1125.070356] __x64_sys_sendfile64+0x1d3/0x210 [ 1125.070390] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1125.070438] do_syscall_64+0xbf/0x390 [ 1125.070467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.070491] RIP: 0033:0x7f52b3ebab19 [ 1125.070509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.070531] RSP: 002b:00007f52b140f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1125.070553] RAX: ffffffffffffffda RBX: 00007f52b3fce020 RCX: 00007f52b3ebab19 [ 1125.070569] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1125.070582] RBP: 00007f52b140f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.070595] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1125.070609] R13: 00007ffead1c39bf R14: 00007f52b140f300 R15: 0000000000022000 [ 1125.070645] [ 1125.159155] FAULT_INJECTION: forcing a failure. [ 1125.159155] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.160896] CPU: 1 UID: 0 PID: 19829 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1125.160927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.160939] Call Trace: [ 1125.160947] [ 1125.160955] dump_stack_lvl+0xfa/0x120 [ 1125.160985] should_fail_ex+0x4d7/0x5e0 [ 1125.161013] ? jbd2__journal_start+0x193/0x6b0 [ 1125.161038] should_failslab+0xc2/0x120 [ 1125.161079] kmem_cache_alloc_noprof+0x80/0x690 [ 1125.161136] ? jbd2__journal_start+0x193/0x6b0 [ 1125.161159] jbd2__journal_start+0x193/0x6b0 [ 1125.161190] __ext4_journal_start_sb+0x325/0x5d0 [ 1125.161226] ? ext4_dirty_inode+0xa5/0x130 [ 1125.161268] ext4_dirty_inode+0xa5/0x130 [ 1125.161306] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1125.161341] __mark_inode_dirty+0x1b7/0xd00 [ 1125.161381] generic_update_time+0xcb/0xf0 [ 1125.161418] file_modified+0x1f0/0x230 [ 1125.161455] ext4_file_write_iter+0x1185/0x1a00 [ 1125.161503] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1125.161540] ? iter_file_splice_write+0x624/0x11f0 [ 1125.161564] ? iter_file_splice_write+0x758/0x11f0 [ 1125.161594] iter_file_splice_write+0xa3a/0x11f0 [ 1125.161639] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1125.161698] ? lock_is_held_type+0x9e/0x120 [ 1125.161723] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1125.161750] direct_splice_actor+0x192/0x7b0 [ 1125.161792] splice_direct_to_actor+0x347/0x9d0 [ 1125.161818] ? __pfx_direct_splice_actor+0x10/0x10 [ 1125.161850] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1125.161878] ? lock_acquire+0x15e/0x2f0 [ 1125.161918] do_splice_direct+0x179/0x250 [ 1125.161941] ? __pfx_do_splice_direct+0x10/0x10 [ 1125.161965] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1125.162011] ? security_file_permission+0x22/0x90 [ 1125.162052] do_sendfile+0xa8e/0xdc0 [ 1125.162089] ? __pfx_do_sendfile+0x10/0x10 [ 1125.162118] ? __fget_files+0x20d/0x3b0 [ 1125.162162] __x64_sys_sendfile64+0x1d3/0x210 [ 1125.162199] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1125.162249] do_syscall_64+0xbf/0x390 [ 1125.162279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.162302] RIP: 0033:0x7fe11506eb19 [ 1125.162319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.162340] RSP: 002b:00007fe1125c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1125.162362] RAX: ffffffffffffffda RBX: 00007fe115182020 RCX: 00007fe11506eb19 [ 1125.162377] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1125.162390] RBP: 00007fe1125c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.162403] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1125.162417] R13: 00007fff78cc76bf R14: 00007fe1125c3300 R15: 0000000000022000 [ 1125.162454] 18:43:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1125.266977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:10 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1a}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:43:10 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 15) [ 1125.472049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:10 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:43:10 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:43:10 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 38) 18:43:10 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 11) 18:43:10 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) [ 1125.786628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:43:10 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1b}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1126.042019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.362990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:22 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 16) 18:43:22 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:43:22 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1c}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:43:22 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 12) 18:43:22 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:43:22 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 39) 18:43:22 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 21) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:43:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1137.377274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.569519] FAULT_INJECTION: forcing a failure. [ 1137.569519] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.571266] CPU: 1 UID: 0 PID: 20227 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1137.571297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1137.571311] Call Trace: [ 1137.571319] [ 1137.571328] dump_stack_lvl+0xfa/0x120 [ 1137.571361] should_fail_ex+0x4d7/0x5e0 [ 1137.571393] ? jbd2__journal_start+0x193/0x6b0 [ 1137.571421] should_failslab+0xc2/0x120 [ 1137.571460] kmem_cache_alloc_noprof+0x80/0x690 [ 1137.571507] ? lock_is_held_type+0x9e/0x120 [ 1137.571540] ? jbd2__journal_start+0x193/0x6b0 [ 1137.571565] jbd2__journal_start+0x193/0x6b0 [ 1137.571598] __ext4_journal_start_sb+0x325/0x5d0 [ 1137.571638] ? ext4_file_write_iter+0xd7f/0x1a00 [ 1137.571677] ext4_file_write_iter+0xd7f/0x1a00 [ 1137.571727] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1137.571761] ? trace_kmalloc+0x1f/0xb0 [ 1137.571792] ? __kmalloc_noprof+0x274/0x680 [ 1137.571833] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1137.571869] iter_file_splice_write+0xa3a/0x11f0 [ 1137.571915] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1137.571975] ? lock_is_held_type+0x9e/0x120 [ 1137.571998] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1137.572026] direct_splice_actor+0x192/0x7b0 [ 1137.572063] splice_direct_to_actor+0x347/0x9d0 [ 1137.572090] ? __pfx_direct_splice_actor+0x10/0x10 [ 1137.572122] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1137.572150] ? lock_acquire+0x15e/0x2f0 [ 1137.572194] do_splice_direct+0x179/0x250 [ 1137.572217] ? __pfx_do_splice_direct+0x10/0x10 [ 1137.572242] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1137.572293] ? security_file_permission+0x22/0x90 [ 1137.572337] do_sendfile+0xa8e/0xdc0 [ 1137.572376] ? __pfx_do_sendfile+0x10/0x10 [ 1137.572405] ? __fget_files+0x20d/0x3b0 [ 1137.572449] __x64_sys_sendfile64+0x1d3/0x210 [ 1137.572489] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1137.572547] do_syscall_64+0xbf/0x390 [ 1137.572580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.572604] RIP: 0033:0x7fe11506eb19 [ 1137.572622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1137.572643] RSP: 002b:00007fe1125a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1137.572665] RAX: ffffffffffffffda RBX: 00007fe1151820e0 RCX: 00007fe11506eb19 [ 1137.572681] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1137.572694] RBP: 00007fe1125a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1137.572708] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1137.572721] R13: 00007fff78cc76bf R14: 00007fe1125a2300 R15: 0000000000022000 [ 1137.572759] [ 1137.627732] FAULT_INJECTION: forcing a failure. [ 1137.627732] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.629891] CPU: 0 UID: 0 PID: 20217 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1137.629951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1137.629972] Call Trace: [ 1137.629983] [ 1137.629998] dump_stack_lvl+0xfa/0x120 [ 1137.630043] should_fail_ex+0x4d7/0x5e0 [ 1137.630081] should_failslab+0xc2/0x120 [ 1137.630115] __kmalloc_noprof+0xcd/0x680 [ 1137.630155] ? ext4_find_extent+0x7f5/0xa00 [ 1137.630204] ext4_find_extent+0x7f5/0xa00 [ 1137.630242] ? __pfx_perf_trace_lock+0x10/0x10 [ 1137.630288] ext4_ext_map_blocks+0x1cc/0x5f70 [ 1137.630312] ? find_held_lock+0x2b/0x80 [ 1137.630340] ? lock_release+0xc8/0x290 [ 1137.630380] ? unwind_next_frame+0x3bc/0x2540 [ 1137.630401] ? do_syscall_64+0xbf/0x390 [ 1137.630435] ? perf_trace_lock_acquire+0xc9/0x700 [ 1137.630469] ? perf_trace_lock_acquire+0xc9/0x700 [ 1137.630510] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1137.630553] ? lock_acquire+0x15e/0x2f0 [ 1137.630585] ? ext4_map_blocks+0x55b/0x14a0 [ 1137.630633] ? down_write+0x119/0x1f0 [ 1137.630661] ? __pfx_down_write+0x10/0x10 [ 1137.630686] ? ext4_es_lookup_extent+0xc8/0xb30 [ 1137.630726] ext4_map_blocks+0x624/0x14a0 [ 1137.630762] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1137.630803] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1137.630842] ? jbd2__journal_start+0xf6/0x6b0 [ 1137.630876] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1137.630909] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1137.630941] ? ext4_iomap_begin+0x5b8/0xe80 [ 1137.630973] ? ext4_meta_trans_blocks+0x256/0x310 [ 1137.631013] ext4_iomap_begin+0xa62/0xe80 [ 1137.631065] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1137.631100] ? mark_held_locks+0x49/0x80 [ 1137.631138] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1137.631177] ? __create_object+0x59/0x80 [ 1137.631218] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1137.631254] iomap_iter+0x544/0xdb0 [ 1137.631291] __iomap_dio_rw+0x698/0x1cd0 [ 1137.631335] ? kasan_quarantine_put+0x84/0x1e0 [ 1137.631375] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1137.631452] ? ext4_dirty_inode+0xf1/0x130 [ 1137.631490] ? __mark_inode_dirty+0x254/0xd00 [ 1137.631534] iomap_dio_rw+0x40/0xa0 [ 1137.631568] ext4_file_write_iter+0x11f3/0x1a00 [ 1137.631617] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1137.631655] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1137.631690] iter_file_splice_write+0xa3a/0x11f0 [ 1137.631736] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1137.631796] ? lock_is_held_type+0x9e/0x120 [ 1137.631820] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1137.631848] direct_splice_actor+0x192/0x7b0 [ 1137.631877] splice_direct_to_actor+0x347/0x9d0 [ 1137.631903] ? __pfx_direct_splice_actor+0x10/0x10 [ 1137.631935] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1137.631963] ? lock_acquire+0x15e/0x2f0 [ 1137.632003] do_splice_direct+0x179/0x250 [ 1137.632027] ? __pfx_do_splice_direct+0x10/0x10 [ 1137.632051] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1137.632097] ? security_file_permission+0x22/0x90 [ 1137.632139] do_sendfile+0xa8e/0xdc0 [ 1137.632177] ? __pfx_do_sendfile+0x10/0x10 [ 1137.632205] ? __fget_files+0x20d/0x3b0 [ 1137.632247] __x64_sys_sendfile64+0x1d3/0x210 [ 1137.632284] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1137.632333] do_syscall_64+0xbf/0x390 [ 1137.632364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.632388] RIP: 0033:0x7f52b3ebab19 [ 1137.632407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1137.632428] RSP: 002b:00007f52b140f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1137.632451] RAX: ffffffffffffffda RBX: 00007f52b3fce020 RCX: 00007f52b3ebab19 [ 1137.632466] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1137.632480] RBP: 00007f52b140f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1137.632493] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1137.632507] R13: 00007ffead1c39bf R14: 00007f52b140f300 R15: 0000000000022000 [ 1137.632545] 18:43:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1137.716618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:22 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1d}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:43:22 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 17) 18:43:23 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 22) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:43:23 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 1138.069102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:23 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:43:23 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 40) 18:43:23 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 13) [ 1138.395719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:43:33 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 14) 18:43:33 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 23) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:43:33 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) 18:43:33 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 18) 18:43:33 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000010000001800000062f1c0557be9b316a3a839061acf0d28160a1e1b1352214eb6aeccf31b403fa8a897e02aa707c684f60abbcbe192b43bee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:43:33 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1e}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:43:33 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 41) [ 1148.632421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.724861] FAULT_INJECTION: forcing a failure. [ 1148.724861] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.727172] CPU: 1 UID: 0 PID: 20499 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1148.727207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.727221] Call Trace: [ 1148.727230] [ 1148.727240] dump_stack_lvl+0xfa/0x120 [ 1148.727275] should_fail_ex+0x4d7/0x5e0 [ 1148.727308] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 1148.727343] should_failslab+0xc2/0x120 [ 1148.727378] kmem_cache_alloc_noprof+0x80/0x690 [ 1148.727435] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 1148.727469] ext4_mb_new_blocks+0x64e/0x45b0 [ 1148.727519] ? kasan_save_track+0x14/0x30 [ 1148.727554] ? __kasan_kmalloc+0x7f/0x90 [ 1148.727589] ? trace_kmalloc+0x1f/0xb0 [ 1148.727629] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1148.727667] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1148.727724] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 1148.727770] ? unwind_next_frame+0x3bc/0x2540 [ 1148.727794] ? do_syscall_64+0xbf/0x390 [ 1148.727829] ? perf_trace_lock_acquire+0xc9/0x700 [ 1148.727867] ? perf_trace_lock_acquire+0xc9/0x700 [ 1148.727911] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1148.727958] ? lock_acquire+0x15e/0x2f0 [ 1148.727993] ? ext4_map_blocks+0x55b/0x14a0 [ 1148.728047] ? __pfx_down_write+0x10/0x10 [ 1148.728083] ? ext4_es_lookup_extent+0xc8/0xb30 [ 1148.728126] ext4_map_blocks+0x624/0x14a0 [ 1148.728166] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1148.728209] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1148.728252] ? jbd2__journal_start+0xf6/0x6b0 [ 1148.728289] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1148.728324] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1148.728359] ? ext4_iomap_begin+0x5b8/0xe80 [ 1148.728392] ? ext4_meta_trans_blocks+0x256/0x310 [ 1148.728436] ext4_iomap_begin+0xa62/0xe80 [ 1148.728492] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1148.728529] ? mark_held_locks+0x49/0x80 [ 1148.728573] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1148.728614] ? __create_object+0x59/0x80 [ 1148.728656] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1148.728696] iomap_iter+0x544/0xdb0 [ 1148.728737] __iomap_dio_rw+0x698/0x1cd0 [ 1148.728785] ? kasan_quarantine_put+0x84/0x1e0 [ 1148.728826] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1148.728912] ? ext4_dirty_inode+0xf1/0x130 [ 1148.728952] ? __mark_inode_dirty+0x254/0xd00 [ 1148.728998] iomap_dio_rw+0x40/0xa0 [ 1148.729035] ext4_file_write_iter+0x11f3/0x1a00 [ 1148.729089] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1148.729131] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1148.729169] iter_file_splice_write+0xa3a/0x11f0 [ 1148.729222] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1148.729289] ? lock_is_held_type+0x9e/0x120 [ 1148.729315] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1148.729346] direct_splice_actor+0x192/0x7b0 [ 1148.729379] splice_direct_to_actor+0x347/0x9d0 [ 1148.729408] ? __pfx_direct_splice_actor+0x10/0x10 [ 1148.729445] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1148.729476] ? lock_acquire+0x15e/0x2f0 [ 1148.729519] do_splice_direct+0x179/0x250 [ 1148.729545] ? __pfx_do_splice_direct+0x10/0x10 [ 1148.729573] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1148.729622] ? security_file_permission+0x22/0x90 [ 1148.729667] do_sendfile+0xa8e/0xdc0 [ 1148.729708] ? __pfx_do_sendfile+0x10/0x10 [ 1148.729739] ? __fget_files+0x20d/0x3b0 [ 1148.729785] __x64_sys_sendfile64+0x1d3/0x210 [ 1148.729824] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1148.729878] do_syscall_64+0xbf/0x390 [ 1148.729911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.729938] RIP: 0033:0x7f52b3ebab19 [ 1148.729958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.729982] RSP: 002b:00007f52b140f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1148.730006] RAX: ffffffffffffffda RBX: 00007f52b3fce020 RCX: 00007f52b3ebab19 [ 1148.730024] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1148.730056] RBP: 00007f52b140f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.730072] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1148.730087] R13: 00007ffead1c39bf R14: 00007f52b140f300 R15: 0000000000022000 [ 1148.730129] 18:43:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1148.838855] FAULT_INJECTION: forcing a failure. [ 1148.838855] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.840548] CPU: 0 UID: 0 PID: 20498 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1148.840586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.840603] Call Trace: [ 1148.840612] [ 1148.840624] dump_stack_lvl+0xfa/0x120 [ 1148.840661] should_fail_ex+0x4d7/0x5e0 [ 1148.840698] ? jbd2__journal_start+0x193/0x6b0 [ 1148.840727] should_failslab+0xc2/0x120 [ 1148.840759] kmem_cache_alloc_noprof+0x80/0x690 [ 1148.840797] ? lock_is_held_type+0x9e/0x120 [ 1148.840827] ? jbd2__journal_start+0x193/0x6b0 [ 1148.840849] jbd2__journal_start+0x193/0x6b0 [ 1148.840878] __ext4_journal_start_sb+0x325/0x5d0 [ 1148.840909] ? ext4_iomap_begin+0x5b8/0xe80 [ 1148.840938] ? ext4_meta_trans_blocks+0x256/0x310 [ 1148.840972] ext4_iomap_begin+0x5b8/0xe80 [ 1148.841021] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1148.841051] ? mark_held_locks+0x49/0x80 [ 1148.841094] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1148.841133] ? __create_object+0x59/0x80 [ 1148.841168] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1148.841201] iomap_iter+0x544/0xdb0 [ 1148.841235] __iomap_dio_rw+0x698/0x1cd0 [ 1148.841276] ? kasan_quarantine_put+0x84/0x1e0 [ 1148.841311] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1148.841398] iomap_dio_rw+0x40/0xa0 [ 1148.841429] ext4_file_write_iter+0x11f3/0x1a00 [ 1148.841475] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1148.841509] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1148.841542] iter_file_splice_write+0xa3a/0x11f0 [ 1148.841586] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1148.841643] ? lock_is_held_type+0x9e/0x120 [ 1148.841665] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1148.841691] direct_splice_actor+0x192/0x7b0 [ 1148.841718] splice_direct_to_actor+0x347/0x9d0 [ 1148.841742] ? __pfx_direct_splice_actor+0x10/0x10 [ 1148.841773] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1148.841799] ? lock_acquire+0x15e/0x2f0 [ 1148.841835] do_splice_direct+0x179/0x250 [ 1148.841856] ? __pfx_do_splice_direct+0x10/0x10 [ 1148.841879] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1148.841920] ? security_file_permission+0x22/0x90 [ 1148.841957] do_sendfile+0xa8e/0xdc0 [ 1148.841992] ? __pfx_do_sendfile+0x10/0x10 [ 1148.842017] ? __fget_files+0x20d/0x3b0 [ 1148.842068] __x64_sys_sendfile64+0x1d3/0x210 [ 1148.842100] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1148.842145] do_syscall_64+0xbf/0x390 [ 1148.842173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.842195] RIP: 0033:0x7fe11506eb19 [ 1148.842212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.842232] RSP: 002b:00007fe1125c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1148.842253] RAX: ffffffffffffffda RBX: 00007fe115182020 RCX: 00007fe11506eb19 [ 1148.842267] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1148.842279] RBP: 00007fe1125c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.842292] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1148.842304] R13: 00007fff78cc76bf R14: 00007fe1125c3300 R15: 0000000000022000 [ 1148.842340] [ 1148.996359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:34 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 19) 18:43:34 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x21}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:43:34 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 15) 18:43:34 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 24) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:43:34 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1149.321183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1149.488949] FAULT_INJECTION: forcing a failure. [ 1149.488949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1149.490984] CPU: 0 UID: 0 PID: 20669 Comm: syz-executor.5 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1149.491016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1149.491029] Call Trace: [ 1149.491038] [ 1149.491047] dump_stack_lvl+0xfa/0x120 [ 1149.491086] should_fail_ex+0x4d7/0x5e0 [ 1149.491118] should_fail_alloc_page+0xe0/0x110 [ 1149.491158] prepare_alloc_pages+0x1eb/0x550 [ 1149.491188] ? ext4_es_insert_delayed_extent+0x42b/0x8a0 [ 1149.491230] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1149.491281] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1149.491316] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1149.491341] ? find_held_lock+0x2b/0x80 [ 1149.491368] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1149.491410] ? lock_release+0xc8/0x290 [ 1149.491453] ? ext4_da_reserve_space+0xf9/0x430 [ 1149.491489] ? perf_trace_lock+0xb5/0x5d0 [ 1149.491525] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1149.491565] ? policy_nodemask+0xeb/0x4e0 [ 1149.491607] alloc_pages_mpol+0xed/0x340 [ 1149.491630] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1149.491649] ? find_held_lock+0x2b/0x80 [ 1149.491672] ? filemap_get_entry+0x1b1/0x3b0 [ 1149.491705] ? lock_release+0xc8/0x290 [ 1149.491743] folio_alloc_noprof+0x21/0x80 [ 1149.491768] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1149.491799] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1149.491828] ? perf_trace_lock+0xb5/0x5d0 [ 1149.491868] __filemap_get_folio_mpol+0x513/0x9a0 [ 1149.491910] ext4_da_write_begin+0x3e4/0xb40 [ 1149.491958] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1149.491995] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1149.492042] generic_perform_write+0x391/0x810 [ 1149.492083] ? __pfx_generic_perform_write+0x10/0x10 [ 1149.492128] ext4_buffered_write_iter+0x11a/0x430 [ 1149.492164] ext4_file_write_iter+0x1053/0x1a00 [ 1149.492210] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1149.492246] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1149.492281] iter_file_splice_write+0xa3a/0x11f0 [ 1149.492327] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1149.492386] ? lock_is_held_type+0x9e/0x120 [ 1149.492411] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1149.492438] direct_splice_actor+0x192/0x7b0 [ 1149.492467] splice_direct_to_actor+0x347/0x9d0 [ 1149.492493] ? __pfx_direct_splice_actor+0x10/0x10 [ 1149.492525] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1149.492552] ? lock_acquire+0x15e/0x2f0 [ 1149.492590] do_splice_direct+0x179/0x250 [ 1149.492613] ? __pfx_do_splice_direct+0x10/0x10 [ 1149.492638] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1149.492681] ? security_file_permission+0x22/0x90 [ 1149.492721] do_sendfile+0xa8e/0xdc0 [ 1149.492758] ? __pfx_do_sendfile+0x10/0x10 [ 1149.492785] ? __fget_files+0x20d/0x3b0 [ 1149.492825] __x64_sys_sendfile64+0x1d3/0x210 [ 1149.492860] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1149.492908] do_syscall_64+0xbf/0x390 [ 1149.492938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.492962] RIP: 0033:0x7fa44b7e2b19 [ 1149.492980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1149.493002] RSP: 002b:00007fa448d37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1149.493025] RAX: ffffffffffffffda RBX: 00007fa44b8f6020 RCX: 00007fa44b7e2b19 [ 1149.493040] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1149.493053] RBP: 00007fa448d371d0 R08: 0000000000000000 R09: 0000000000000000 [ 1149.493067] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1149.493080] R13: 00007fffae33b3bf R14: 00007fa448d37300 R15: 0000000000022000 [ 1149.493118] [ 1149.668860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:45 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 25) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:43:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:43:45 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 16) 18:43:45 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 20) 18:43:45 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:43:45 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 42) 18:43:45 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:43:45 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x22}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1159.995262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1160.161979] FAULT_INJECTION: forcing a failure. [ 1160.161979] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1160.163216] CPU: 0 UID: 0 PID: 20697 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1160.163232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.163239] Call Trace: [ 1160.163244] [ 1160.163248] dump_stack_lvl+0xfa/0x120 [ 1160.163269] should_fail_ex+0x4d7/0x5e0 [ 1160.163287] should_fail_alloc_page+0xe0/0x110 [ 1160.163309] prepare_alloc_pages+0x1eb/0x550 [ 1160.163329] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1160.163355] ? lock_acquire+0x15e/0x2f0 [ 1160.163373] ? __is_insn_slot_addr+0x2e/0x290 [ 1160.163389] ? find_held_lock+0x2b/0x80 [ 1160.163401] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1160.163419] ? lock_release+0xc8/0x290 [ 1160.163444] ? perf_trace_lock+0xb5/0x5d0 [ 1160.163462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1160.163482] ? policy_nodemask+0xeb/0x4e0 [ 1160.163504] alloc_pages_mpol+0xed/0x340 [ 1160.163516] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1160.163525] ? find_held_lock+0x2b/0x80 [ 1160.163537] ? filemap_get_entry+0x1b1/0x3b0 [ 1160.163555] ? lock_release+0xc8/0x290 [ 1160.163573] folio_alloc_noprof+0x21/0x80 [ 1160.163586] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1160.163603] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1160.163617] ? perf_trace_lock+0xb5/0x5d0 [ 1160.163638] __filemap_get_folio_mpol+0x513/0x9a0 [ 1160.163659] ext4_da_write_begin+0x3e4/0xb40 [ 1160.163687] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1160.163705] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1160.163730] generic_perform_write+0x391/0x810 [ 1160.163747] ? __pfx_current_time+0x10/0x10 [ 1160.163766] ? __pfx_generic_perform_write+0x10/0x10 [ 1160.163789] ext4_buffered_write_iter+0x11a/0x430 [ 1160.163808] ext4_file_write_iter+0x1053/0x1a00 [ 1160.163832] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1160.163851] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1160.163870] iter_file_splice_write+0xa3a/0x11f0 [ 1160.163894] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1160.163924] ? lock_is_held_type+0x9e/0x120 [ 1160.163938] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1160.163952] direct_splice_actor+0x192/0x7b0 [ 1160.163967] splice_direct_to_actor+0x347/0x9d0 [ 1160.163980] ? __pfx_direct_splice_actor+0x10/0x10 [ 1160.163997] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1160.164011] ? lock_acquire+0x15e/0x2f0 [ 1160.164030] do_splice_direct+0x179/0x250 [ 1160.164042] ? __pfx_do_splice_direct+0x10/0x10 [ 1160.164058] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1160.164081] ? security_file_permission+0x22/0x90 [ 1160.164103] do_sendfile+0xa8e/0xdc0 [ 1160.164122] ? __pfx_do_sendfile+0x10/0x10 [ 1160.164136] ? __fget_files+0x20d/0x3b0 [ 1160.164157] __x64_sys_sendfile64+0x1d3/0x210 [ 1160.164175] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1160.164200] do_syscall_64+0xbf/0x390 [ 1160.164215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.164228] RIP: 0033:0x7fe11506eb19 [ 1160.164238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.164249] RSP: 002b:00007fe1125c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1160.164261] RAX: ffffffffffffffda RBX: 00007fe115182020 RCX: 00007fe11506eb19 [ 1160.164269] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1160.164275] RBP: 00007fe1125c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.164282] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1160.164289] R13: 00007fff78cc76bf R14: 00007fe1125c3300 R15: 0000000000022000 [ 1160.164309] [ 1160.208912] FAULT_INJECTION: forcing a failure. [ 1160.208912] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1160.209969] CPU: 0 UID: 0 PID: 20693 Comm: syz-executor.6 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1160.209985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.209991] Call Trace: [ 1160.209994] [ 1160.209999] dump_stack_lvl+0xfa/0x120 [ 1160.210015] should_fail_ex+0x4d7/0x5e0 [ 1160.210031] should_fail_alloc_page+0xe0/0x110 [ 1160.210050] prepare_alloc_pages+0x1eb/0x550 [ 1160.210068] ? ext4_es_insert_delayed_extent+0x42b/0x8a0 [ 1160.210088] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1160.210111] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1160.210127] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1160.210140] ? find_held_lock+0x2b/0x80 [ 1160.210152] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1160.210181] ? lock_release+0xc8/0x290 [ 1160.210200] ? ext4_da_reserve_space+0xf9/0x430 [ 1160.210218] ? perf_trace_lock+0xb5/0x5d0 [ 1160.210235] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1160.210258] ? policy_nodemask+0xeb/0x4e0 [ 1160.210280] alloc_pages_mpol+0xed/0x340 [ 1160.210291] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1160.210300] ? find_held_lock+0x2b/0x80 [ 1160.210312] ? filemap_get_entry+0x1b1/0x3b0 [ 1160.210330] ? lock_release+0xc8/0x290 [ 1160.210348] folio_alloc_noprof+0x21/0x80 [ 1160.210361] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1160.210377] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1160.210392] ? perf_trace_lock+0xb5/0x5d0 [ 1160.210412] __filemap_get_folio_mpol+0x513/0x9a0 [ 1160.210433] ext4_da_write_begin+0x3e4/0xb40 [ 1160.210458] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1160.210477] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1160.210501] generic_perform_write+0x391/0x810 [ 1160.210522] ? __pfx_generic_perform_write+0x10/0x10 [ 1160.210545] ext4_buffered_write_iter+0x11a/0x430 [ 1160.210563] ext4_file_write_iter+0x1053/0x1a00 [ 1160.210587] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1160.210606] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1160.210623] iter_file_splice_write+0xa3a/0x11f0 [ 1160.210646] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1160.210677] ? lock_is_held_type+0x9e/0x120 [ 1160.210689] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1160.210703] direct_splice_actor+0x192/0x7b0 [ 1160.210717] splice_direct_to_actor+0x347/0x9d0 [ 1160.210730] ? __pfx_direct_splice_actor+0x10/0x10 [ 1160.210747] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1160.210761] ? lock_acquire+0x15e/0x2f0 [ 1160.210780] do_splice_direct+0x179/0x250 [ 1160.210792] ? __pfx_do_splice_direct+0x10/0x10 [ 1160.210804] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1160.210826] ? security_file_permission+0x22/0x90 [ 1160.210846] do_sendfile+0xa8e/0xdc0 [ 1160.210865] ? __pfx_do_sendfile+0x10/0x10 [ 1160.210878] ? __fget_files+0x20d/0x3b0 [ 1160.210899] __x64_sys_sendfile64+0x1d3/0x210 [ 1160.210917] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1160.210941] do_syscall_64+0xbf/0x390 [ 1160.210956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.210967] RIP: 0033:0x7f67a1df3b19 [ 1160.210977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.210988] RSP: 002b:00007f679f348188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1160.210999] RAX: ffffffffffffffda RBX: 00007f67a1f07020 RCX: 00007f67a1df3b19 [ 1160.211006] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1160.211013] RBP: 00007f679f3481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.211021] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1160.211027] R13: 00007ffd73202ddf R14: 00007f679f348300 R15: 0000000000022000 [ 1160.211047] [ 1160.257375] FAULT_INJECTION: forcing a failure. [ 1160.257375] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.259502] CPU: 1 UID: 0 PID: 20699 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1160.259533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.259546] Call Trace: [ 1160.259554] [ 1160.259563] dump_stack_lvl+0xfa/0x120 [ 1160.259593] should_fail_ex+0x4d7/0x5e0 [ 1160.259622] ? __es_insert_extent+0xed2/0x1370 [ 1160.259646] should_failslab+0xc2/0x120 ** 1 printk messages dropped ** [ 1160.259717] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 1160.259752] ? __es_insert_extent+0xed2/0x1370 [ 1160.259775] __es_insert_extent+0xed2/0x1370 [ 1160.259822] ext4_es_insert_extent+0x4d0/0x1100 [ 1160.259865] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1160.259892] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1160.259931] ? percpu_counter_add_batch+0x126/0x240 [ 1160.259957] ? find_held_lock+0x2b/0x80 [ 1160.259985] ? lock_release+0xc8/0x290 [ 1160.260020] ? do_raw_read_unlock+0x44/0xe0 [ 1160.260045] ? ext4_es_lookup_extent+0xc8/0xb30 [ 1160.260092] ext4_map_blocks+0x7ff/0x14a0 [ 1160.260129] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1160.260166] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1160.260206] ? jbd2__journal_start+0xf6/0x6b0 [ 1160.260240] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1160.260272] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1160.260303] ? ext4_iomap_begin+0x5b8/0xe80 [ 1160.260332] ? ext4_meta_trans_blocks+0x256/0x310 [ 1160.260372] ext4_iomap_begin+0xa62/0xe80 [ 1160.260423] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1160.260456] ? mark_held_locks+0x49/0x80 [ 1160.260493] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1160.260529] ? __create_object+0x59/0x80 [ 1160.260569] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1160.260603] iomap_iter+0x544/0xdb0 [ 1160.260642] __iomap_dio_rw+0x698/0x1cd0 [ 1160.260687] ? kasan_quarantine_put+0x84/0x1e0 [ 1160.260725] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1160.260804] ? ext4_dirty_inode+0xf1/0x130 [ 1160.260840] ? __mark_inode_dirty+0x254/0xd00 [ 1160.260881] iomap_dio_rw+0x40/0xa0 [ 1160.260916] ext4_file_write_iter+0x11f3/0x1a00 [ 1160.260965] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1160.261003] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1160.261037] iter_file_splice_write+0xa3a/0x11f0 [ 1160.261086] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1160.261149] ? lock_is_held_type+0x9e/0x120 [ 1160.261173] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1160.261201] direct_splice_actor+0x192/0x7b0 [ 1160.261231] splice_direct_to_actor+0x347/0x9d0 [ 1160.261258] ? __pfx_direct_splice_actor+0x10/0x10 [ 1160.261291] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1160.261319] ? lock_acquire+0x15e/0x2f0 [ 1160.261358] do_splice_direct+0x179/0x250 [ 1160.261382] ? __pfx_do_splice_direct+0x10/0x10 [ 1160.261407] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1160.261451] ? security_file_permission+0x22/0x90 [ 1160.261492] do_sendfile+0xa8e/0xdc0 [ 1160.261529] ? __pfx_do_sendfile+0x10/0x10 [ 1160.261556] ? __fget_files+0x20d/0x3b0 [ 1160.261598] __x64_sys_sendfile64+0x1d3/0x210 [ 1160.261634] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1160.261683] do_syscall_64+0xbf/0x390 [ 1160.261714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.261737] RIP: 0033:0x7f52b3ebab19 [ 1160.261755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.261777] RSP: 002b:00007f52b13ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1160.261800] RAX: ffffffffffffffda RBX: 00007f52b3fce0e0 RCX: 00007f52b3ebab19 [ 1160.261816] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1160.261829] RBP: 00007f52b13ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.261843] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1160.261857] R13: 00007ffead1c39bf R14: 00007f52b13ee300 R15: 0000000000022000 [ 1160.261898] [ 1160.268120] ------------[ cut here ]------------ [ 1160.268175] WARNING: kernel/printk/printk_ringbuffer.c:1278 at get_data+0x364/0x400, CPU#1: syz-executor.4/20699 [ 1160.268226] Modules linked in: [ 1160.268256] CPU: 1 UID: 0 PID: 20699 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1160.268285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.268299] RIP: 0010:get_data+0x364/0x400 [ 1160.268330] Code: e8 83 e0 07 83 c0 03 38 d0 0f 8c be fe ff ff 84 d2 0f 84 b6 fe ff ff 48 89 ef e8 47 95 5b 00 e9 a9 fe ff ff e8 3d bb 1e 00 90 <0f> 0b 90 45 31 e4 e9 3b ff ff ff e8 2c bb 1e 00 90 0f 0b 90 45 31 [ 1160.268353] RSP: 0018:ffff88806cf08720 EFLAGS: 00010046 [ 1160.268373] RAX: 0000000000010001 RBX: ffff88806cf08838 RCX: ffffffff81555756 [ 1160.268389] RDX: ffff8880171f0000 RSI: ffffffff81555923 RDI: 0000000000000006 [ 1160.268405] RBP: ffff88806cf08800 R08: 0000000000001063 R09: 0000010e24ddae3e [ 1160.268420] R10: 0000000000000000 R11: 000050db82000023 R12: ffffffff85d30650 [ 1160.268435] R13: 00003fffffffffff R14: 0000000000000000 R15: 0000000000000000 [ 1160.268453] FS: 00007f52b13ee700(0000) GS:ffff8880e54f4000(0000) knlGS:0000000000000000 [ 1160.268476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1160.268491] CR2: 0000001b2d323000 CR3: 000000004a9a0000 CR4: 0000000000350ef0 [ 1160.268507] Call Trace: [ 1160.268514] [ 1160.268532] _prb_read_valid+0x2f3/0x830 [ 1160.268581] ? __pfx__prb_read_valid+0x10/0x10 [ 1160.268619] ? perf_trace_lock_acquire+0xc9/0x700 [ 1160.268651] ? __asan_memcpy+0x3d/0x60 [ 1160.268686] ? perf_trace_lock+0xb5/0x5d0 [ 1160.268725] prb_read_valid+0x78/0xa0 [ 1160.268759] ? __pfx_prb_read_valid+0x10/0x10 [ 1160.268795] ? io_serial_in+0x10/0x80 [ 1160.268825] printk_get_next_message+0x10b/0x570 [ 1160.268856] ? __pfx_printk_get_next_message+0x10/0x10 [ 1160.268883] ? __lock_acquire+0x694/0x1b70 [ 1160.268932] ? lock_acquire+0x15e/0x2f0 [ 1160.268961] ? console_flush_one_record+0x100/0xb20 [ 1160.268994] ? lock_is_held_type+0x9e/0x120 [ 1160.269024] console_flush_one_record+0x64f/0xb20 [ 1160.269059] ? __pfx_console_flush_one_record+0x10/0x10 [ 1160.269090] ? __lock_acquire+0x694/0x1b70 [ 1160.269130] ? do_raw_spin_lock+0x123/0x260 [ 1160.269173] __console_flush_and_unlock+0xb1/0x1d0 [ 1160.269199] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 1160.269225] ? do_raw_spin_unlock+0x53/0x220 [ 1160.269250] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1160.269279] ? is_printk_legacy_deferred+0x67/0x80 [ 1160.269314] wake_up_klogd_work_func+0x17c/0x1e0 [ 1160.269339] ? __pfx_wake_up_klogd_work_func+0x10/0x10 [ 1160.269367] ? lock_is_held_type+0x9e/0x120 [ 1160.269399] irq_work_single+0x128/0x260 [ 1160.269439] irq_work_run_list+0x91/0xc0 [ 1160.269462] update_process_times+0x12f/0x210 [ 1160.269493] tick_nohz_handler+0x414/0x6d0 [ 1160.269522] ? do_raw_spin_unlock+0x53/0x220 [ 1160.269542] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1160.269574] __hrtimer_run_queues+0x60f/0xac0 [ 1160.269619] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1160.269644] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 1160.269694] hrtimer_interrupt+0x369/0x830 [ 1160.269740] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 1160.269775] sysvec_apic_timer_interrupt+0x6b/0x80 [ 1160.269812] [ 1160.269819] [ 1160.269830] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1160.269854] RIP: 0010:dump_stack_lvl+0x115/0x120 [ 1160.269876] Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 86 87 72 fc e8 91 80 9c fc 48 89 ee 31 ff e8 c7 51 bc fc e8 62 56 bc fc e8 0d b3 c4 fc fb 5b <5d> 41 5c e9 53 56 bc fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 1160.269898] RSP: 0018:ffff888049d46eb0 EFLAGS: 00000206 [ 1160.269917] RAX: 00000000000001c9 RBX: ffffffff85f03720 RCX: 0000000000000040 [ 1160.269932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84b7be03 [ 1160.269947] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 [ 1160.269961] R10: ffffffff86646857 R11: 0000000000000001 R12: ffffffff855192e0 [ 1160.269976] R13: ffffffff85f03730 R14: 0000000000000000 R15: 0000000000000000 [ 1160.270008] ? dump_stack_lvl+0x113/0x120 [ 1160.270037] should_fail_ex+0x4d7/0x5e0 [ 1160.270065] ? __es_insert_extent+0xed2/0x1370 [ 1160.270089] should_failslab+0xc2/0x120 [ 1160.270119] kmem_cache_alloc_noprof+0x80/0x690 [ 1160.270157] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 1160.270206] ? __es_insert_extent+0xed2/0x1370 [ 1160.270229] __es_insert_extent+0xed2/0x1370 [ 1160.270275] ext4_es_insert_extent+0x4d0/0x1100 [ 1160.270317] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1160.270344] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1160.270379] ? percpu_counter_add_batch+0x126/0x240 [ 1160.270405] ? find_held_lock+0x2b/0x80 [ 1160.270432] ? lock_release+0xc8/0x290 [ 1160.270466] ? do_raw_read_unlock+0x44/0xe0 [ 1160.270491] ? ext4_es_lookup_extent+0xc8/0xb30 [ 1160.270529] ext4_map_blocks+0x7ff/0x14a0 [ 1160.270565] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1160.270602] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1160.270641] ? jbd2__journal_start+0xf6/0x6b0 [ 1160.270672] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1160.270703] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1160.270734] ? ext4_iomap_begin+0x5b8/0xe80 [ 1160.270764] ? ext4_meta_trans_blocks+0x256/0x310 [ 1160.270802] ext4_iomap_begin+0xa62/0xe80 [ 1160.270852] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1160.270885] ? mark_held_locks+0x49/0x80 [ 1160.270921] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1160.270957] ? __create_object+0x59/0x80 [ 1160.270993] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1160.271027] iomap_iter+0x544/0xdb0 [ 1160.271064] __iomap_dio_rw+0x698/0x1cd0 [ 1160.271106] ? kasan_quarantine_put+0x84/0x1e0 [ 1160.271144] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1160.271220] ? ext4_dirty_inode+0xf1/0x130 [ 1160.271254] ? __mark_inode_dirty+0x254/0xd00 [ 1160.271295] iomap_dio_rw+0x40/0xa0 [ 1160.271330] ext4_file_write_iter+0x11f3/0x1a00 [ 1160.271378] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1160.271415] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1160.271450] iter_file_splice_write+0xa3a/0x11f0 [ 1160.271496] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1160.271557] ? lock_is_held_type+0x9e/0x120 [ 1160.271581] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1160.271609] direct_splice_actor+0x192/0x7b0 [ 1160.271638] splice_direct_to_actor+0x347/0x9d0 [ 1160.271665] ? __pfx_direct_splice_actor+0x10/0x10 [ 1160.271698] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1160.271725] ? lock_acquire+0x15e/0x2f0 [ 1160.271763] do_splice_direct+0x179/0x250 [ 1160.271787] ? __pfx_do_splice_direct+0x10/0x10 [ 1160.271812] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1160.271855] ? security_file_permission+0x22/0x90 [ 1160.271893] do_sendfile+0xa8e/0xdc0 [ 1160.271929] ? __pfx_do_sendfile+0x10/0x10 [ 1160.271956] ? __fget_files+0x20d/0x3b0 [ 1160.271997] __x64_sys_sendfile64+0x1d3/0x210 [ 1160.272035] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1160.272083] do_syscall_64+0xbf/0x390 [ 1160.272113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.272135] RIP: 0033:0x7f52b3ebab19 [ 1160.272153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.272174] RSP: 002b:00007f52b13ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1160.272197] RAX: ffffffffffffffda RBX: 00007f52b3fce0e0 RCX: 00007f52b3ebab19 [ 1160.272213] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1160.272227] RBP: 00007f52b13ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.272241] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1160.272256] R13: 00007ffead1c39bf R14: 00007f52b13ee300 R15: 0000000000022000 [ 1160.272295] [ 1160.272303] irq event stamp: 458 [ 1160.272312] hardirqs last enabled at (457): [] dump_stack_lvl+0x113/0x120 [ 1160.272341] hardirqs last disabled at (458): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 1160.272381] softirqs last enabled at (452): [] handle_softirqs+0x50c/0x770 [ 1160.272410] softirqs last disabled at (447): [] __irq_exit_rcu+0xc4/0x100 [ 1160.272437] ---[ end trace 0000000000000000 ]--- [ 1160.306899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:45 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x23}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 18:43:45 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 26) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 18:43:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1160.568013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:45 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 21) 18:43:45 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) 18:43:45 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 17) 18:43:45 executing program 2: inotify_init() r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) [ 1160.821494] FAULT_INJECTION: forcing a failure. [ 1160.821494] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.823378] CPU: 1 UID: 0 PID: 20725 Comm: syz-executor.5 Tainted: G W 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 1160.823414] Tainted: [W]=WARN [ 1160.823421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.823434] Call Trace: [ 1160.823442] [ 1160.823451] dump_stack_lvl+0xfa/0x120 [ 1160.823483] should_fail_ex+0x4d7/0x5e0 [ 1160.823512] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 1160.823542] should_failslab+0xc2/0x120 [ 1160.823573] kmem_cache_alloc_noprof+0x80/0x690 [ 1160.823621] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 1160.823650] ext4_mb_new_blocks+0x64e/0x45b0 [ 1160.823691] ? perf_trace_lock+0xb5/0x5d0 [ 1160.823728] ? ext4_ind_map_blocks+0x263/0x2340 [ 1160.823768] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1160.823799] ? unwind_next_frame+0xb9/0x2540 [ 1160.823819] ? ext4_get_branch+0x588/0x740 [ 1160.823855] ? lock_acquire+0x15e/0x2f0 [ 1160.823890] ext4_ind_map_blocks+0x184b/0x2340 [ 1160.823934] ? do_syscall_64+0xbf/0x390 [ 1160.823971] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 1160.824026] ? lock_acquire+0x15e/0x2f0 [ 1160.824054] ? ext4_map_blocks+0x55b/0x14a0 [ 1160.824105] ? down_write+0x119/0x1f0 [ 1160.824131] ? __pfx_down_write+0x10/0x10 [ 1160.824156] ? lock_release+0xc8/0x290 18:43:45 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 43) [ 1160.824194] ext4_map_blocks+0xa9e/0x14a0 [ 1160.824227] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1160.824263] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1160.824300] ? jbd2__journal_start+0xf6/0x6b0 [ 1160.824331] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1160.824361] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1160.824390] ? ext4_iomap_begin+0x5b8/0xe80 [ 1160.824418] ? ext4_meta_trans_blocks+0x256/0x310 [ 1160.824455] ext4_iomap_begin+0xa62/0xe80 [ 1160.824502] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1160.824530] ? iomap_dio_bio_iter+0xdcb/0x14d0 [ 1160.824575] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1160.824607] iomap_iter+0x544/0xdb0 [ 1160.824641] __iomap_dio_rw+0x698/0x1cd0 [ 1160.824674] ? __virt_addr_valid+0x1c6/0x5d0 [ 1160.824702] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1160.824741] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1160.824781] ? kasan_quarantine_put+0x84/0x1e0 [ 1160.824835] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1160.824861] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1160.824886] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1160.824930] iomap_dio_rw+0x40/0xa0 [ 1160.824962] ext4_file_write_iter+0xe16/0x1a00 [ 1160.825008] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1160.825036] ? trace_kmalloc+0x1f/0xb0 [ 1160.825061] ? __kmalloc_noprof+0x274/0x680 [ 1160.825095] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1160.825129] iter_file_splice_write+0xa3a/0x11f0 [ 1160.825173] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1160.825231] ? lock_is_held_type+0x9e/0x120 [ 1160.825254] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1160.825281] direct_splice_actor+0x192/0x7b0 [ 1160.825308] splice_direct_to_actor+0x347/0x9d0 [ 1160.825333] ? __pfx_direct_splice_actor+0x10/0x10 [ 1160.825364] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1160.825391] ? lock_acquire+0x15e/0x2f0 [ 1160.825426] do_splice_direct+0x179/0x250 [ 1160.825448] ? __pfx_do_splice_direct+0x10/0x10 [ 1160.825472] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1160.825514] ? security_file_permission+0x22/0x90 [ 1160.825553] do_sendfile+0xa8e/0xdc0 [ 1160.825588] ? __pfx_do_sendfile+0x10/0x10 [ 1160.825614] ? __fget_files+0x20d/0x3b0 [ 1160.825654] __x64_sys_sendfile64+0x1d3/0x210 [ 1160.825686] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1160.825732] do_syscall_64+0xbf/0x390 [ 1160.825760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.825782] RIP: 0033:0x7fa44b7e2b19 [ 1160.825798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.825820] RSP: 002b:00007fa448d16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1160.825841] RAX: ffffffffffffffda RBX: 00007fa44b8f60e0 RCX: 00007fa44b7e2b19 [ 1160.825856] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1160.825868] RBP: 00007fa448d161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.825881] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1160.825894] R13: 00007fffae33b3bf R14: 00007fa448d16300 R15: 0000000000022000 [ 1160.825931] [ 1160.888001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x14443, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x4, 0x20, 0xfb, 0x0, 0x0, 0x83200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1f3a, 0x5, 0x4, 0x8, 0x8, 0x9, 0x0, 0x5, 0x0, 0x7}, 0x0, 0x6, r0, 0x3) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x7f, 0x1, 0x20, 0x9, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7}, 0x2002, 0xff, 0xfd2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x7, 0x0, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r1, &(0x7f0000000900)="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", 0x200) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:43:46 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x24}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 1161.125844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:43:46 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd400080b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 22) [ 1161.472102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium VM DIAGNOSIS: 18:43:45 Registers: info registers vcpu 0 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82905aa5 RDI=ffffffff8890d640 RBP=ffffffff8890d600 RSP=ffff88804d6b76b0 R8 =0000000000000000 R9 =ffffed1001492046 R10=0000000000000063 R11=0000000000000001 R12=0000000000000063 R13=0000000000000010 R14=ffffffff8890d600 R15=ffffffff82905a90 RIP=ffffffff82905afd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f85a2101700 00000000 00000000 GS =0000 ffff8880e53f4000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d12e000 CR3=000000004a473000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffffffff0cd9a73 RBX=ffffffff866cd398 RCX=ffffffff815c812f RDX=0000000000000000 RSI=ffffffff86a34a04 RDI=ffffffff866cd394 RBP=ffffffff866cd394 RSP=ffff88804a6ee8e8 R8 =ffffffff86a34a04 R9 =0000000000000000 R10=000000000003c7af R11=0000000000011b5c R12=ffffffff866cd39c R13=ffffffff866cd394 R14=ffffffff866cd394 R15=dffffc0000000000 RIP=ffffffff81358a7f RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f182dddf700 00000000 00000000 GS =0000 ffff8880e54f4000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d136000 CR3=000000004ddf4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000027363c51b5d77cfa XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000