302325c96249f3fe3833df0e31561d1f91c836e9588d973b700234bb1519f23262e3d3cf222e68985af64fa2c809fb08973baa4d1cfa2b62bd0936", 0xf6}, {&(0x7f0000000280)="8be2a389d728c37f8afe7fffadfba14b4aba1f78fbc5d3c31b8500731d6199bf7647ecee411b94e2576574833f0a1289134e84204ba86b84110b5978c445b0504ba2ba6026798326dabaed9036bbde48a8e0487dd0a4761e152a92d58a14aa9f7a6dc3a67ff6aef228f77e3ab407e383967a605c521b830481b73b046638064b54b7503babab9ffc", 0x88}, {&(0x7f0000000340)="a62a14edacd9bb84d71e2619ac00513d3acd5c2f9ad7ccd0472ad93efd1d9d75948b969f8b87efcdfbb0bc45b48a5e45727bc540e9c65ea01294d31e30c40467319205b35697c58a9959cb4d961997ea684656fca806542b78728b11dd7e5c8c5d029460da2e0467c8c148ca87f3", 0x6e}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="000000005000000000000000290000003600000084060000000000000720000000000000000300000000000000740000000000000100050200060502000105020009400100"/84], 0x1178}, 0x1) 00:38:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:38:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:38:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0xfffffe00, 0x0) r1 = dup(r0) openat(r1, &(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x2042, 0x4) 00:38:36 executing program 6: timer_create(0x2, &(0x7f0000000040)={0x0, 0x3c, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:36 executing program 5: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010102}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="ec8e14e6ff6dded2defe4f69f544b573776e8f98b7dfa4db0c27c768714371156f319bd466543670da4dda09312841f6", 0x30, 0x0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 00:38:36 executing program 7: timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:36 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r3 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0x3, r4, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r3, 0xffffffffffffffff, r4], 0x4, {r5}}, 0x58) symlinkat(&(0x7f0000000280)='./file0\x00', r2, &(0x7f00000002c0)='./file0\x00') 00:38:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e21, 0xc9, @mcast1, 0x1000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="256930bfe260d390548168417639a634694a046a89c1e6659cf5b5292dde8f056f6ea71303c1ef79f9562845bd6606b630945b15c15eb265caedca2c0ddcc9ae35b9b71215f2e4ab73c76e8f7afd9e0a3c9584aaa81c9c5a1c1447cecbb48f22854b880a269ed2e255c5124ee1fdb3875c", 0x71}, {&(0x7f00000000c0)="a8cf1f9a0e40e2434b4ecdc9a9c58660922a032dffa51e34ce70dc2204d36098b1b073fe57c8b6a9c37a4fab0ab966396835a68434d0a4ec2f1377ee77af360be6aa542784f1c450ec005fa5c415123565dd75fa65c44783fc7df10795658d54290d9267d446833e1f198d62744c74deed77d20006e99d16496fc6c33cfa6cd32cb676fb0ae8c2ee2b4ee59cb6e8e1fbabc2a55608e5903a0e4b12007ad8b4e9a4603c16f2980a9fea6cf87746d07706c7522a2349c3049e89ebb78eee8ce6fe", 0xc0}, {&(0x7f0000000180)="e0267cd7ac9fa1c2125554ed27e50992b86eb01b043ea063aa1ec43eebd4da2f90a218028b9f7be6009e4fd765931d8ae405c463582bd8d83938357a0eb5fc25bf024c17240df36ee511aee4204349273b2c512dd83d344ddcc34e476037d890b949ab8a689afc0fbe32a5938e0f44e08cd0a0da7585cb278e3279b07f5437573a3fef59cfa9a83d54d30f9f5bb9a3efdcba31493dc8d6e1c2696c6985b918b5e53f10a30be91de4f3fe0761e45f1fd8fb4dbd6e17b5084bdd5e51302325c96249f3fe3833df0e31561d1f91c836e9588d973b700234bb1519f23262e3d3cf222e68985af64fa2c809fb08973baa4d1cfa2b62bd0936", 0xf6}, {&(0x7f0000000280)="8be2a389d728c37f8afe7fffadfba14b4aba1f78fbc5d3c31b8500731d6199bf7647ecee411b94e2576574833f0a1289134e84204ba86b84110b5978c445b0504ba2ba6026798326dabaed9036bbde48a8e0487dd0a4761e152a92d58a14aa9f7a6dc3a67ff6aef228f77e3ab407e383967a605c521b830481b73b046638064b54b7503babab9ffc", 0x88}, {&(0x7f0000000340)="a62a14edacd9bb84d71e2619ac00513d3acd5c2f9ad7ccd0472ad93efd1d9d75948b969f8b87efcdfbb0bc45b48a5e45727bc540e9c65ea01294d31e30c40467319205b35697c58a9959cb4d961997ea684656fca806542b78728b11dd7e5c8c5d029460da2e0467c8c148ca87f3", 0x6e}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="000000005000000000000000290000003600000084060000000000000720000000000000000300000000000000740000000000000100050200060502000105020009400100"/84], 0x1178}, 0x1) 00:38:36 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x80880, 0x42, 0x14}, 0x18) recvmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/82, 0x52}], 0x2, &(0x7f0000000340)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x60) ioctl$SIOCGIFHWADDR(r2, 0x400454e2, &(0x7f00000000c0)={'veth1_vlan\x00'}) 00:38:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:38:36 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mknodat$loop(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0x1) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 00:38:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e21, 0xc9, @mcast1, 0x1000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="256930bfe260d390548168417639a634694a046a89c1e6659cf5b5292dde8f056f6ea71303c1ef79f9562845bd6606b630945b15c15eb265caedca2c0ddcc9ae35b9b71215f2e4ab73c76e8f7afd9e0a3c9584aaa81c9c5a1c1447cecbb48f22854b880a269ed2e255c5124ee1fdb3875c", 0x71}, {&(0x7f00000000c0)="a8cf1f9a0e40e2434b4ecdc9a9c58660922a032dffa51e34ce70dc2204d36098b1b073fe57c8b6a9c37a4fab0ab966396835a68434d0a4ec2f1377ee77af360be6aa542784f1c450ec005fa5c415123565dd75fa65c44783fc7df10795658d54290d9267d446833e1f198d62744c74deed77d20006e99d16496fc6c33cfa6cd32cb676fb0ae8c2ee2b4ee59cb6e8e1fbabc2a55608e5903a0e4b12007ad8b4e9a4603c16f2980a9fea6cf87746d07706c7522a2349c3049e89ebb78eee8ce6fe", 0xc0}, {&(0x7f0000000180)="e0267cd7ac9fa1c2125554ed27e50992b86eb01b043ea063aa1ec43eebd4da2f90a218028b9f7be6009e4fd765931d8ae405c463582bd8d83938357a0eb5fc25bf024c17240df36ee511aee4204349273b2c512dd83d344ddcc34e476037d890b949ab8a689afc0fbe32a5938e0f44e08cd0a0da7585cb278e3279b07f5437573a3fef59cfa9a83d54d30f9f5bb9a3efdcba31493dc8d6e1c2696c6985b918b5e53f10a30be91de4f3fe0761e45f1fd8fb4dbd6e17b5084bdd5e51302325c96249f3fe3833df0e31561d1f91c836e9588d973b700234bb1519f23262e3d3cf222e68985af64fa2c809fb08973baa4d1cfa2b62bd0936", 0xf6}, {&(0x7f0000000280)="8be2a389d728c37f8afe7fffadfba14b4aba1f78fbc5d3c31b8500731d6199bf7647ecee411b94e2576574833f0a1289134e84204ba86b84110b5978c445b0504ba2ba6026798326dabaed9036bbde48a8e0487dd0a4761e152a92d58a14aa9f7a6dc3a67ff6aef228f77e3ab407e383967a605c521b830481b73b046638064b54b7503babab9ffc", 0x88}, {&(0x7f0000000340)="a62a14edacd9bb84d71e2619ac00513d3acd5c2f9ad7ccd0472ad93efd1d9d75948b969f8b87efcdfbb0bc45b48a5e45727bc540e9c65ea01294d31e30c40467319205b35697c58a9959cb4d961997ea684656fca806542b78728b11dd7e5c8c5d029460da2e0467c8c148ca87f3", 0x6e}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="38000000000000002900000036000000f103000000000000010100040100000100010400000000040109040103c20400000081000000000014000000000000002900000034000000060000000000000020100000000000002900000036000000110100000000000001040000000000008d61c838288087be5e1d1caa43e5bdbdf620c3a982b2509ccce9df59777bed49ccd48edea341c7859c9aedd731774d26fff36794a9b011ae1da244fbbddb18b10148d465353782ab261c8442db7f4d39a59b2b1ce359358fa5c104709a7e034e26e154ca39d343e51cf918754b2e3c414049bced139152146b4f4b75b3c9d87262d9cf4f04d441768f6015c6df6e8a84738e5aedaf57755feed09e79ecfdb993e6cf4744ded0b0068c867367941084aad0b8a6afe41b6268cb0fc7995533e456c946978a21e1762e099796bb05745835a765d06ebde0203801aeb0c657e56fa266540523e65963f31cc9a15bf4d7a0cadcfcd77fc43687fe581a1cdfa8e6d81cf0810a3c1668d314db3522deef25975c0796f903e2759c82e9c1da26e1e8734548d9c44c80ab76d027cb69de06721d399386f406da68158aa0229a61f593100c9d47e056d5c444f4068217c73bc8eea1c54fccf4b1dda307bc3176fd0720309d8547558c425ddc5c6a5fae95a7555c4bf6062ad19ade4a61fb478bed005fd8dbbbad0c626c093f453d62ce862abaac5c09dd392ca21f5745f8469c192c1875d6d82ade96985bf67100073e44a400eb666da1531e6205ea5d07dec4ad34f0401e829c88eddabd5a608568855c25ebd36fdeb914923add262ab967dc0836cbb441fc0605e30390fe51fd0516e2595c99c5392bde9e7db2a7f90db4b40aa14bd449d030284ff15047647db4a67ae23d46b24af4e8d3fd5f325a078b51785230cff5cb91f3ba4c202a8dc49862b849a5f0761a489a554d2ad441384fe1324d7931fb7f4a1441354b29f4367d96c523f8915fb3f58a7807bc37e1bcef219a958dd37c038d88f575399c0124d8dbb9e2c5de27bd48f1d73f93faa94549b92510949e292085e5cd136263e6fbe91ebc644e86d8ce2342b6137eb85de8815e8b61426bada4de436e6425ca7e627c89779979521a710446c2efcdea9b320477d9c2a74f1148c16b8df1a6eb06571f5310db703180673e899b7e2cd2c5b0d0de3826fe5d3648ad0918677b53b68bce2ebc77c14f27d056f3b53a78f0ed219b7f02df13f07f948070bc6f2eb9337f801b481a26f6a50176df0c6b54b81374454efbadc6930ff9e27f09b4738e3bf29e4656edab65775b9cffb09b6d592b3c745fba9db94757ca1f6c80aeb01ef00adaaad50aed440ef757c9d877bd4a810e535d3fabfc1481e0be32a1e1dbd01216decd10c02ce9da12fc916b6b12bb86c3fefebda2550a260082957282b5632174af27bf982dce32af158cbf3529ec0408964a1450755a231fae79177b5872bee0ff48995350e430fd71d2f44c072c87b0d8799197c917d862c6908920cc2955fbe1991e2e1ff245177293066b3b07e64de20d546fb44ced2e74a1f6a5be720f277e5608f3d25a671482daab37bfc14cfc27e75bd5ec972851afed8c1030eaf0f460e02303cb795e21e89ed3c2598bc011442d50385a4478428a64b9cac5b43d7bf9a173e6813672c90d75bae7db9e47a3cfa77d21a1ed627e6080024199be56315256b817377e8083a8bee93356aa2ba4bee44c20df36143f20a6bb29be21c835b5cd3f7cf2ae5f76c9912f011336d79d685720419022b56c06b7de8b95a0801f25b7486292cb256f9bd7e29d56f69c7055e17439ca284e7dc456c10b5e1d22829e5b6e0ce1d40e19aa2781d3b2392eae019add2727cce7be8666482de90950608c915c5775f0d520539dcf1d1a756f9eb406aab3cd4813cafd3fa768cf2203d06c9f71a3f68d1a11702bb5745d1c5a908509b84a5e80fe4557f13ed1023d23c8869e80d52807082c9872dd5afbcc1df56c39a2ca52dcc2208c769079ad60e2df655409c16adbacb7cc25e3e69d8b640e5a31c77144b87f20d225dc363b912a15d18c1e3e71c8bdb87216bb7a3187dff1b05536cb07b71301f3652d17ec892aabc006ff721784378b1e2c120fe1d2950d84b17b061002a841f5d345a38f4f2976e3bf44cba7077d516bb6524be4c1dcf47edf5401aaea9645dc1c8692bb4700771b2bec617dd820a5479cce7e55df2c76dfdd076a2162b5cc4b4b095ca4c4500d7c125a0a1002dfe350f1d25be970cc4f5f4934b1619cf157b5c52085813cea1fc5749ed88100f82856bc75d055d32a9a1a80efe6fd19acc98a88a60de61cfc5ad81f5d092e8f7e6f184c3d46fe89edfb42183649ec0069cfbd2292a98350c7fe8f8a68c2bd98f434b393e1cc8193aec5ecbac4be0d580a2159c2cba158acb2e36462249acbaccc01fa7d5d9bf7878e51fd2d610bd6991a6da6fe26ec65217b3fd1d458014566d8fc9fc72787a3ac9b6ed9103e59b790c7c1efd8f7d8c41f4e8faff798fd3c82cbb5b6afbb2142d6f3f81d60e1e6b80985ded26ef8ec093af32f4b37f78c802a6d3e03c64fdc3ce6ebbf5c674ccb979217404c02c68da01d15e2431e5af91880d87f5e7b4c1d937c61b8649c54ea2dc56ee59b2e7c68fb698ff206a7abc67d870c8c2e9863767b1ead40003aad6901d07ebc7f18c7d3ee7855c9f5888dd1bb0c3357f10c5c584614cafef4b64685d5164d04d6617a274f4ee97a8d9e6fac3ac120bd6d8d40ad1ff3ee7b05393e350ad062f1745bfbb1ee85641b645e5dba4b28697a4c0e3628beb33c38ec1dad831bcaf124f2384f60d81b5015f07d028a13dec6b3df835821b88217e779749eabde078665723040d4e7868c00c2e3d1a835644793e7d2bf9463292da8c07768ddb5bba29ddb92e6f6b26cecc5843c9e52af76c2f8f48de92973e92ba3848203fe43932c61a331de3b656792acc55bd96350cf1d366d5e12a75f362b9993bf256afbc0c1ce52a41fdb6dbcf24478a968fbf2aa17d99ced7a602ad85e0ed25ba955b113cce8a9b42a1ebd7c95c86bed9b2b412275c5594d971db31aee35a7fdf3ae3370d87ea2fa68001c972146114fc15787b5fa9ef5a8bc63971c9e48c3c150d1492b18d6838d12c1e90912b4efa412c03602f9b9aee92b5185191f7e9c54455bd4f8f2f403f21b1d44ba0d15584a26dc12993a0971307f4deac616922e26c7ee8a7cae84d6712cdc717f80a672e1365c43d23b3af853fcc268964b78bb86a2df013f85a156b2741841160c910be511348982bd9c1b392ddd7d41bee9f2e64874eccae368f61a794e4bef29fd77dd8448651b8fcb28cab881e801d56cbc04b590f317900d0f6536d7c6adc5db912cbc62ecc676777e0dc561b260b40fa5598f21057888e94894d9839b1d08aa45c9e729801e52cfaef8906704a93cf130b8b833bd5963c1c71fda383bc9fc315401f60c2f0cf036f9ee17fc7c7d4f86e3653aee1df69a95cc7110b8cd260fa5f06f88ce5855b8476ee6048edf974a13ee9d0d1390b4bf78d276bd1ac9dbe3150729250067074fe300604b62320fb902cc9ecffcf2609d106aeb58cf9cd340a4319dd302afab3a1b11161f4cd060fb85e0b017412da6c4b095f405eb47ccb1b0d71940ed076abad2b08dda32cc7e4ff9afb8692dff7ba7b0d56a9906f8cd56ae67f4705b53b37dc3eb4f3c31d062d7a2721688624feb8001fc699fa0087402974f8eadeaf43bab78e0cffa9a01f3558652fa09711d8e63510a640478ce9e26394c44ac3e98c7707d7731bd4d6dc7c18c2d48c82bbdac80f6018c34f6ce9755014d0a1b0802db8fd120dac6396f666290f1796bf1ccf0db43da19ca84b86fc2c82f4c602c9934d0378247d23b912c35e10099c539e2253e61fb9904c10b7560b5008ac84e36067918c66a937034b7108a12fad859714085f2de696067f95456ca518ef557b1ecfe93b9274fefeb3a1c0466816f1c2dc881bda923d80855e314ea29f2714d4426607299c1458a05674b4d051c7415e6f95ebdc5cbaa1fedd994a744d5947cc6398518e054b783cc0f6084d52ee3fbd802375435182baeb151084a84a873cc358b267955f82c073654edbd1df16dae297add012a54e73cb00e85606c642e93f3db2b7f8b374282b98d87182094b998087c2f6798f07f083c96c4396ab1912d464c78a8c1b90e1df8a4031206029a0f2093e89f3757b18de73441f4bcaddb58b843685950a07b7ce56d7e6721bf6e65a5221e18cb5ccb6d5899d77baae8c3455834f4ed5a8c01096b4767916eb9bd86a899c84137a0a2ce3931e9648c0806076661777fe1f565dde449da3a2f8b7d124d4c81cb05cadf1d16fae00d73ee50c872e60ff0a4adb1b7a09ff6038837060102039f32e857db0e65e87c52772b1ddb1c35dd5f1d102ddc2fa6db604614d187dd6449f003382354570db49222a83192a6121d486a5464fc0eacd7e9fb9beaa072f93bbb6d5be473d4e805c5d65edf7518e34d8d8e0587b3baff083419d6912d0e9a8b00e9243d3a500f3bee0d91ef0d4b863f1bb6d422506b1339364ff313e019c74e7512605a1792fa3b53a1b3ec8f4bcb0bc86e31f1b3803cbb94eec61ef9e61c9572be5518491b0ba7caaccdfd062d169f954989a93834192604c4731380f2d82af5798f83d0a1c049b49b89c2c061376be81bfeda11359cc1daddf8fad3f841a45298ab7a1e4ca7110a8790b816471e830412d70570494bdce1a7382832edb0470b8aa86ebc2d0155f78d50853c077b1b669d7cc710c676738f4d4f848f1ba227bbc97e77273085702cef3b6b8373dbf7021753280f8f74111a1491c45e5a28d0c76b425dbadf239701dc6ce82fc7d36cd57db3e5e9db1f350ae24a73c56f77a112593925758d4ea74c0aae52586694b36c55a1a80a4ab094111df08cc70f83da7434e282d3a1745dbddfc3bf486b3f40a36e3e68916b80b859440f61160a29cd361d566da2c1069d28f91c5912d4129b20aa00d7d1d7a224c75f656605825d7d3886c991e6cff95290b555a05acd6b81ebaf88ac7b74a4d34fb73599e25349d7a240cd8bc14677907d87b950b316609bf5f21328608bcb0f32c9f5f65d3866364e60dd445d0920c787c96a7e8066e29da2978cb2da049592c3b14bd62ed6cfbd53073f4b0141afda00975357eaf1922108b12e5c5c700bc0a0b86c4eb9cff5a7fcccf7703e0a6f818509645a37446a1874741dfafd5ad5271f38e26dea336706552c58c14bd25771ad35ff2690fb4cd7bf228715541c69afed61dc352fbcb084b6a579f5ff17fe43b6b94e8332da2dcb45c898de917f795d5958ca633242a7faadff52b23c7970458eb824847af957b65b3ba50927a2c93bb6fe8a4a68ad60138545e83b28e1139031594e72b28bc278340ca819fdf9082fa283c936ba211be0934b0a9f3f76b0f87402a3c5e5ae5e1145d331800bfe020c7e43a6b237cfacd3594b0a5d436b3296bb00c6fc2373d8fb7fd8091679762f248bfaddeb705990d817311b5c539a4d4a2d4d730b386541b8d851e151809d0289b8f892274f2c96e4bab42c4ca90381154730708296d753f9bad3d267b98ae65029bd319647e78c75a31de3da28ffb0cdb570be1f75664ecda3d1f46887c146e7bffcba8f42322307a03d9aae46da8c969e29cd5fa80bb3b39b09cd888474291957487eadde5aaaf437882653bdb5177b39c541f92b06ae7d7761e43c8d5cae7b27d92ceaf3f29b6a0f95611a97764916456551e2b1fc60cd6826edf286d87624ae22e51581356637ac168f7bbb7157c60f654312a2f961bf4ed1b49b0abf2e0a3d8363b9d00e7b952e9b41d442129b2a059b9db987496bcc7d5a23dc35e68ffaf52066cc7f80f110814969efe572c8c0dae09b38b8dcda7c879fde97d1f86e9c0163e7565e813de314000000000000002900000043000000b12900000000000078000000000000002900000039000000140c001f00000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aafc0100000000000000000000000000002400000000000000290000003200000020010000000000000000000000000002", @ANYRES32, @ANYBLOB="000000005000000000000000290000003600000084060000000000000720000000000000000300000000000000740000000000000100050200060502000105020009400100"/84], 0x1178}, 0x1) 00:38:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 366.088188] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 366.089120] EXT4-fs (loop1): unable to read superblock 00:38:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e21, 0xc9, @mcast1, 0x1000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="256930bfe260d390548168417639a634694a046a89c1e6659cf5b5292dde8f056f6ea71303c1ef79f9562845bd6606b630945b15c15eb265caedca2c0ddcc9ae35b9b71215f2e4ab73c76e8f7afd9e0a3c9584aaa81c9c5a1c1447cecbb48f22854b880a269ed2e255c5124ee1fdb3875c", 0x71}, {&(0x7f00000000c0)="a8cf1f9a0e40e2434b4ecdc9a9c58660922a032dffa51e34ce70dc2204d36098b1b073fe57c8b6a9c37a4fab0ab966396835a68434d0a4ec2f1377ee77af360be6aa542784f1c450ec005fa5c415123565dd75fa65c44783fc7df10795658d54290d9267d446833e1f198d62744c74deed77d20006e99d16496fc6c33cfa6cd32cb676fb0ae8c2ee2b4ee59cb6e8e1fbabc2a55608e5903a0e4b12007ad8b4e9a4603c16f2980a9fea6cf87746d07706c7522a2349c3049e89ebb78eee8ce6fe", 0xc0}, {&(0x7f0000000180)="e0267cd7ac9fa1c2125554ed27e50992b86eb01b043ea063aa1ec43eebd4da2f90a218028b9f7be6009e4fd765931d8ae405c463582bd8d83938357a0eb5fc25bf024c17240df36ee511aee4204349273b2c512dd83d344ddcc34e476037d890b949ab8a689afc0fbe32a5938e0f44e08cd0a0da7585cb278e3279b07f5437573a3fef59cfa9a83d54d30f9f5bb9a3efdcba31493dc8d6e1c2696c6985b918b5e53f10a30be91de4f3fe0761e45f1fd8fb4dbd6e17b5084bdd5e51302325c96249f3fe3833df0e31561d1f91c836e9588d973b700234bb1519f23262e3d3cf222e68985af64fa2c809fb08973baa4d1cfa2b62bd0936", 0xf6}, {&(0x7f0000000280)="8be2a389d728c37f8afe7fffadfba14b4aba1f78fbc5d3c31b8500731d6199bf7647ecee411b94e2576574833f0a1289134e84204ba86b84110b5978c445b0504ba2ba6026798326dabaed9036bbde48a8e0487dd0a4761e152a92d58a14aa9f7a6dc3a67ff6aef228f77e3ab407e383967a605c521b830481b73b046638064b54b7503babab9ffc", 0x88}, {&(0x7f0000000340)="a62a14edacd9bb84d71e2619ac00513d3acd5c2f9ad7ccd0472ad93efd1d9d75948b969f8b87efcdfbb0bc45b48a5e45727bc540e9c65ea01294d31e30c40467319205b35697c58a9959cb4d961997ea684656fca806542b78728b11dd7e5c8c5d029460da2e0467c8c148ca87f3", 0x6e}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="38000000000000002900000036000000f103000000000000010100040100000100010400000000040109040103c20400000081000000000014000000000000002900000034000000060000000000000020100000000000002900000036000000110100000000000001040000000000008d61c838288087be5e1d1caa43e5bdbdf620c3a982b2509ccce9df59777bed49ccd48edea341c7859c9aedd731774d26fff36794a9b011ae1da244fbbddb18b10148d465353782ab261c8442db7f4d39a59b2b1ce359358fa5c104709a7e034e26e154ca39d343e51cf918754b2e3c414049bced139152146b4f4b75b3c9d87262d9cf4f04d441768f6015c6df6e8a84738e5aedaf57755feed09e79ecfdb993e6cf4744ded0b0068c867367941084aad0b8a6afe41b6268cb0fc7995533e456c946978a21e1762e099796bb05745835a765d06ebde0203801aeb0c657e56fa266540523e65963f31cc9a15bf4d7a0cadcfcd77fc43687fe581a1cdfa8e6d81cf0810a3c1668d314db3522deef25975c0796f903e2759c82e9c1da26e1e8734548d9c44c80ab76d027cb69de06721d399386f406da68158aa0229a61f593100c9d47e056d5c444f4068217c73bc8eea1c54fccf4b1dda307bc3176fd0720309d8547558c425ddc5c6a5fae95a7555c4bf6062ad19ade4a61fb478bed005fd8dbbbad0c626c093f453d62ce862abaac5c09dd392ca21f5745f8469c192c1875d6d82ade96985bf67100073e44a400eb666da1531e6205ea5d07dec4ad34f0401e829c88eddabd5a608568855c25ebd36fdeb914923add262ab967dc0836cbb441fc0605e30390fe51fd0516e2595c99c5392bde9e7db2a7f90db4b40aa14bd449d030284ff15047647db4a67ae23d46b24af4e8d3fd5f325a078b51785230cff5cb91f3ba4c202a8dc49862b849a5f0761a489a554d2ad441384fe1324d7931fb7f4a1441354b29f4367d96c523f8915fb3f58a7807bc37e1bcef219a958dd37c038d88f575399c0124d8dbb9e2c5de27bd48f1d73f93faa94549b92510949e292085e5cd136263e6fbe91ebc644e86d8ce2342b6137eb85de8815e8b61426bada4de436e6425ca7e627c89779979521a710446c2efcdea9b320477d9c2a74f1148c16b8df1a6eb06571f5310db703180673e899b7e2cd2c5b0d0de3826fe5d3648ad0918677b53b68bce2ebc77c14f27d056f3b53a78f0ed219b7f02df13f07f948070bc6f2eb9337f801b481a26f6a50176df0c6b54b81374454efbadc6930ff9e27f09b4738e3bf29e4656edab65775b9cffb09b6d592b3c745fba9db94757ca1f6c80aeb01ef00adaaad50aed440ef757c9d877bd4a810e535d3fabfc1481e0be32a1e1dbd01216decd10c02ce9da12fc916b6b12bb86c3fefebda2550a260082957282b5632174af27bf982dce32af158cbf3529ec0408964a1450755a231fae79177b5872bee0ff48995350e430fd71d2f44c072c87b0d8799197c917d862c6908920cc2955fbe1991e2e1ff245177293066b3b07e64de20d546fb44ced2e74a1f6a5be720f277e5608f3d25a671482daab37bfc14cfc27e75bd5ec972851afed8c1030eaf0f460e02303cb795e21e89ed3c2598bc011442d50385a4478428a64b9cac5b43d7bf9a173e6813672c90d75bae7db9e47a3cfa77d21a1ed627e6080024199be56315256b817377e8083a8bee93356aa2ba4bee44c20df36143f20a6bb29be21c835b5cd3f7cf2ae5f76c9912f011336d79d685720419022b56c06b7de8b95a0801f25b7486292cb256f9bd7e29d56f69c7055e17439ca284e7dc456c10b5e1d22829e5b6e0ce1d40e19aa2781d3b2392eae019add2727cce7be8666482de90950608c915c5775f0d520539dcf1d1a756f9eb406aab3cd4813cafd3fa768cf2203d06c9f71a3f68d1a11702bb5745d1c5a908509b84a5e80fe4557f13ed1023d23c8869e80d52807082c9872dd5afbcc1df56c39a2ca52dcc2208c769079ad60e2df655409c16adbacb7cc25e3e69d8b640e5a31c77144b87f20d225dc363b912a15d18c1e3e71c8bdb87216bb7a3187dff1b05536cb07b71301f3652d17ec892aabc006ff721784378b1e2c120fe1d2950d84b17b061002a841f5d345a38f4f2976e3bf44cba7077d516bb6524be4c1dcf47edf5401aaea9645dc1c8692bb4700771b2bec617dd820a5479cce7e55df2c76dfdd076a2162b5cc4b4b095ca4c4500d7c125a0a1002dfe350f1d25be970cc4f5f4934b1619cf157b5c52085813cea1fc5749ed88100f82856bc75d055d32a9a1a80efe6fd19acc98a88a60de61cfc5ad81f5d092e8f7e6f184c3d46fe89edfb42183649ec0069cfbd2292a98350c7fe8f8a68c2bd98f434b393e1cc8193aec5ecbac4be0d580a2159c2cba158acb2e36462249acbaccc01fa7d5d9bf7878e51fd2d610bd6991a6da6fe26ec65217b3fd1d458014566d8fc9fc72787a3ac9b6ed9103e59b790c7c1efd8f7d8c41f4e8faff798fd3c82cbb5b6afbb2142d6f3f81d60e1e6b80985ded26ef8ec093af32f4b37f78c802a6d3e03c64fdc3ce6ebbf5c674ccb979217404c02c68da01d15e2431e5af91880d87f5e7b4c1d937c61b8649c54ea2dc56ee59b2e7c68fb698ff206a7abc67d870c8c2e9863767b1ead40003aad6901d07ebc7f18c7d3ee7855c9f5888dd1bb0c3357f10c5c584614cafef4b64685d5164d04d6617a274f4ee97a8d9e6fac3ac120bd6d8d40ad1ff3ee7b05393e350ad062f1745bfbb1ee85641b645e5dba4b28697a4c0e3628beb33c38ec1dad831bcaf124f2384f60d81b5015f07d028a13dec6b3df835821b88217e779749eabde078665723040d4e7868c00c2e3d1a835644793e7d2bf9463292da8c07768ddb5bba29ddb92e6f6b26cecc5843c9e52af76c2f8f48de92973e92ba3848203fe43932c61a331de3b656792acc55bd96350cf1d366d5e12a75f362b9993bf256afbc0c1ce52a41fdb6dbcf24478a968fbf2aa17d99ced7a602ad85e0ed25ba955b113cce8a9b42a1ebd7c95c86bed9b2b412275c5594d971db31aee35a7fdf3ae3370d87ea2fa68001c972146114fc15787b5fa9ef5a8bc63971c9e48c3c150d1492b18d6838d12c1e90912b4efa412c03602f9b9aee92b5185191f7e9c54455bd4f8f2f403f21b1d44ba0d15584a26dc12993a0971307f4deac616922e26c7ee8a7cae84d6712cdc717f80a672e1365c43d23b3af853fcc268964b78bb86a2df013f85a156b2741841160c910be511348982bd9c1b392ddd7d41bee9f2e64874eccae368f61a794e4bef29fd77dd8448651b8fcb28cab881e801d56cbc04b590f317900d0f6536d7c6adc5db912cbc62ecc676777e0dc561b260b40fa5598f21057888e94894d9839b1d08aa45c9e729801e52cfaef8906704a93cf130b8b833bd5963c1c71fda383bc9fc315401f60c2f0cf036f9ee17fc7c7d4f86e3653aee1df69a95cc7110b8cd260fa5f06f88ce5855b8476ee6048edf974a13ee9d0d1390b4bf78d276bd1ac9dbe3150729250067074fe300604b62320fb902cc9ecffcf2609d106aeb58cf9cd340a4319dd302afab3a1b11161f4cd060fb85e0b017412da6c4b095f405eb47ccb1b0d71940ed076abad2b08dda32cc7e4ff9afb8692dff7ba7b0d56a9906f8cd56ae67f4705b53b37dc3eb4f3c31d062d7a2721688624feb8001fc699fa0087402974f8eadeaf43bab78e0cffa9a01f3558652fa09711d8e63510a640478ce9e26394c44ac3e98c7707d7731bd4d6dc7c18c2d48c82bbdac80f6018c34f6ce9755014d0a1b0802db8fd120dac6396f666290f1796bf1ccf0db43da19ca84b86fc2c82f4c602c9934d0378247d23b912c35e10099c539e2253e61fb9904c10b7560b5008ac84e36067918c66a937034b7108a12fad859714085f2de696067f95456ca518ef557b1ecfe93b9274fefeb3a1c0466816f1c2dc881bda923d80855e314ea29f2714d4426607299c1458a05674b4d051c7415e6f95ebdc5cbaa1fedd994a744d5947cc6398518e054b783cc0f6084d52ee3fbd802375435182baeb151084a84a873cc358b267955f82c073654edbd1df16dae297add012a54e73cb00e85606c642e93f3db2b7f8b374282b98d87182094b998087c2f6798f07f083c96c4396ab1912d464c78a8c1b90e1df8a4031206029a0f2093e89f3757b18de73441f4bcaddb58b843685950a07b7ce56d7e6721bf6e65a5221e18cb5ccb6d5899d77baae8c3455834f4ed5a8c01096b4767916eb9bd86a899c84137a0a2ce3931e9648c0806076661777fe1f565dde449da3a2f8b7d124d4c81cb05cadf1d16fae00d73ee50c872e60ff0a4adb1b7a09ff6038837060102039f32e857db0e65e87c52772b1ddb1c35dd5f1d102ddc2fa6db604614d187dd6449f003382354570db49222a83192a6121d486a5464fc0eacd7e9fb9beaa072f93bbb6d5be473d4e805c5d65edf7518e34d8d8e0587b3baff083419d6912d0e9a8b00e9243d3a500f3bee0d91ef0d4b863f1bb6d422506b1339364ff313e019c74e7512605a1792fa3b53a1b3ec8f4bcb0bc86e31f1b3803cbb94eec61ef9e61c9572be5518491b0ba7caaccdfd062d169f954989a93834192604c4731380f2d82af5798f83d0a1c049b49b89c2c061376be81bfeda11359cc1daddf8fad3f841a45298ab7a1e4ca7110a8790b816471e830412d70570494bdce1a7382832edb0470b8aa86ebc2d0155f78d50853c077b1b669d7cc710c676738f4d4f848f1ba227bbc97e77273085702cef3b6b8373dbf7021753280f8f74111a1491c45e5a28d0c76b425dbadf239701dc6ce82fc7d36cd57db3e5e9db1f350ae24a73c56f77a112593925758d4ea74c0aae52586694b36c55a1a80a4ab094111df08cc70f83da7434e282d3a1745dbddfc3bf486b3f40a36e3e68916b80b859440f61160a29cd361d566da2c1069d28f91c5912d4129b20aa00d7d1d7a224c75f656605825d7d3886c991e6cff95290b555a05acd6b81ebaf88ac7b74a4d34fb73599e25349d7a240cd8bc14677907d87b950b316609bf5f21328608bcb0f32c9f5f65d3866364e60dd445d0920c787c96a7e8066e29da2978cb2da049592c3b14bd62ed6cfbd53073f4b0141afda00975357eaf1922108b12e5c5c700bc0a0b86c4eb9cff5a7fcccf7703e0a6f818509645a37446a1874741dfafd5ad5271f38e26dea336706552c58c14bd25771ad35ff2690fb4cd7bf228715541c69afed61dc352fbcb084b6a579f5ff17fe43b6b94e8332da2dcb45c898de917f795d5958ca633242a7faadff52b23c7970458eb824847af957b65b3ba50927a2c93bb6fe8a4a68ad60138545e83b28e1139031594e72b28bc278340ca819fdf9082fa283c936ba211be0934b0a9f3f76b0f87402a3c5e5ae5e1145d331800bfe020c7e43a6b237cfacd3594b0a5d436b3296bb00c6fc2373d8fb7fd8091679762f248bfaddeb705990d817311b5c539a4d4a2d4d730b386541b8d851e151809d0289b8f892274f2c96e4bab42c4ca90381154730708296d753f9bad3d267b98ae65029bd319647e78c75a31de3da28ffb0cdb570be1f75664ecda3d1f46887c146e7bffcba8f42322307a03d9aae46da8c969e29cd5fa80bb3b39b09cd888474291957487eadde5aaaf437882653bdb5177b39c541f92b06ae7d7761e43c8d5cae7b27d92ceaf3f29b6a0f95611a97764916456551e2b1fc60cd6826edf286d87624ae22e51581356637ac168f7bbb7157c60f654312a2f961bf4ed1b49b0abf2e0a3d8363b9d00e7b952e9b41d442129b2a059b9db987496bcc7d5a23dc35e68ffaf52066cc7f80f110814969efe572c8c0dae09b38b8dcda7c879fde97d1f86e9c0163e7565e813de314000000000000002900000043000000b12900000000000078000000000000002900000039000000140c001f00000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aafc0100000000000000000000000000002400000000000000290000003200000020010000000000000000000000000002", @ANYRES32, @ANYBLOB="000000005000000000000000290000003600000084060000000000000720000000000000000300000000000000740000000000000100050200060502000105020009400100"/84], 0x1178}, 0x1) 00:38:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x15) 00:38:45 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:45 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r3 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0x3, r4, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r3, 0xffffffffffffffff, r4], 0x4, {r5}}, 0x58) symlinkat(&(0x7f0000000280)='./file0\x00', r2, &(0x7f00000002c0)='./file0\x00') 00:38:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:38:45 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x7, 0x0, 0x0, 0x2005, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 00:38:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 1) 00:38:45 executing program 6: timer_create(0x2, &(0x7f0000000040)={0x0, 0x3c, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 366.102277] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 366.103416] EXT4-fs (loop1): unable to read superblock 00:38:45 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x7, 0x0, 0x0, 0x2005, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) [ 366.155731] FAULT_INJECTION: forcing a failure. [ 366.155731] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 366.156749] CPU: 0 UID: 0 PID: 5042 Comm: syz-executor.0 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 366.156764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 366.156771] Call Trace: [ 366.156775] [ 366.156780] dump_stack_lvl+0xfa/0x120 [ 366.156801] should_fail_ex+0x4d7/0x5e0 [ 366.156823] _copy_from_user+0x30/0xd0 [ 366.156836] copy_msghdr_from_user+0x88/0x150 [ 366.156858] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 366.156877] ? __pfx_perf_trace_lock+0x10/0x10 [ 366.156898] ? lock_acquire+0x15e/0x2f0 [ 366.156915] ___sys_sendmsg+0xdc/0x1b0 [ 366.156932] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.156946] ? perf_trace_lock+0xb5/0x5d0 [ 366.156963] ? __pfx_perf_trace_lock+0x10/0x10 [ 366.156987] ? proc_fail_nth_write+0x97/0x220 [ 366.157007] ? lock_acquire+0x15e/0x2f0 [ 366.157020] ? __fget_files+0x34/0x3b0 [ 366.157034] ? find_held_lock+0x2b/0x80 [ 366.157051] ? __fget_files+0x203/0x3b0 [ 366.157064] ? lock_release+0xc8/0x290 [ 366.157081] ? __fget_files+0x20d/0x3b0 [ 366.157101] __sys_sendmsg+0x150/0x200 [ 366.157117] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.157136] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 366.157149] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 366.157162] ? ksys_write+0x1a3/0x240 [ 366.157177] ? __pfx_ksys_write+0x10/0x10 [ 366.157199] do_syscall_64+0xbf/0x390 [ 366.157216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.157229] RIP: 0033:0x7f445f861b19 [ 366.157238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 366.157249] RSP: 002b:00007f445cdd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.157260] RAX: ffffffffffffffda RBX: 00007f445f974f60 RCX: 00007f445f861b19 [ 366.157268] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 366.157275] RBP: 00007f445cdd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 366.157281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.157288] R13: 00007ffc75dfb49f R14: 00007f445cdd7300 R15: 0000000000022000 [ 366.157307] [ 366.204654] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 366.208928] EXT4-fs (loop1): unable to read superblock 00:38:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x300, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x9, &(0x7f0000000180)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 00:38:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) socketpair(0x25, 0x80000, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x6c, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4d, 0x5b, "cd52be71bf51b17b2bca62c3b919a37ff43c7c94f2670e3cb1ccf9a76cbe9d36ab65935aac1ca8190c9ee625e707a0b4061c8ef118a2c0c925acbd5e93d4528d1ca41862bb7f6006e9"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8001) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000100)=@ctrl_frame=@pspoll={{}, @random=0x1, @random="f34cc75c2c22"}, 0x10) 00:38:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e21, 0xc9, @mcast1, 0x1000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="256930bfe260d390548168417639a634694a046a89c1e6659cf5b5292dde8f056f6ea71303c1ef79f9562845bd6606b630945b15c15eb265caedca2c0ddcc9ae35b9b71215f2e4ab73c76e8f7afd9e0a3c9584aaa81c9c5a1c1447cecbb48f22854b880a269ed2e255c5124ee1fdb3875c", 0x71}, {&(0x7f00000000c0)="a8cf1f9a0e40e2434b4ecdc9a9c58660922a032dffa51e34ce70dc2204d36098b1b073fe57c8b6a9c37a4fab0ab966396835a68434d0a4ec2f1377ee77af360be6aa542784f1c450ec005fa5c415123565dd75fa65c44783fc7df10795658d54290d9267d446833e1f198d62744c74deed77d20006e99d16496fc6c33cfa6cd32cb676fb0ae8c2ee2b4ee59cb6e8e1fbabc2a55608e5903a0e4b12007ad8b4e9a4603c16f2980a9fea6cf87746d07706c7522a2349c3049e89ebb78eee8ce6fe", 0xc0}, {&(0x7f0000000180)="e0267cd7ac9fa1c2125554ed27e50992b86eb01b043ea063aa1ec43eebd4da2f90a218028b9f7be6009e4fd765931d8ae405c463582bd8d83938357a0eb5fc25bf024c17240df36ee511aee4204349273b2c512dd83d344ddcc34e476037d890b949ab8a689afc0fbe32a5938e0f44e08cd0a0da7585cb278e3279b07f5437573a3fef59cfa9a83d54d30f9f5bb9a3efdcba31493dc8d6e1c2696c6985b918b5e53f10a30be91de4f3fe0761e45f1fd8fb4dbd6e17b5084bdd5e51302325c96249f3fe3833df0e31561d1f91c836e9588d973b700234bb1519f23262e3d3cf222e68985af64fa2c809fb08973baa4d1cfa2b62bd0936", 0xf6}, {&(0x7f0000000280)="8be2a389d728c37f8afe7fffadfba14b4aba1f78fbc5d3c31b8500731d6199bf7647ecee411b94e2576574833f0a1289134e84204ba86b84110b5978c445b0504ba2ba6026798326dabaed9036bbde48a8e0487dd0a4761e152a92d58a14aa9f7a6dc3a67ff6aef228f77e3ab407e383967a605c521b830481b73b046638064b54b7503babab9ffc", 0x88}, {&(0x7f0000000340)="a62a14edacd9bb84d71e2619ac00513d3acd5c2f9ad7ccd0472ad93efd1d9d75948b969f8b87efcdfbb0bc45b48a5e45727bc540e9c65ea01294d31e30c40467319205b35697c58a9959cb4d961997ea684656fca806542b78728b11dd7e5c8c5d029460da2e0467c8c148ca87f3", 0x6e}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="000000005000000000000000290000003600000084060000000000000720000000000000000300000000000000740000000000000100050200060502000105020009400100"/84], 0x1178}, 0x1) 00:38:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 2) 00:38:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 1) [ 366.306794] FAULT_INJECTION: forcing a failure. [ 366.306794] name failslab, interval 1, probability 0, space 0, times 1 [ 366.307710] CPU: 0 UID: 0 PID: 5058 Comm: syz-executor.0 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 366.307726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 366.307733] Call Trace: [ 366.307741] [ 366.307746] dump_stack_lvl+0xfa/0x120 [ 366.307770] should_fail_ex+0x4d7/0x5e0 [ 366.307793] should_failslab+0xc2/0x120 [ 366.307811] kmem_cache_alloc_node_noprof+0x79/0x6a0 [ 366.307827] ? __alloc_skb+0x2ab/0x370 [ 366.307848] ? __alloc_skb+0x2ab/0x370 [ 366.307861] ? __pfx_netlink_insert+0x10/0x10 [ 366.307877] __alloc_skb+0x2ab/0x370 [ 366.307892] ? __pfx___alloc_skb+0x10/0x10 [ 366.307906] ? netlink_autobind.isra.0+0x158/0x370 [ 366.307930] netlink_alloc_large_skb+0x69/0x150 [ 366.307949] netlink_sendmsg+0x676/0xd80 [ 366.307969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.307995] ____sys_sendmsg+0xa67/0xc20 [ 366.308009] ? copy_msghdr_from_user+0xfb/0x150 [ 366.308025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.308044] ? lock_acquire+0x15e/0x2f0 [ 366.308062] ___sys_sendmsg+0x10f/0x1b0 [ 366.308079] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.308093] ? perf_trace_lock+0xb5/0x5d0 [ 366.308112] ? __pfx_perf_trace_lock+0x10/0x10 [ 366.308124] ? proc_fail_nth_write+0x97/0x220 [ 366.308145] ? lock_acquire+0x15e/0x2f0 [ 366.308158] ? __fget_files+0x34/0x3b0 [ 366.308172] ? find_held_lock+0x2b/0x80 [ 366.308189] ? __fget_files+0x203/0x3b0 [ 366.308202] ? lock_release+0xc8/0x290 [ 366.308219] ? __fget_files+0x20d/0x3b0 [ 366.308240] __sys_sendmsg+0x150/0x200 [ 366.308255] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.308278] ? __pfx_ksys_write+0x10/0x10 [ 366.308301] do_syscall_64+0xbf/0x390 [ 366.308319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.308332] RIP: 0033:0x7f445f861b19 [ 366.308341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 366.308353] RSP: 002b:00007f445cdd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.308364] RAX: ffffffffffffffda RBX: 00007f445f974f60 RCX: 00007f445f861b19 [ 366.308372] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 366.308379] RBP: 00007f445cdd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 366.308386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.308392] R13: 00007ffc75dfb49f R14: 00007f445cdd7300 R15: 0000000000022000 [ 366.308411] [ 366.380736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:38:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 3) [ 366.391573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.395443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.415366] FAULT_INJECTION: forcing a failure. [ 366.415366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.417268] CPU: 1 UID: 0 PID: 5066 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 366.417300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 366.417313] Call Trace: [ 366.417321] [ 366.417330] dump_stack_lvl+0xfa/0x120 [ 366.417369] should_fail_ex+0x4d7/0x5e0 [ 366.417414] _copy_from_user+0x30/0xd0 [ 366.417441] copy_msghdr_from_user+0x88/0x150 [ 366.417477] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 366.417516] ? __pfx_perf_trace_lock+0x10/0x10 [ 366.417555] ? lock_acquire+0x15e/0x2f0 [ 366.417591] ___sys_sendmsg+0xdc/0x1b0 [ 366.417626] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.417658] ? perf_trace_lock+0xb5/0x5d0 [ 366.417694] ? __pfx_perf_trace_lock+0x10/0x10 [ 366.417722] ? proc_fail_nth_write+0x97/0x220 [ 366.417762] ? lock_acquire+0x15e/0x2f0 [ 366.417795] ? __fget_files+0x34/0x3b0 [ 366.417824] ? find_held_lock+0x2b/0x80 [ 366.417867] ? __fget_files+0x203/0x3b0 [ 366.417895] ? lock_release+0xc8/0x290 [ 366.417930] ? __fget_files+0x20d/0x3b0 [ 366.417973] __sys_sendmsg+0x150/0x200 [ 366.418007] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.418047] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 366.418073] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 366.418101] ? ksys_write+0x1a3/0x240 [ 366.418132] ? __pfx_ksys_write+0x10/0x10 [ 366.418177] do_syscall_64+0xbf/0x390 [ 366.418213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.418238] RIP: 0033:0x7f92bf913b19 [ 366.418256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 366.418279] RSP: 002b:00007f92bce89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.418302] RAX: ffffffffffffffda RBX: 00007f92bfa26f60 RCX: 00007f92bf913b19 [ 366.418318] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 366.418333] RBP: 00007f92bce891d0 R08: 0000000000000000 R09: 0000000000000000 [ 366.418348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.418362] R13: 00007ffd5e15f13f R14: 00007f92bce89300 R15: 0000000000022000 [ 366.418401] [ 366.829700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.835028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:38:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 4) 00:38:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e21, 0xc9, @mcast1, 0x1000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="256930bfe260d390548168417639a634694a046a89c1e6659cf5b5292dde8f056f6ea71303c1ef79f9562845bd6606b630945b15c15eb265caedca2c0ddcc9ae35b9b71215f2e4ab73c76e8f7afd9e0a3c9584aaa81c9c5a1c1447cecbb48f22854b880a269ed2e255c5124ee1fdb3875c", 0x71}, {&(0x7f00000000c0)="a8cf1f9a0e40e2434b4ecdc9a9c58660922a032dffa51e34ce70dc2204d36098b1b073fe57c8b6a9c37a4fab0ab966396835a68434d0a4ec2f1377ee77af360be6aa542784f1c450ec005fa5c415123565dd75fa65c44783fc7df10795658d54290d9267d446833e1f198d62744c74deed77d20006e99d16496fc6c33cfa6cd32cb676fb0ae8c2ee2b4ee59cb6e8e1fbabc2a55608e5903a0e4b12007ad8b4e9a4603c16f2980a9fea6cf87746d07706c7522a2349c3049e89ebb78eee8ce6fe", 0xc0}, {&(0x7f0000000180)="e0267cd7ac9fa1c2125554ed27e50992b86eb01b043ea063aa1ec43eebd4da2f90a218028b9f7be6009e4fd765931d8ae405c463582bd8d83938357a0eb5fc25bf024c17240df36ee511aee4204349273b2c512dd83d344ddcc34e476037d890b949ab8a689afc0fbe32a5938e0f44e08cd0a0da7585cb278e3279b07f5437573a3fef59cfa9a83d54d30f9f5bb9a3efdcba31493dc8d6e1c2696c6985b918b5e53f10a30be91de4f3fe0761e45f1fd8fb4dbd6e17b5084bdd5e51302325c96249f3fe3833df0e31561d1f91c836e9588d973b700234bb1519f23262e3d3cf222e68985af64fa2c809fb08973baa4d1cfa2b62bd0936", 0xf6}, {&(0x7f0000000280)="8be2a389d728c37f8afe7fffadfba14b4aba1f78fbc5d3c31b8500731d6199bf7647ecee411b94e2576574833f0a1289134e84204ba86b84110b5978c445b0504ba2ba6026798326dabaed9036bbde48a8e0487dd0a4761e152a92d58a14aa9f7a6dc3a67ff6aef228f77e3ab407e383967a605c521b830481b73b046638064b54b7503babab9ffc", 0x88}, {&(0x7f0000000340)="a62a14edacd9bb84d71e2619ac00513d3acd5c2f9ad7ccd0472ad93efd1d9d75948b969f8b87efcdfbb0bc45b48a5e45727bc540e9c65ea01294d31e30c40467319205b35697c58a9959cb4d961997ea684656fca806542b78728b11dd7e5c8c5d029460da2e0467c8c148ca87f3", 0x6e}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="000000005000000000000000290000003600000084060000000000000720000000000000000300000000000000740000000000000100050200060502000105020009400100"/84], 0x1178}, 0x1) 00:38:56 executing program 1: timer_create(0x2, &(0x7f0000000040)={0x0, 0x3c, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:56 executing program 6: timer_create(0x2, &(0x7f0000000040)={0x0, 0x3c, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 2) 00:38:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 00:38:56 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r3 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0x3, r4, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r3, 0xffffffffffffffff, r4], 0x4, {r5}}, 0x58) 00:38:56 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 377.192430] FAULT_INJECTION: forcing a failure. [ 377.192430] name failslab, interval 1, probability 0, space 0, times 0 [ 377.194147] CPU: 0 UID: 0 PID: 5090 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 377.194176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 377.194188] Call Trace: [ 377.194195] [ 377.194204] dump_stack_lvl+0xfa/0x120 [ 377.194240] should_fail_ex+0x4d7/0x5e0 [ 377.194280] should_failslab+0xc2/0x120 [ 377.194312] kmem_cache_alloc_node_noprof+0x79/0x6a0 [ 377.194339] ? __alloc_skb+0x2ab/0x370 [ 377.194376] ? __alloc_skb+0x2ab/0x370 [ 377.194400] ? __pfx_netlink_insert+0x10/0x10 [ 377.194428] __alloc_skb+0x2ab/0x370 [ 377.194456] ? __pfx___alloc_skb+0x10/0x10 [ 377.194483] ? netlink_autobind.isra.0+0x158/0x370 [ 377.194527] netlink_alloc_large_skb+0x69/0x150 [ 377.194560] netlink_sendmsg+0x676/0xd80 [ 377.194598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.194646] ____sys_sendmsg+0xa67/0xc20 [ 377.194670] ? copy_msghdr_from_user+0xfb/0x150 [ 377.194700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.194735] ? lock_acquire+0x15e/0x2f0 [ 377.194767] ___sys_sendmsg+0x10f/0x1b0 [ 377.194798] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.194825] ? perf_trace_lock+0xb5/0x5d0 [ 377.194865] ? __pfx_perf_trace_lock+0x10/0x10 [ 377.194889] ? proc_fail_nth_write+0x97/0x220 [ 377.194924] ? lock_acquire+0x15e/0x2f0 [ 377.194948] ? __fget_files+0x34/0x3b0 [ 377.194974] ? find_held_lock+0x2b/0x80 [ 377.195005] ? __fget_files+0x203/0x3b0 [ 377.195029] ? lock_release+0xc8/0x290 [ 377.195060] ? __fget_files+0x20d/0x3b0 [ 377.195098] __sys_sendmsg+0x150/0x200 [ 377.195127] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.195170] ? __pfx_ksys_write+0x10/0x10 [ 377.195211] do_syscall_64+0xbf/0x390 [ 377.195242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.195265] RIP: 0033:0x7f92bf913b19 [ 377.195281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 377.195301] RSP: 002b:00007f92bce89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.195322] RAX: ffffffffffffffda RBX: 00007f92bfa26f60 RCX: 00007f92bf913b19 [ 377.195336] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 377.195349] RBP: 00007f92bce891d0 R08: 0000000000000000 R09: 0000000000000000 [ 377.195361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.195374] R13: 00007ffd5e15f13f R14: 00007f92bce89300 R15: 0000000000022000 [ 377.195409] 00:38:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 5) 00:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 3) 00:38:57 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:57 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f80100200040000300000000000000800029c98f6af153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="53595a4b414c4c45522020080000e980325132510000e980325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100060e970325132510000e970325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200060e970325132510000e970325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200060e970325132510000e970325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200060e970325132510000e9703251070064000000", 0x120, 0xa00}, {&(0x7f0000010700)="2e2020202020202020202010005fe970325132510000e97032510300000000002e2e20202020202020202010005fe970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200060e970325132510000e970325104001a040000", 0x80, 0x11200}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21200}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31200}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51200}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00']) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)='s', 0x1}], 0x1, 0x498a, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x1}], 0x1, 0x1000, 0x0) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x100) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0xa0100, 0x0) 00:38:57 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) 00:38:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 6) 00:38:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 4) [ 377.412976] loop5: detected capacity change from 0 to 1298 [ 377.431314] FAULT_INJECTION: forcing a failure. [ 377.431314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.432337] CPU: 1 UID: 0 PID: 5111 Comm: syz-executor.0 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 377.432355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 377.432363] Call Trace: [ 377.432368] [ 377.432373] dump_stack_lvl+0xfa/0x120 [ 377.432399] should_fail_ex+0x4d7/0x5e0 [ 377.432425] _copy_from_iter+0x1dc/0x1660 [ 377.432439] ? lock_acquire+0x15e/0x2f0 [ 377.432456] ? __virt_addr_valid+0x1c6/0x5d0 [ 377.432477] ? find_held_lock+0x2b/0x80 [ 377.432498] ? __pfx__copy_from_iter+0x10/0x10 [ 377.432509] ? lock_release+0xc8/0x290 [ 377.432526] ? __virt_addr_valid+0x100/0x5d0 [ 377.432547] ? __check_object_size+0x57b/0x880 [ 377.432569] netlink_sendmsg+0x809/0xd80 [ 377.432593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.432627] ____sys_sendmsg+0xa67/0xc20 [ 377.432643] ? copy_msghdr_from_user+0xfb/0x150 [ 377.432661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.432681] ? lock_acquire+0x15e/0x2f0 [ 377.432698] ___sys_sendmsg+0x10f/0x1b0 [ 377.432716] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.432732] ? perf_trace_lock+0xb5/0x5d0 [ 377.432751] ? __pfx_perf_trace_lock+0x10/0x10 [ 377.432765] ? proc_fail_nth_write+0x97/0x220 [ 377.432786] ? lock_acquire+0x15e/0x2f0 [ 377.432800] ? __fget_files+0x34/0x3b0 [ 377.432815] ? find_held_lock+0x2b/0x80 [ 377.432834] ? __fget_files+0x203/0x3b0 [ 377.432852] ? lock_release+0xc8/0x290 [ 377.432870] ? __fget_files+0x20d/0x3b0 [ 377.432895] __sys_sendmsg+0x150/0x200 [ 377.432912] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.432937] ? __pfx_ksys_write+0x10/0x10 [ 377.432960] do_syscall_64+0xbf/0x390 [ 377.432980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.432994] RIP: 0033:0x7f445f861b19 [ 377.433004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 377.433016] RSP: 002b:00007f445cdd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.433028] RAX: ffffffffffffffda RBX: 00007f445f974f60 RCX: 00007f445f861b19 [ 377.433037] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 377.433045] RBP: 00007f445cdd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 377.433053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.433060] R13: 00007ffc75dfb49f R14: 00007f445cdd7300 R15: 0000000000022000 [ 377.433080] 00:38:57 executing program 1: timer_create(0x2, &(0x7f0000000040)={0x0, 0x3c, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e21, 0xc9, @mcast1, 0x1000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="256930bfe260d390548168417639a634694a046a89c1e6659cf5b5292dde8f056f6ea71303c1ef79f9562845bd6606b630945b15c15eb265caedca2c0ddcc9ae35b9b71215f2e4ab73c76e8f7afd9e0a3c9584aaa81c9c5a1c1447cecbb48f22854b880a269ed2e255c5124ee1fdb3875c", 0x71}, {&(0x7f00000000c0)="a8cf1f9a0e40e2434b4ecdc9a9c58660922a032dffa51e34ce70dc2204d36098b1b073fe57c8b6a9c37a4fab0ab966396835a68434d0a4ec2f1377ee77af360be6aa542784f1c450ec005fa5c415123565dd75fa65c44783fc7df10795658d54290d9267d446833e1f198d62744c74deed77d20006e99d16496fc6c33cfa6cd32cb676fb0ae8c2ee2b4ee59cb6e8e1fbabc2a55608e5903a0e4b12007ad8b4e9a4603c16f2980a9fea6cf87746d07706c7522a2349c3049e89ebb78eee8ce6fe", 0xc0}, {&(0x7f0000000180)="e0267cd7ac9fa1c2125554ed27e50992b86eb01b043ea063aa1ec43eebd4da2f90a218028b9f7be6009e4fd765931d8ae405c463582bd8d83938357a0eb5fc25bf024c17240df36ee511aee4204349273b2c512dd83d344ddcc34e476037d890b949ab8a689afc0fbe32a5938e0f44e08cd0a0da7585cb278e3279b07f5437573a3fef59cfa9a83d54d30f9f5bb9a3efdcba31493dc8d6e1c2696c6985b918b5e53f10a30be91de4f3fe0761e45f1fd8fb4dbd6e17b5084bdd5e51302325c96249f3fe3833df0e31561d1f91c836e9588d973b700234bb1519f23262e3d3cf222e68985af64fa2c809fb08973baa4d1cfa2b62bd0936", 0xf6}, {&(0x7f0000000280)="8be2a389d728c37f8afe7fffadfba14b4aba1f78fbc5d3c31b8500731d6199bf7647ecee411b94e2576574833f0a1289134e84204ba86b84110b5978c445b0504ba2ba6026798326dabaed9036bbde48a8e0487dd0a4761e152a92d58a14aa9f7a6dc3a67ff6aef228f77e3ab407e383967a605c521b830481b73b046638064b54b7503babab9ffc", 0x88}, {&(0x7f0000000340)="a62a14edacd9bb84d71e2619ac00513d3acd5c2f9ad7ccd0472ad93efd1d9d75948b969f8b87efcdfbb0bc45b48a5e45727bc540e9c65ea01294d31e30c40467319205b35697c58a9959cb4d961997ea684656fca806542b78728b11dd7e5c8c5d029460da2e0467c8c148ca87f3", 0x6e}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="000000005000000000000000290000003600000084060000000000000720000000000000000300000000000000740000000000000100050200060502000105020009400100"/84], 0x1178}, 0x1) [ 378.047756] FAULT_INJECTION: forcing a failure. [ 378.047756] name failslab, interval 1, probability 0, space 0, times 0 [ 378.048874] CPU: 1 UID: 0 PID: 5131 Comm: syz-executor.0 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 378.048890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 378.048897] Call Trace: [ 378.048902] [ 378.048907] dump_stack_lvl+0xfa/0x120 [ 378.048931] should_fail_ex+0x4d7/0x5e0 [ 378.048955] should_failslab+0xc2/0x120 [ 378.048973] __kmalloc_cache_noprof+0x73/0x6a0 [ 378.048985] ? __pfx___mutex_lock+0x10/0x10 [ 378.049004] ? genl_start+0x1e8/0x960 [ 378.049024] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 378.049047] ? genl_start+0x1e8/0x960 [ 378.049064] genl_start+0x1e8/0x960 [ 378.049085] __netlink_dump_start+0x5fd/0x980 [ 378.049105] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 378.049125] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 378.049157] ? __pfx_genl_get_cmd+0x10/0x10 00:38:57 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r3 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0x3, r4, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r3, 0xffffffffffffffff, r4], 0x4, {r5}}, 0x58) 00:38:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 7) 00:38:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 5) 00:38:57 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) 00:38:57 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:57 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 378.049173] ? __pfx_genl_start+0x10/0x10 [ 378.049189] ? __pfx_genl_dumpit+0x10/0x10 [ 378.049206] ? __pfx_genl_done+0x10/0x10 [ 378.049226] ? __radix_tree_lookup+0x1f7/0x290 [ 378.049247] genl_rcv_msg+0x447/0x7e0 [ 378.049268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.049288] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 378.049305] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 378.049333] netlink_rcv_skb+0x147/0x430 [ 378.049350] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.049370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.049401] ? netlink_deliver_tap+0x1ae/0xce0 [ 378.049421] genl_rcv+0x28/0x40 [ 378.049437] netlink_unicast+0x5a7/0x870 [ 378.049457] ? __pfx_netlink_unicast+0x10/0x10 [ 378.049483] netlink_sendmsg+0x8ac/0xd80 [ 378.049504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.049530] ____sys_sendmsg+0xa67/0xc20 [ 378.049545] ? copy_msghdr_from_user+0xfb/0x150 [ 378.049562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.049581] ? lock_acquire+0x15e/0x2f0 [ 378.049599] ___sys_sendmsg+0x10f/0x1b0 [ 378.049616] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.049631] ? perf_trace_lock+0xb5/0x5d0 [ 378.049649] ? __pfx_perf_trace_lock+0x10/0x10 [ 378.049662] ? proc_fail_nth_write+0x97/0x220 [ 378.049682] ? lock_acquire+0x15e/0x2f0 [ 378.049695] ? __fget_files+0x34/0x3b0 [ 378.049710] ? find_held_lock+0x2b/0x80 [ 378.049727] ? __fget_files+0x203/0x3b0 [ 378.049741] ? lock_release+0xc8/0x290 [ 378.049757] ? __fget_files+0x20d/0x3b0 [ 378.049778] __sys_sendmsg+0x150/0x200 [ 378.049794] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.049818] ? __pfx_ksys_write+0x10/0x10 [ 378.049845] do_syscall_64+0xbf/0x390 [ 378.049862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.049874] RIP: 0033:0x7f445f861b19 [ 378.049884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 378.049895] RSP: 002b:00007f445cdd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.049907] RAX: ffffffffffffffda RBX: 00007f445f974f60 RCX: 00007f445f861b19 [ 378.049915] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 378.049922] RBP: 00007f445cdd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 378.049929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.049935] R13: 00007ffc75dfb49f R14: 00007f445cdd7300 R15: 0000000000022000 [ 378.049955] 00:38:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 6) [ 378.235197] FAULT_INJECTION: forcing a failure. [ 378.235197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.237010] CPU: 0 UID: 0 PID: 5142 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 378.237058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 378.237078] Call Trace: [ 378.237090] [ 378.237104] dump_stack_lvl+0xfa/0x120 [ 378.237170] should_fail_ex+0x4d7/0x5e0 [ 378.237237] _copy_from_iter+0x1dc/0x1660 [ 378.237275] ? lock_acquire+0x15e/0x2f0 [ 378.237305] ? __virt_addr_valid+0x1c6/0x5d0 [ 378.237342] ? find_held_lock+0x2b/0x80 [ 378.237379] ? __pfx__copy_from_iter+0x10/0x10 [ 378.237398] ? lock_release+0xc8/0x290 [ 378.237430] ? __virt_addr_valid+0x100/0x5d0 [ 378.237468] ? __check_object_size+0x57b/0x880 [ 378.237501] netlink_sendmsg+0x809/0xd80 [ 378.237543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.237593] ____sys_sendmsg+0xa67/0xc20 [ 378.237620] ? copy_msghdr_from_user+0xfb/0x150 [ 378.237652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.237688] ? lock_acquire+0x15e/0x2f0 [ 378.237720] ___sys_sendmsg+0x10f/0x1b0 [ 378.237753] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.237782] ? perf_trace_lock+0xb5/0x5d0 [ 378.237816] ? __pfx_perf_trace_lock+0x10/0x10 [ 378.237849] ? proc_fail_nth_write+0x97/0x220 [ 378.237886] ? lock_acquire+0x15e/0x2f0 [ 378.237911] ? __fget_files+0x34/0x3b0 [ 378.237938] ? find_held_lock+0x2b/0x80 [ 378.237972] ? __fget_files+0x203/0x3b0 [ 378.237998] ? lock_release+0xc8/0x290 [ 378.238031] ? __fget_files+0x20d/0x3b0 [ 378.238071] __sys_sendmsg+0x150/0x200 [ 378.238102] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.238148] ? __pfx_ksys_write+0x10/0x10 [ 378.238190] do_syscall_64+0xbf/0x390 [ 378.238223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.238247] RIP: 0033:0x7f92bf913b19 [ 378.238264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 378.238286] RSP: 002b:00007f92bce89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.238308] RAX: ffffffffffffffda RBX: 00007f92bfa26f60 RCX: 00007f92bf913b19 [ 378.238323] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 378.238336] RBP: 00007f92bce891d0 R08: 0000000000000000 R09: 0000000000000000 [ 378.238350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.238363] R13: 00007ffd5e15f13f R14: 00007f92bce89300 R15: 0000000000022000 [ 378.238400] 00:39:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, 0x0, 0x1) 00:39:08 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:08 executing program 6: timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") 00:39:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 8) 00:39:08 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) 00:39:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 7) 00:39:08 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r3 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0x3, r4, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r3, 0xffffffffffffffff, r4], 0x4, {r5}}, 0x58) [ 388.795283] FAULT_INJECTION: forcing a failure. [ 388.795283] name failslab, interval 1, probability 0, space 0, times 0 [ 388.797346] CPU: 1 UID: 0 PID: 5148 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 388.797380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.797394] Call Trace: [ 388.797402] [ 388.797411] dump_stack_lvl+0xfa/0x120 [ 388.797451] should_fail_ex+0x4d7/0x5e0 [ 388.797496] should_failslab+0xc2/0x120 [ 388.797531] __kmalloc_cache_noprof+0x73/0x6a0 [ 388.797554] ? __pfx___mutex_lock+0x10/0x10 [ 388.797587] ? genl_start+0x1e8/0x960 [ 388.797624] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 388.797671] ? genl_start+0x1e8/0x960 [ 388.797707] genl_start+0x1e8/0x960 [ 388.797751] __netlink_dump_start+0x5fd/0x980 [ 388.797793] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 388.797835] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 388.797901] ? __pfx_genl_get_cmd+0x10/0x10 [ 388.797950] ? __pfx_genl_start+0x10/0x10 [ 388.797989] ? __pfx_genl_dumpit+0x10/0x10 [ 388.798023] ? __pfx_genl_done+0x10/0x10 [ 388.798066] ? __radix_tree_lookup+0x1f7/0x290 [ 388.798106] genl_rcv_msg+0x447/0x7e0 [ 388.798151] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.798191] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 388.798224] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 388.798280] netlink_rcv_skb+0x147/0x430 [ 388.798316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.798357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.798414] ? netlink_deliver_tap+0x1ae/0xce0 [ 388.798455] genl_rcv+0x28/0x40 [ 388.798489] netlink_unicast+0x5a7/0x870 [ 388.798534] ? __pfx_netlink_unicast+0x10/0x10 [ 388.798588] netlink_sendmsg+0x8ac/0xd80 [ 388.798632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.798687] ____sys_sendmsg+0xa67/0xc20 [ 388.798715] ? copy_msghdr_from_user+0xfb/0x150 [ 388.798750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.798790] ? lock_acquire+0x15e/0x2f0 [ 388.798826] ___sys_sendmsg+0x10f/0x1b0 [ 388.798861] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.798894] ? perf_trace_lock+0xb5/0x5d0 [ 388.798952] ? __pfx_perf_trace_lock+0x10/0x10 [ 388.798995] ? proc_fail_nth_write+0x97/0x220 [ 388.799046] ? lock_acquire+0x15e/0x2f0 [ 388.799073] ? __fget_files+0x34/0x3b0 [ 388.799101] ? find_held_lock+0x2b/0x80 [ 388.799137] ? __fget_files+0x203/0x3b0 [ 388.799165] ? lock_release+0xc8/0x290 [ 388.799200] ? __fget_files+0x20d/0x3b0 [ 388.799244] __sys_sendmsg+0x150/0x200 [ 388.799278] ? __pfx___sys_sendmsg+0x10/0x10 [ 388.799328] ? __pfx_ksys_write+0x10/0x10 [ 388.799374] do_syscall_64+0xbf/0x390 [ 388.799410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.799433] RIP: 0033:0x7f92bf913b19 [ 388.799452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 388.799474] RSP: 002b:00007f92bce89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.799498] RAX: ffffffffffffffda RBX: 00007f92bfa26f60 RCX: 00007f92bf913b19 [ 388.799514] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 388.799529] RBP: 00007f92bce891d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.799543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.799557] R13: 00007ffd5e15f13f R14: 00007f92bce89300 R15: 0000000000022000 [ 388.799598] [ 388.822325] FAULT_INJECTION: forcing a failure. [ 388.822325] name failslab, interval 1, probability 0, space 0, times 0 [ 388.856440] CPU: 0 UID: 0 PID: 5157 Comm: syz-executor.0 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 388.856476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.856491] Call Trace: [ 388.856501] [ 388.856512] dump_stack_lvl+0xfa/0x120 [ 388.856555] should_fail_ex+0x4d7/0x5e0 [ 388.856603] should_failslab+0xc2/0x120 [ 388.856640] __kmalloc_cache_noprof+0x73/0x6a0 [ 388.856663] ? __pfx___mutex_lock+0x10/0x10 [ 388.856698] ? genl_start+0x1e8/0x960 [ 388.856738] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 388.856787] ? genl_start+0x1e8/0x960 [ 388.856824] genl_start+0x1e8/0x960 [ 388.856877] __netlink_dump_start+0x5fd/0x980 [ 388.856921] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 388.856965] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 388.857020] ? __pfx_genl_get_cmd+0x10/0x10 [ 388.857054] ? __pfx_genl_start+0x10/0x10 [ 388.857089] ? __pfx_genl_dumpit+0x10/0x10 [ 388.857125] ? __pfx_genl_done+0x10/0x10 [ 388.857169] ? __radix_tree_lookup+0x1f7/0x290 [ 388.857210] genl_rcv_msg+0x447/0x7e0 [ 388.857256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.857413] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 388.857445] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 388.857495] netlink_rcv_skb+0x147/0x430 [ 388.857530] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.857566] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.857616] ? netlink_deliver_tap+0x1ae/0xce0 [ 388.857652] genl_rcv+0x28/0x40 [ 388.857682] netlink_unicast+0x5a7/0x870 [ 388.857720] ? __pfx_netlink_unicast+0x10/0x10 [ 388.857778] netlink_sendmsg+0x8ac/0xd80 [ 388.857817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.857865] ____sys_sendmsg+0xa67/0xc20 [ 388.857890] ? copy_msghdr_from_user+0xfb/0x150 [ 388.857920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.857955] ? lock_acquire+0x15e/0x2f0 [ 388.857987] ___sys_sendmsg+0x10f/0x1b0 [ 388.858018] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.858045] ? perf_trace_lock+0xb5/0x5d0 [ 388.858077] ? __pfx_perf_trace_lock+0x10/0x10 [ 388.858101] ? proc_fail_nth_write+0x97/0x220 [ 388.858137] ? lock_acquire+0x15e/0x2f0 [ 388.858160] ? __fget_files+0x34/0x3b0 [ 388.858185] ? find_held_lock+0x2b/0x80 [ 388.858217] ? __fget_files+0x203/0x3b0 [ 388.858241] ? lock_release+0xc8/0x290 [ 388.858271] ? __fget_files+0x20d/0x3b0 [ 388.858310] __sys_sendmsg+0x150/0x200 [ 388.858339] ? __pfx___sys_sendmsg+0x10/0x10 [ 388.858382] ? __pfx_ksys_write+0x10/0x10 [ 388.858422] do_syscall_64+0xbf/0x390 [ 388.858455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.858479] RIP: 0033:0x7f445f861b19 [ 388.858499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 388.858519] RSP: 002b:00007f445cdd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.858540] RAX: ffffffffffffffda RBX: 00007f445f974f60 RCX: 00007f445f861b19 [ 388.858554] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 388.858566] RBP: 00007f445cdd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.858578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.858591] R13: 00007ffc75dfb49f R14: 00007f445cdd7300 R15: 0000000000022000 [ 388.858627] 00:39:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 8) 00:39:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 9) [ 389.167767] FAULT_INJECTION: forcing a failure. [ 389.167767] name failslab, interval 1, probability 0, space 0, times 0 [ 389.169479] CPU: 0 UID: 0 PID: 5168 Comm: syz-executor.0 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 389.169510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 389.169523] Call Trace: [ 389.169531] [ 389.169540] dump_stack_lvl+0xfa/0x120 [ 389.169578] should_fail_ex+0x4d7/0x5e0 [ 389.169621] should_failslab+0xc2/0x120 [ 389.169655] kmem_cache_alloc_node_noprof+0x79/0x6a0 [ 389.169684] ? __alloc_skb+0x2ab/0x370 [ 389.169714] ? kasan_save_stack+0x34/0x50 [ 389.169753] ? __alloc_skb+0x2ab/0x370 [ 389.169779] ? netlink_unicast+0x5a7/0x870 [ 389.169810] __alloc_skb+0x2ab/0x370 [ 389.169846] ? __pfx___alloc_skb+0x10/0x10 [ 389.169874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.169906] ? do_raw_spin_lock+0x123/0x260 [ 389.169947] netlink_dump+0x194/0x1200 [ 389.169976] ? mark_held_locks+0x49/0x80 [ 389.170009] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 389.170035] ? __pfx_netlink_dump+0x10/0x10 [ 389.170086] ? __asan_memset+0x24/0x50 [ 389.170115] ? genl_start+0x66e/0x960 [ 389.170157] __netlink_dump_start+0x6c5/0x980 [ 389.170196] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 389.170236] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 389.170286] ? __pfx_genl_get_cmd+0x10/0x10 [ 389.170317] ? __pfx_genl_start+0x10/0x10 [ 389.170349] ? __pfx_genl_dumpit+0x10/0x10 [ 389.170382] ? __pfx_genl_done+0x10/0x10 [ 389.170421] ? __radix_tree_lookup+0x1f7/0x290 [ 389.170459] genl_rcv_msg+0x447/0x7e0 [ 389.170501] ? __pfx_genl_rcv_msg+0x10/0x10 [ 389.170538] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 389.170570] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 389.170622] netlink_rcv_skb+0x147/0x430 [ 389.170656] ? __pfx_genl_rcv_msg+0x10/0x10 [ 389.170695] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 389.170748] ? netlink_deliver_tap+0x1ae/0xce0 [ 389.170787] genl_rcv+0x28/0x40 [ 389.170819] netlink_unicast+0x5a7/0x870 [ 389.170859] ? __pfx_netlink_unicast+0x10/0x10 [ 389.170910] netlink_sendmsg+0x8ac/0xd80 [ 389.170951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.171002] ____sys_sendmsg+0xa67/0xc20 [ 389.171028] ? copy_msghdr_from_user+0xfb/0x150 [ 389.171060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.171100] ? lock_acquire+0x15e/0x2f0 [ 389.171135] ___sys_sendmsg+0x10f/0x1b0 [ 389.171168] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.171197] ? perf_trace_lock+0xb5/0x5d0 [ 389.171232] ? __pfx_perf_trace_lock+0x10/0x10 [ 389.171258] ? proc_fail_nth_write+0x97/0x220 [ 389.171296] ? lock_acquire+0x15e/0x2f0 [ 389.171321] ? __fget_files+0x34/0x3b0 [ 389.171349] ? find_held_lock+0x2b/0x80 [ 389.171383] ? __fget_files+0x203/0x3b0 [ 389.171409] ? lock_release+0xc8/0x290 [ 389.171442] ? __fget_files+0x20d/0x3b0 [ 389.171483] __sys_sendmsg+0x150/0x200 [ 389.171515] ? __pfx___sys_sendmsg+0x10/0x10 [ 389.171561] ? __pfx_ksys_write+0x10/0x10 [ 389.171604] do_syscall_64+0xbf/0x390 [ 389.171637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.171660] RIP: 0033:0x7f445f861b19 [ 389.171677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 389.171699] RSP: 002b:00007f445cdd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.171721] RAX: ffffffffffffffda RBX: 00007f445f974f60 RCX: 00007f445f861b19 [ 389.171736] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 389.171749] RBP: 00007f445cdd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 389.171763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.171776] R13: 00007ffc75dfb49f R14: 00007f445cdd7300 R15: 0000000000022000 [ 389.171814] 00:39:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 9) [ 389.316066] FAULT_INJECTION: forcing a failure. [ 389.316066] name failslab, interval 1, probability 0, space 0, times 0 [ 389.318126] CPU: 0 UID: 0 PID: 5175 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 389.318157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 389.318170] Call Trace: [ 389.318178] [ 389.318187] dump_stack_lvl+0xfa/0x120 [ 389.318224] should_fail_ex+0x4d7/0x5e0 [ 389.318267] should_failslab+0xc2/0x120 [ 389.318300] kmem_cache_alloc_node_noprof+0x79/0x6a0 [ 389.318329] ? __alloc_skb+0x2ab/0x370 [ 389.318358] ? kasan_save_stack+0x34/0x50 [ 389.318398] ? __alloc_skb+0x2ab/0x370 [ 389.318424] ? netlink_unicast+0x5a7/0x870 [ 389.318454] __alloc_skb+0x2ab/0x370 [ 389.318484] ? __pfx___alloc_skb+0x10/0x10 [ 389.318511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.318542] ? do_raw_spin_lock+0x123/0x260 [ 389.318583] netlink_dump+0x194/0x1200 [ 389.318612] ? mark_held_locks+0x49/0x80 [ 389.318644] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 389.318669] ? __pfx_netlink_dump+0x10/0x10 [ 389.318720] ? __asan_memset+0x24/0x50 [ 389.318750] ? genl_start+0x66e/0x960 [ 389.318791] __netlink_dump_start+0x6c5/0x980 [ 389.318831] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 389.318878] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 389.318927] ? __pfx_genl_get_cmd+0x10/0x10 [ 389.318959] ? __pfx_genl_start+0x10/0x10 [ 389.318990] ? __pfx_genl_dumpit+0x10/0x10 [ 389.319023] ? __pfx_genl_done+0x10/0x10 [ 389.319062] ? __radix_tree_lookup+0x1f7/0x290 [ 389.319100] genl_rcv_msg+0x447/0x7e0 [ 389.319142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 389.319179] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 389.319211] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 389.319264] netlink_rcv_skb+0x147/0x430 [ 389.319297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 389.319336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 389.319391] ? netlink_deliver_tap+0x1ae/0xce0 [ 389.319432] genl_rcv+0x28/0x40 [ 389.319464] netlink_unicast+0x5a7/0x870 [ 389.319504] ? __pfx_netlink_unicast+0x10/0x10 [ 389.319555] netlink_sendmsg+0x8ac/0xd80 [ 389.319596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.319647] ____sys_sendmsg+0xa67/0xc20 [ 389.319673] ? copy_msghdr_from_user+0xfb/0x150 [ 389.319705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.319743] ? lock_acquire+0x15e/0x2f0 [ 389.319775] ___sys_sendmsg+0x10f/0x1b0 [ 389.319808] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.319837] ? perf_trace_lock+0xb5/0x5d0 [ 389.319872] ? __pfx_perf_trace_lock+0x10/0x10 [ 389.319898] ? proc_fail_nth_write+0x97/0x220 [ 389.319936] ? lock_acquire+0x15e/0x2f0 [ 389.319962] ? __fget_files+0x34/0x3b0 [ 389.319989] ? find_held_lock+0x2b/0x80 [ 389.320023] ? __fget_files+0x203/0x3b0 [ 389.320049] ? lock_release+0xc8/0x290 [ 389.320082] ? __fget_files+0x20d/0x3b0 [ 389.320123] __sys_sendmsg+0x150/0x200 [ 389.320155] ? __pfx___sys_sendmsg+0x10/0x10 [ 389.320201] ? __pfx_ksys_write+0x10/0x10 [ 389.320245] do_syscall_64+0xbf/0x390 [ 389.320278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.320300] RIP: 0033:0x7f92bf913b19 [ 389.320318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 389.320339] RSP: 002b:00007f92bce89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.320361] RAX: ffffffffffffffda RBX: 00007f92bfa26f60 RCX: 00007f92bf913b19 [ 389.320376] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 389.320389] RBP: 00007f92bce891d0 R08: 0000000000000000 R09: 0000000000000000 [ 389.320403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.320416] R13: 00007ffd5e15f13f R14: 00007f92bce89300 R15: 0000000000022000 [ 389.320454] 00:39:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r2 = fork() ptrace(0x10, r2) 00:39:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") 00:39:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 10) 00:39:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 10) 00:39:20 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x800000000000, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) write$binfmt_elf32(r1, 0x0, 0x0) 00:39:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, 0x0, 0x1) 00:39:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r2 = fork() ptrace(0x10, r2) 00:39:20 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r3 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0x3, r4, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r3, 0xffffffffffffffff, r4], 0x4, {r5}}, 0x58) 00:39:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 11) 00:39:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 11) 00:39:20 executing program 6: timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 12) 00:39:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 12) 00:39:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x26) recvfrom(r0, 0x0, 0xe, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x100, 0x4) r1 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r1, 0x0, 0x0, 0x4004051, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 00:39:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 13) 00:39:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) fork() [ 400.857986] FAULT_INJECTION: forcing a failure. [ 400.857986] name failslab, interval 1, probability 0, space 0, times 0 [ 400.859872] CPU: 0 UID: 0 PID: 5226 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 400.859906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 400.859918] Call Trace: [ 400.859926] [ 400.859935] dump_stack_lvl+0xfa/0x120 [ 400.859971] should_fail_ex+0x4d7/0x5e0 [ 400.860013] should_failslab+0xc2/0x120 [ 400.860044] __kmalloc_cache_noprof+0x73/0x6a0 [ 400.860070] ? nl80211_dump_wiphy+0x48e/0x820 [ 400.860108] ? nl80211_dump_wiphy+0x48e/0x820 [ 400.860137] nl80211_dump_wiphy+0x48e/0x820 [ 400.860165] ? __pfx___alloc_skb+0x10/0x10 [ 400.860193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.860228] genl_dumpit+0x125/0x220 [ 400.860265] netlink_dump+0x51a/0x1200 [ 400.860300] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 400.860324] ? __pfx_netlink_dump+0x10/0x10 [ 400.860373] ? __asan_memset+0x24/0x50 [ 400.860401] ? genl_start+0x66e/0x960 [ 400.860440] __netlink_dump_start+0x6c5/0x980 [ 400.860476] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 400.860514] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 400.860560] ? __pfx_genl_get_cmd+0x10/0x10 [ 400.860589] ? __pfx_genl_start+0x10/0x10 [ 400.860618] ? __pfx_genl_dumpit+0x10/0x10 [ 400.860648] ? __pfx_genl_done+0x10/0x10 [ 400.860685] ? __radix_tree_lookup+0x1f7/0x290 [ 400.860721] genl_rcv_msg+0x447/0x7e0 [ 400.860761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.860796] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 400.860823] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 400.860881] netlink_rcv_skb+0x147/0x430 [ 400.860912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.860949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.860999] ? netlink_deliver_tap+0x1ae/0xce0 [ 400.861035] genl_rcv+0x28/0x40 [ 400.861065] netlink_unicast+0x5a7/0x870 [ 400.861102] ? __pfx_netlink_unicast+0x10/0x10 [ 400.861151] netlink_sendmsg+0x8ac/0xd80 [ 400.861190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.861238] ____sys_sendmsg+0xa67/0xc20 [ 400.861263] ? copy_msghdr_from_user+0xfb/0x150 [ 400.861293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.861329] ? lock_acquire+0x15e/0x2f0 [ 400.861361] ___sys_sendmsg+0x10f/0x1b0 [ 400.861392] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.861433] ? perf_trace_lock+0xb5/0x5d0 [ 400.861467] ? __pfx_perf_trace_lock+0x10/0x10 [ 400.861491] ? proc_fail_nth_write+0x97/0x220 [ 400.861527] ? lock_acquire+0x15e/0x2f0 [ 400.861550] ? __fget_files+0x34/0x3b0 [ 400.861576] ? find_held_lock+0x2b/0x80 [ 400.861608] ? __fget_files+0x203/0x3b0 [ 400.861632] ? lock_release+0xc8/0x290 [ 400.861663] ? __fget_files+0x20d/0x3b0 [ 400.861702] __sys_sendmsg+0x150/0x200 [ 400.861732] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.861776] ? __pfx_ksys_write+0x10/0x10 [ 400.861818] do_syscall_64+0xbf/0x390 [ 400.861848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.861869] RIP: 0033:0x7f92bf913b19 [ 400.861887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 400.861907] RSP: 002b:00007f92bce89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.861928] RAX: ffffffffffffffda RBX: 00007f92bfa26f60 RCX: 00007f92bf913b19 [ 400.861943] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 400.861955] RBP: 00007f92bce891d0 R08: 0000000000000000 R09: 0000000000000000 [ 400.861968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.861980] R13: 00007ffd5e15f13f R14: 00007f92bce89300 R15: 0000000000022000 [ 400.862017] 00:39:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 13) 00:39:33 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, 0x0, 0x1) 00:39:33 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) 00:39:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 14) 00:39:33 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) 00:39:33 executing program 6: timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:33 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 413.868222] FAULT_INJECTION: forcing a failure. [ 413.868222] name failslab, interval 1, probability 0, space 0, times 0 [ 413.869922] CPU: 0 UID: 0 PID: 5253 Comm: syz-executor.0 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 413.869952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 413.869965] Call Trace: [ 413.869974] [ 413.869983] dump_stack_lvl+0xfa/0x120 [ 413.870020] should_fail_ex+0x4d7/0x5e0 [ 413.870064] should_failslab+0xc2/0x120 [ 413.870099] __kmalloc_cache_noprof+0x73/0x6a0 [ 413.870126] ? nl80211_dump_wiphy+0x48e/0x820 [ 413.870168] ? nl80211_dump_wiphy+0x48e/0x820 [ 413.870199] nl80211_dump_wiphy+0x48e/0x820 [ 413.870229] ? __pfx___alloc_skb+0x10/0x10 [ 413.870259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.870294] genl_dumpit+0x125/0x220 [ 413.870335] netlink_dump+0x51a/0x1200 [ 413.870373] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 413.870399] ? __pfx_netlink_dump+0x10/0x10 [ 413.870450] ? __asan_memset+0x24/0x50 [ 413.870480] ? genl_start+0x66e/0x960 [ 413.870522] __netlink_dump_start+0x6c5/0x980 [ 413.870561] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 413.870602] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 413.870651] ? __pfx_genl_get_cmd+0x10/0x10 [ 413.870683] ? __pfx_genl_start+0x10/0x10 [ 413.870715] ? __pfx_genl_dumpit+0x10/0x10 [ 413.870747] ? __pfx_genl_done+0x10/0x10 [ 413.870787] ? __radix_tree_lookup+0x1f7/0x290 [ 413.870825] genl_rcv_msg+0x447/0x7e0 [ 413.870875] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.870912] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 413.870942] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 413.870996] netlink_rcv_skb+0x147/0x430 [ 413.871029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.871068] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.871121] ? netlink_deliver_tap+0x1ae/0xce0 [ 413.871160] genl_rcv+0x28/0x40 [ 413.871192] netlink_unicast+0x5a7/0x870 [ 413.871232] ? __pfx_netlink_unicast+0x10/0x10 [ 413.871284] netlink_sendmsg+0x8ac/0xd80 [ 413.871325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.871376] ____sys_sendmsg+0xa67/0xc20 [ 413.871404] ? copy_msghdr_from_user+0xfb/0x150 [ 413.871437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.871474] ? lock_acquire+0x15e/0x2f0 [ 413.871509] ___sys_sendmsg+0x10f/0x1b0 [ 413.871543] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.871572] ? perf_trace_lock+0xb5/0x5d0 [ 413.871608] ? __pfx_perf_trace_lock+0x10/0x10 [ 413.871634] ? proc_fail_nth_write+0x97/0x220 [ 413.871675] ? lock_acquire+0x15e/0x2f0 [ 413.871702] ? __fget_files+0x34/0x3b0 [ 413.871730] ? find_held_lock+0x2b/0x80 [ 413.871765] ? __fget_files+0x203/0x3b0 [ 413.871791] ? lock_release+0xc8/0x290 [ 413.871824] ? __fget_files+0x20d/0x3b0 [ 413.871865] __sys_sendmsg+0x150/0x200 [ 413.871897] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.871943] ? __pfx_ksys_write+0x10/0x10 [ 413.871988] do_syscall_64+0xbf/0x390 [ 413.872023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.872045] RIP: 0033:0x7f445f861b19 [ 413.872064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 413.872086] RSP: 002b:00007f445cdd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.872108] RAX: ffffffffffffffda RBX: 00007f445f974f60 RCX: 00007f445f861b19 [ 413.872123] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 413.872137] RBP: 00007f445cdd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 413.872151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.872165] R13: 00007ffc75dfb49f R14: 00007f445cdd7300 R15: 0000000000022000 [ 413.872203] 00:39:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 15) [ 413.997290] FAULT_INJECTION: forcing a failure. [ 413.997290] name failslab, interval 1, probability 0, space 0, times 0 [ 413.998974] CPU: 0 UID: 0 PID: 5259 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 413.999005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 413.999019] Call Trace: [ 413.999028] [ 413.999037] dump_stack_lvl+0xfa/0x120 [ 413.999079] should_fail_ex+0x4d7/0x5e0 [ 413.999124] should_failslab+0xc2/0x120 [ 413.999159] __kmalloc_cache_noprof+0x73/0x6a0 [ 413.999182] ? mark_held_locks+0x49/0x80 [ 413.999213] ? nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 413.999253] ? nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 413.999280] nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 413.999308] ? trace_kmalloc+0x1f/0xb0 [ 413.999341] ? __pfx_nl80211_dump_wiphy_parse.constprop.0+0x10/0x10 [ 413.999385] nl80211_dump_wiphy+0x4d0/0x820 [ 413.999416] ? __pfx___alloc_skb+0x10/0x10 [ 413.999447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.999484] genl_dumpit+0x125/0x220 [ 413.999526] netlink_dump+0x51a/0x1200 [ 413.999564] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 413.999591] ? __pfx_netlink_dump+0x10/0x10 [ 413.999642] ? __asan_memset+0x24/0x50 [ 413.999671] ? genl_start+0x66e/0x960 [ 413.999713] __netlink_dump_start+0x6c5/0x980 [ 413.999752] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 413.999793] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 413.999849] ? __pfx_genl_get_cmd+0x10/0x10 [ 413.999881] ? __pfx_genl_start+0x10/0x10 [ 413.999913] ? __pfx_genl_dumpit+0x10/0x10 [ 413.999945] ? __pfx_genl_done+0x10/0x10 [ 413.999985] ? __radix_tree_lookup+0x1f7/0x290 [ 414.000024] genl_rcv_msg+0x447/0x7e0 [ 414.000066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.000104] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 414.000134] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 414.000187] netlink_rcv_skb+0x147/0x430 [ 414.000221] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.000260] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.000313] ? netlink_deliver_tap+0x1ae/0xce0 [ 414.000352] genl_rcv+0x28/0x40 [ 414.000384] netlink_unicast+0x5a7/0x870 [ 414.000424] ? __pfx_netlink_unicast+0x10/0x10 [ 414.000475] netlink_sendmsg+0x8ac/0xd80 [ 414.000516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.000567] ____sys_sendmsg+0xa67/0xc20 [ 414.000594] ? copy_msghdr_from_user+0xfb/0x150 [ 414.000627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.000665] ? lock_acquire+0x15e/0x2f0 [ 414.000697] ___sys_sendmsg+0x10f/0x1b0 [ 414.000731] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.000760] ? perf_trace_lock+0xb5/0x5d0 [ 414.000796] ? __pfx_perf_trace_lock+0x10/0x10 [ 414.000822] ? proc_fail_nth_write+0x97/0x220 [ 414.000860] ? lock_acquire+0x15e/0x2f0 [ 414.000886] ? __fget_files+0x34/0x3b0 [ 414.000917] ? find_held_lock+0x2b/0x80 [ 414.000953] ? __fget_files+0x203/0x3b0 [ 414.000979] ? lock_release+0xc8/0x290 [ 414.001012] ? __fget_files+0x20d/0x3b0 [ 414.001054] __sys_sendmsg+0x150/0x200 [ 414.001085] ? __pfx___sys_sendmsg+0x10/0x10 [ 414.001132] ? __pfx_ksys_write+0x10/0x10 [ 414.001176] do_syscall_64+0xbf/0x390 [ 414.001211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.001233] RIP: 0033:0x7f92bf913b19 [ 414.001251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 414.001273] RSP: 002b:00007f92bce89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.001295] RAX: ffffffffffffffda RBX: 00007f92bfa26f60 RCX: 00007f92bf913b19 [ 414.001311] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 414.001325] RBP: 00007f92bce891d0 R08: 0000000000000000 R09: 0000000000000000 [ 414.001339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.001352] R13: 00007ffd5e15f13f R14: 00007f92bce89300 R15: 0000000000022000 [ 414.001390] 00:39:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 14) 00:39:33 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 16) 00:39:33 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) 00:39:33 executing program 6: timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) 00:39:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 17) 00:39:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 15) 00:39:43 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:43 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) 00:39:43 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r2}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x6a7}}, './file1\x00'}) 00:39:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) 00:39:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="256930bfe260d390548168417639a634694a046a89c1e6659cf5b5292dde8f056f6ea71303c1ef79f9562845bd6606b630945b15c15eb265caedca2c0ddcc9ae35b9b71215f2e4ab73c76e8f7afd9e0a3c9584aaa81c9c5a1c1447cecbb48f22854b880a269ed2e255c5124ee1fdb3875c", 0x71}, {&(0x7f00000000c0)="a8cf1f9a0e40e2434b4ecdc9a9c58660922a032dffa51e34ce70dc2204d36098b1b073fe57c8b6a9c37a4fab0ab966396835a68434d0a4ec2f1377ee77af360be6aa542784f1c450ec005fa5c415123565dd75fa65c44783fc7df10795658d54290d9267d446833e1f198d62744c74deed77d20006e99d16496fc6c33cfa6cd32cb676fb0ae8c2ee2b4ee59cb6e8e1fbabc2a55608e5903a0e4b12007ad8b4e9a4603c16f2980a9fea6cf87746d07706c7522a2349c3049e89ebb78eee8ce6fe", 0xc0}, {&(0x7f0000000180)="e0267cd7ac9fa1c2125554ed27e50992b86eb01b043ea063aa1ec43eebd4da2f90a218028b9f7be6009e4fd765931d8ae405c463582bd8d83938357a0eb5fc25bf024c17240df36ee511aee4204349273b2c512dd83d344ddcc34e476037d890b949ab8a689afc0fbe32a5938e0f44e08cd0a0da7585cb278e3279b07f5437573a3fef59cfa9a83d54d30f9f5bb9a3efdcba31493dc8d6e1c2696c6985b918b5e53f10a30be91de4f3fe0761e45f1fd8fb4dbd6e17b5084bdd5e51302325c96249f3fe3833df0e31561d1f91c836e9588d973b700234bb1519f23262e3d3cf222e68985af64fa2c809fb08973baa4d1cfa2b62bd0936", 0xf6}, {&(0x7f0000000280)="8be2a389d728c37f8afe7fffadfba14b4aba1f78fbc5d3c31b8500731d6199bf7647ecee411b94e2576574833f0a1289134e84204ba86b84110b5978c445b0504ba2ba6026798326dabaed9036bbde48a8e0487dd0a4761e152a92d58a14aa9f7a6dc3a67ff6aef228f77e3ab407e383967a605c521b830481b73b046638064b54b7503babab9ffc", 0x88}, {&(0x7f0000000340)="a62a14edacd9bb84d71e2619ac00513d3acd5c2f9ad7ccd0472ad93efd1d9d75948b969f8b87efcdfbb0bc45b48a5e45727bc540e9c65ea01294d31e30c40467319205b35697c58a9959cb4d961997ea684656fca806542b78728b11dd7e5c8c5d029460da2e0467c8c148ca87f3", 0x6e}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="38000000000000002900000036000000f103000000000000010100040100000100010400000000040109040103c20400000081000000000014000000000000002900000034000000060000000000000020100000000000002900000036000000110100000000000001040000000000008d61c838288087be5e1d1caa43e5bdbdf620c3a982b2509ccce9df59777bed49ccd48edea341c7859c9aedd731774d26fff36794a9b011ae1da244fbbddb18b10148d465353782ab261c8442db7f4d39a59b2b1ce359358fa5c104709a7e034e26e154ca39d343e51cf918754b2e3c414049bced139152146b4f4b75b3c9d87262d9cf4f04d441768f6015c6df6e8a84738e5aedaf57755feed09e79ecfdb993e6cf4744ded0b0068c867367941084aad0b8a6afe41b6268cb0fc7995533e456c946978a21e1762e099796bb05745835a765d06ebde0203801aeb0c657e56fa266540523e65963f31cc9a15bf4d7a0cadcfcd77fc43687fe581a1cdfa8e6d81cf0810a3c1668d314db3522deef25975c0796f903e2759c82e9c1da26e1e8734548d9c44c80ab76d027cb69de06721d399386f406da68158aa0229a61f593100c9d47e056d5c444f4068217c73bc8eea1c54fccf4b1dda307bc3176fd0720309d8547558c425ddc5c6a5fae95a7555c4bf6062ad19ade4a61fb478bed005fd8dbbbad0c626c093f453d62ce862abaac5c09dd392ca21f5745f8469c192c1875d6d82ade96985bf67100073e44a400eb666da1531e6205ea5d07dec4ad34f0401e829c88eddabd5a608568855c25ebd36fdeb914923add262ab967dc0836cbb441fc0605e30390fe51fd0516e2595c99c5392bde9e7db2a7f90db4b40aa14bd449d030284ff15047647db4a67ae23d46b24af4e8d3fd5f325a078b51785230cff5cb91f3ba4c202a8dc49862b849a5f0761a489a554d2ad441384fe1324d7931fb7f4a1441354b29f4367d96c523f8915fb3f58a7807bc37e1bcef219a958dd37c038d88f575399c0124d8dbb9e2c5de27bd48f1d73f93faa94549b92510949e292085e5cd136263e6fbe91ebc644e86d8ce2342b6137eb85de8815e8b61426bada4de436e6425ca7e627c89779979521a710446c2efcdea9b320477d9c2a74f1148c16b8df1a6eb06571f5310db703180673e899b7e2cd2c5b0d0de3826fe5d3648ad0918677b53b68bce2ebc77c14f27d056f3b53a78f0ed219b7f02df13f07f948070bc6f2eb9337f801b481a26f6a50176df0c6b54b81374454efbadc6930ff9e27f09b4738e3bf29e4656edab65775b9cffb09b6d592b3c745fba9db94757ca1f6c80aeb01ef00adaaad50aed440ef757c9d877bd4a810e535d3fabfc1481e0be32a1e1dbd01216decd10c02ce9da12fc916b6b12bb86c3fefebda2550a260082957282b5632174af27bf982dce32af158cbf3529ec0408964a1450755a231fae79177b5872bee0ff48995350e430fd71d2f44c072c87b0d8799197c917d862c6908920cc2955fbe1991e2e1ff245177293066b3b07e64de20d546fb44ced2e74a1f6a5be720f277e5608f3d25a671482daab37bfc14cfc27e75bd5ec972851afed8c1030eaf0f460e02303cb795e21e89ed3c2598bc011442d50385a4478428a64b9cac5b43d7bf9a173e6813672c90d75bae7db9e47a3cfa77d21a1ed627e6080024199be56315256b817377e8083a8bee93356aa2ba4bee44c20df36143f20a6bb29be21c835b5cd3f7cf2ae5f76c9912f011336d79d685720419022b56c06b7de8b95a0801f25b7486292cb256f9bd7e29d56f69c7055e17439ca284e7dc456c10b5e1d22829e5b6e0ce1d40e19aa2781d3b2392eae019add2727cce7be8666482de90950608c915c5775f0d520539dcf1d1a756f9eb406aab3cd4813cafd3fa768cf2203d06c9f71a3f68d1a11702bb5745d1c5a908509b84a5e80fe4557f13ed1023d23c8869e80d52807082c9872dd5afbcc1df56c39a2ca52dcc2208c769079ad60e2df655409c16adbacb7cc25e3e69d8b640e5a31c77144b87f20d225dc363b912a15d18c1e3e71c8bdb87216bb7a3187dff1b05536cb07b71301f3652d17ec892aabc006ff721784378b1e2c120fe1d2950d84b17b061002a841f5d345a38f4f2976e3bf44cba7077d516bb6524be4c1dcf47edf5401aaea9645dc1c8692bb4700771b2bec617dd820a5479cce7e55df2c76dfdd076a2162b5cc4b4b095ca4c4500d7c125a0a1002dfe350f1d25be970cc4f5f4934b1619cf157b5c52085813cea1fc5749ed88100f82856bc75d055d32a9a1a80efe6fd19acc98a88a60de61cfc5ad81f5d092e8f7e6f184c3d46fe89edfb42183649ec0069cfbd2292a98350c7fe8f8a68c2bd98f434b393e1cc8193aec5ecbac4be0d580a2159c2cba158acb2e36462249acbaccc01fa7d5d9bf7878e51fd2d610bd6991a6da6fe26ec65217b3fd1d458014566d8fc9fc72787a3ac9b6ed9103e59b790c7c1efd8f7d8c41f4e8faff798fd3c82cbb5b6afbb2142d6f3f81d60e1e6b80985ded26ef8ec093af32f4b37f78c802a6d3e03c64fdc3ce6ebbf5c674ccb979217404c02c68da01d15e2431e5af91880d87f5e7b4c1d937c61b8649c54ea2dc56ee59b2e7c68fb698ff206a7abc67d870c8c2e9863767b1ead40003aad6901d07ebc7f18c7d3ee7855c9f5888dd1bb0c3357f10c5c584614cafef4b64685d5164d04d6617a274f4ee97a8d9e6fac3ac120bd6d8d40ad1ff3ee7b05393e350ad062f1745bfbb1ee85641b645e5dba4b28697a4c0e3628beb33c38ec1dad831bcaf124f2384f60d81b5015f07d028a13dec6b3df835821b88217e779749eabde078665723040d4e7868c00c2e3d1a835644793e7d2bf9463292da8c07768ddb5bba29ddb92e6f6b26cecc5843c9e52af76c2f8f48de92973e92ba3848203fe43932c61a331de3b656792acc55bd96350cf1d366d5e12a75f362b9993bf256afbc0c1ce52a41fdb6dbcf24478a968fbf2aa17d99ced7a602ad85e0ed25ba955b113cce8a9b42a1ebd7c95c86bed9b2b412275c5594d971db31aee35a7fdf3ae3370d87ea2fa68001c972146114fc15787b5fa9ef5a8bc63971c9e48c3c150d1492b18d6838d12c1e90912b4efa412c03602f9b9aee92b5185191f7e9c54455bd4f8f2f403f21b1d44ba0d15584a26dc12993a0971307f4deac616922e26c7ee8a7cae84d6712cdc717f80a672e1365c43d23b3af853fcc268964b78bb86a2df013f85a156b2741841160c910be511348982bd9c1b392ddd7d41bee9f2e64874eccae368f61a794e4bef29fd77dd8448651b8fcb28cab881e801d56cbc04b590f317900d0f6536d7c6adc5db912cbc62ecc676777e0dc561b260b40fa5598f21057888e94894d9839b1d08aa45c9e729801e52cfaef8906704a93cf130b8b833bd5963c1c71fda383bc9fc315401f60c2f0cf036f9ee17fc7c7d4f86e3653aee1df69a95cc7110b8cd260fa5f06f88ce5855b8476ee6048edf974a13ee9d0d1390b4bf78d276bd1ac9dbe3150729250067074fe300604b62320fb902cc9ecffcf2609d106aeb58cf9cd340a4319dd302afab3a1b11161f4cd060fb85e0b017412da6c4b095f405eb47ccb1b0d71940ed076abad2b08dda32cc7e4ff9afb8692dff7ba7b0d56a9906f8cd56ae67f4705b53b37dc3eb4f3c31d062d7a2721688624feb8001fc699fa0087402974f8eadeaf43bab78e0cffa9a01f3558652fa09711d8e63510a640478ce9e26394c44ac3e98c7707d7731bd4d6dc7c18c2d48c82bbdac80f6018c34f6ce9755014d0a1b0802db8fd120dac6396f666290f1796bf1ccf0db43da19ca84b86fc2c82f4c602c9934d0378247d23b912c35e10099c539e2253e61fb9904c10b7560b5008ac84e36067918c66a937034b7108a12fad859714085f2de696067f95456ca518ef557b1ecfe93b9274fefeb3a1c0466816f1c2dc881bda923d80855e314ea29f2714d4426607299c1458a05674b4d051c7415e6f95ebdc5cbaa1fedd994a744d5947cc6398518e054b783cc0f6084d52ee3fbd802375435182baeb151084a84a873cc358b267955f82c073654edbd1df16dae297add012a54e73cb00e85606c642e93f3db2b7f8b374282b98d87182094b998087c2f6798f07f083c96c4396ab1912d464c78a8c1b90e1df8a4031206029a0f2093e89f3757b18de73441f4bcaddb58b843685950a07b7ce56d7e6721bf6e65a5221e18cb5ccb6d5899d77baae8c3455834f4ed5a8c01096b4767916eb9bd86a899c84137a0a2ce3931e9648c0806076661777fe1f565dde449da3a2f8b7d124d4c81cb05cadf1d16fae00d73ee50c872e60ff0a4adb1b7a09ff6038837060102039f32e857db0e65e87c52772b1ddb1c35dd5f1d102ddc2fa6db604614d187dd6449f003382354570db49222a83192a6121d486a5464fc0eacd7e9fb9beaa072f93bbb6d5be473d4e805c5d65edf7518e34d8d8e0587b3baff083419d6912d0e9a8b00e9243d3a500f3bee0d91ef0d4b863f1bb6d422506b1339364ff313e019c74e7512605a1792fa3b53a1b3ec8f4bcb0bc86e31f1b3803cbb94eec61ef9e61c9572be5518491b0ba7caaccdfd062d169f954989a93834192604c4731380f2d82af5798f83d0a1c049b49b89c2c061376be81bfeda11359cc1daddf8fad3f841a45298ab7a1e4ca7110a8790b816471e830412d70570494bdce1a7382832edb0470b8aa86ebc2d0155f78d50853c077b1b669d7cc710c676738f4d4f848f1ba227bbc97e77273085702cef3b6b8373dbf7021753280f8f74111a1491c45e5a28d0c76b425dbadf239701dc6ce82fc7d36cd57db3e5e9db1f350ae24a73c56f77a112593925758d4ea74c0aae52586694b36c55a1a80a4ab094111df08cc70f83da7434e282d3a1745dbddfc3bf486b3f40a36e3e68916b80b859440f61160a29cd361d566da2c1069d28f91c5912d4129b20aa00d7d1d7a224c75f656605825d7d3886c991e6cff95290b555a05acd6b81ebaf88ac7b74a4d34fb73599e25349d7a240cd8bc14677907d87b950b316609bf5f21328608bcb0f32c9f5f65d3866364e60dd445d0920c787c96a7e8066e29da2978cb2da049592c3b14bd62ed6cfbd53073f4b0141afda00975357eaf1922108b12e5c5c700bc0a0b86c4eb9cff5a7fcccf7703e0a6f818509645a37446a1874741dfafd5ad5271f38e26dea336706552c58c14bd25771ad35ff2690fb4cd7bf228715541c69afed61dc352fbcb084b6a579f5ff17fe43b6b94e8332da2dcb45c898de917f795d5958ca633242a7faadff52b23c7970458eb824847af957b65b3ba50927a2c93bb6fe8a4a68ad60138545e83b28e1139031594e72b28bc278340ca819fdf9082fa283c936ba211be0934b0a9f3f76b0f87402a3c5e5ae5e1145d331800bfe020c7e43a6b237cfacd3594b0a5d436b3296bb00c6fc2373d8fb7fd8091679762f248bfaddeb705990d817311b5c539a4d4a2d4d730b386541b8d851e151809d0289b8f892274f2c96e4bab42c4ca90381154730708296d753f9bad3d267b98ae65029bd319647e78c75a31de3da28ffb0cdb570be1f75664ecda3d1f46887c146e7bffcba8f42322307a03d9aae46da8c969e29cd5fa80bb3b39b09cd888474291957487eadde5aaaf437882653bdb5177b39c541f92b06ae7d7761e43c8d5cae7b27d92ceaf3f29b6a0f95611a97764916456551e2b1fc60cd6826edf286d87624ae22e51581356637ac168f7bbb7157c60f654312a2f961bf4ed1b49b0abf2e0a3d8363b9d00e7b952e9b41d442129b2a059b9db987496bcc7d5a23dc35e68ffaf52066cc7f80f110814969efe572c8c0dae09b38b8dcda7c879fde97d1f86e9c0163e7565e813de314000000000000002900000043000000b12900000000000078000000000000002900000039000000140c001f00000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aafc0100000000000000000000000000002400000000000000290000003200000020010000000000000000000000000002", @ANYRES32, @ANYBLOB="000000005000000000000000290000003600000084060000000000000720000000000000000300000000000000740000000000000100050200060502000105020009400100"/84], 0x1178}, 0x1) 00:39:43 executing program 6: timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 424.041639] FAULT_INJECTION: forcing a failure. [ 424.041639] name failslab, interval 1, probability 0, space 0, times 0 [ 424.043429] CPU: 1 UID: 0 PID: 5289 Comm: syz-executor.0 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 424.043458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 424.043470] Call Trace: [ 424.043477] [ 424.043486] dump_stack_lvl+0xfa/0x120 [ 424.043519] should_fail_ex+0x4d7/0x5e0 [ 424.043559] should_failslab+0xc2/0x120 [ 424.043591] __kmalloc_cache_noprof+0x73/0x6a0 [ 424.043612] ? mark_held_locks+0x49/0x80 [ 424.043639] ? nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 424.043675] ? nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 424.043701] nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 424.043726] ? trace_kmalloc+0x1f/0xb0 [ 424.043757] ? __pfx_nl80211_dump_wiphy_parse.constprop.0+0x10/0x10 [ 424.043799] nl80211_dump_wiphy+0x4d0/0x820 [ 424.043826] ? __pfx___alloc_skb+0x10/0x10 [ 424.043860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.043894] genl_dumpit+0x125/0x220 [ 424.043931] netlink_dump+0x51a/0x1200 [ 424.043966] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 424.043990] ? __pfx_netlink_dump+0x10/0x10 [ 424.044039] ? __asan_memset+0x24/0x50 [ 424.044067] ? genl_start+0x66e/0x960 [ 424.044106] __netlink_dump_start+0x6c5/0x980 [ 424.044143] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 424.044181] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 424.044227] ? __pfx_genl_get_cmd+0x10/0x10 [ 424.044256] ? __pfx_genl_start+0x10/0x10 [ 424.044286] ? __pfx_genl_dumpit+0x10/0x10 [ 424.044316] ? __pfx_genl_done+0x10/0x10 [ 424.044353] ? __radix_tree_lookup+0x1f7/0x290 [ 424.044389] genl_rcv_msg+0x447/0x7e0 [ 424.044428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.044463] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 424.044491] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 424.044541] netlink_rcv_skb+0x147/0x430 [ 424.044572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.044609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.044659] ? netlink_deliver_tap+0x1ae/0xce0 [ 424.044696] genl_rcv+0x28/0x40 [ 424.044725] netlink_unicast+0x5a7/0x870 [ 424.044763] ? __pfx_netlink_unicast+0x10/0x10 [ 424.044811] netlink_sendmsg+0x8ac/0xd80 [ 424.044853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.044904] ____sys_sendmsg+0xa67/0xc20 [ 424.044929] ? copy_msghdr_from_user+0xfb/0x150 [ 424.044959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.044995] ? lock_acquire+0x15e/0x2f0 [ 424.045026] ___sys_sendmsg+0x10f/0x1b0 [ 424.045057] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.045084] ? perf_trace_lock+0xb5/0x5d0 [ 424.045117] ? __pfx_perf_trace_lock+0x10/0x10 [ 424.045141] ? proc_fail_nth_write+0x97/0x220 [ 424.045177] ? lock_acquire+0x15e/0x2f0 [ 424.045201] ? __fget_files+0x34/0x3b0 [ 424.045227] ? find_held_lock+0x2b/0x80 [ 424.045259] ? __fget_files+0x203/0x3b0 [ 424.045283] ? lock_release+0xc8/0x290 [ 424.045314] ? __fget_files+0x20d/0x3b0 [ 424.045355] __sys_sendmsg+0x150/0x200 [ 424.045384] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.045428] ? __pfx_ksys_write+0x10/0x10 [ 424.045470] do_syscall_64+0xbf/0x390 [ 424.045501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.045522] RIP: 0033:0x7f445f861b19 [ 424.045538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 424.045558] RSP: 002b:00007f445cdd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.045579] RAX: ffffffffffffffda RBX: 00007f445f974f60 RCX: 00007f445f861b19 [ 424.045593] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 424.045606] RBP: 00007f445cdd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 424.045618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.045630] R13: 00007ffc75dfb49f R14: 00007f445cdd7300 R15: 0000000000022000 [ 424.045667] [ 424.116033] FAULT_INJECTION: forcing a failure. [ 424.116033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.117908] CPU: 1 UID: 0 PID: 5296 Comm: syz-executor.3 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 424.117937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 424.117949] Call Trace: [ 424.117956] [ 424.117965] dump_stack_lvl+0xfa/0x120 [ 424.117997] should_fail_ex+0x4d7/0x5e0 [ 424.118038] _copy_to_user+0x32/0xd0 [ 424.118064] simple_read_from_buffer+0xe0/0x180 [ 424.118092] proc_fail_nth_read+0x18a/0x240 [ 424.118125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.118158] ? security_file_permission+0x22/0x90 [ 424.118187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.118218] vfs_read+0x1eb/0xc70 [ 424.118254] ? __pfx_vfs_read+0x10/0x10 [ 424.118284] ? lock_release+0xc8/0x290 [ 424.118317] ? __fget_files+0x20d/0x3b0 [ 424.118357] ksys_read+0x121/0x240 [ 424.118385] ? __pfx_ksys_read+0x10/0x10 [ 424.118427] do_syscall_64+0xbf/0x390 [ 424.118459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.118481] RIP: 0033:0x7f92bf8c669c [ 424.118498] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 424.118519] RSP: 002b:00007f92bce89170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.118540] RAX: ffffffffffffffda RBX: 0000000000000024 RCX: 00007f92bf8c669c [ 424.118555] RDX: 000000000000000f RSI: 00007f92bce891e0 RDI: 0000000000000004 [ 424.118568] RBP: 00007f92bce891d0 R08: 0000000000000000 R09: 0000000000000000 [ 424.118582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.118595] R13: 00007ffd5e15f13f R14: 00007f92bce89300 R15: 0000000000022000 [ 424.118632] 00:39:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:39:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) 00:39:43 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:39:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 16) 00:39:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:39:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r2 = fork() ptrace(0x10, r2) 00:39:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:39:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) (fail_nth: 17) 00:39:57 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 00:39:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:39:57 executing program 6: timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:39:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:39:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="000000005000000000000000290000003600000084060000000000000720000000000000000300000000000000740000000000000100050200060502000105020009400100"/84], 0x1178}, 0x1) [ 437.617796] FAULT_INJECTION: forcing a failure. [ 437.617796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.620135] CPU: 1 UID: 0 PID: 5327 Comm: syz-executor.1 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 437.620165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 437.620178] Call Trace: [ 437.620185] [ 437.620193] dump_stack_lvl+0xfa/0x120 [ 437.620231] should_fail_ex+0x4d7/0x5e0 [ 437.620272] _copy_from_user+0x30/0xd0 [ 437.620296] perf_copy_attr+0x12f/0x920 [ 437.620330] __do_sys_perf_event_open+0xb9/0x2c20 [ 437.620358] ? __mutex_unlock_slowpath+0x157/0x750 [ 437.620384] ? kernel_write+0x633/0x660 [ 437.620417] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 437.620444] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 437.620489] ? ksys_write+0x1a3/0x240 [ 437.620516] ? __pfx_ksys_write+0x10/0x10 [ 437.620555] do_syscall_64+0xbf/0x390 [ 437.620586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.620608] RIP: 0033:0x7fbbfe881b19 [ 437.620625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 437.620645] RSP: 002b:00007fbbfbdf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 437.620665] RAX: ffffffffffffffda RBX: 00007fbbfe994f60 RCX: 00007fbbfe881b19 [ 437.620680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 437.620692] RBP: 00007fbbfbdf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 437.620705] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 437.620718] R13: 00007ffce742b2bf R14: 00007fbbfbdf7300 R15: 0000000000022000 [ 437.620754] 00:39:57 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) [ 437.723269] FAULT_INJECTION: forcing a failure. [ 437.723269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.725113] CPU: 0 UID: 0 PID: 5339 Comm: syz-executor.0 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 437.725158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 437.725177] Call Trace: [ 437.725187] [ 437.725200] dump_stack_lvl+0xfa/0x120 [ 437.725250] should_fail_ex+0x4d7/0x5e0 [ 437.725310] _copy_to_user+0x32/0xd0 [ 437.725340] simple_read_from_buffer+0xe0/0x180 [ 437.725369] proc_fail_nth_read+0x18a/0x240 [ 437.725403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.725437] ? security_file_permission+0x22/0x90 [ 437.725466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.725498] vfs_read+0x1eb/0xc70 [ 437.725535] ? __pfx_vfs_read+0x10/0x10 [ 437.725567] ? lock_release+0xc8/0x290 [ 437.725602] ? __fget_files+0x20d/0x3b0 [ 437.725648] ksys_read+0x121/0x240 [ 437.725676] ? __pfx_ksys_read+0x10/0x10 [ 437.725719] do_syscall_64+0xbf/0x390 [ 437.725751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.725775] RIP: 0033:0x7f445f81469c [ 437.725793] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 437.725814] RSP: 002b:00007f445cdd7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 437.725836] RAX: ffffffffffffffda RBX: 0000000000000024 RCX: 00007f445f81469c [ 437.725858] RDX: 000000000000000f RSI: 00007f445cdd71e0 RDI: 0000000000000004 [ 437.725872] RBP: 00007f445cdd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 437.725897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.725910] R13: 00007ffc75dfb49f R14: 00007f445cdd7300 R15: 0000000000022000 [ 437.725948] 00:39:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:39:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 437.851807] FAULT_INJECTION: forcing a failure. [ 437.851807] name failslab, interval 1, probability 0, space 0, times 0 [ 437.854332] CPU: 1 UID: 0 PID: 5344 Comm: syz-executor.1 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 437.854361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 437.854373] Call Trace: [ 437.854381] [ 437.854389] dump_stack_lvl+0xfa/0x120 [ 437.854426] should_fail_ex+0x4d7/0x5e0 [ 437.854467] should_failslab+0xc2/0x120 [ 437.854499] kmem_cache_alloc_node_noprof+0x79/0x6a0 [ 437.854527] ? perf_trace_lock+0xb5/0x5d0 [ 437.854552] ? perf_event_alloc.part.0+0x124/0x45f0 [ 437.854596] ? perf_event_alloc.part.0+0x124/0x45f0 [ 437.854630] perf_event_alloc.part.0+0x124/0x45f0 [ 437.854675] ? __pfx_perf_trace_lock+0x10/0x10 [ 437.854710] ? __pfx_perf_event_alloc.part.0+0x10/0x10 [ 437.854745] ? find_held_lock+0x2b/0x80 [ 437.854777] ? __do_sys_perf_event_open+0x11df/0x2c20 [ 437.854813] __do_sys_perf_event_open+0x719/0x2c20 [ 437.854858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 437.854891] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 437.854939] ? ksys_write+0x1a3/0x240 [ 437.854968] ? __pfx_ksys_write+0x10/0x10 [ 437.855008] do_syscall_64+0xbf/0x390 [ 437.855040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.855062] RIP: 0033:0x7fbbfe881b19 [ 437.855078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 437.855098] RSP: 002b:00007fbbfbdf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 437.855119] RAX: ffffffffffffffda RBX: 00007fbbfe994f60 RCX: 00007fbbfe881b19 [ 437.855134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 437.855146] RBP: 00007fbbfbdf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 437.855159] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 437.855173] R13: 00007ffce742b2bf R14: 00007fbbfbdf7300 R15: 0000000000022000 [ 437.855209] 00:39:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:39:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:39:57 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 3) 00:39:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:39:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:39:57 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0xadf, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000020c0)={0x5, {{0xa, 0x4e24, 0x0, @mcast1, 0x33}}, 0x0, 0x6, [{{0xa, 0x4e20, 0x0, @mcast2, 0x8}}, {{0xa, 0x4e22, 0x1, @private2}}, {{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8001}}, {{0xa, 0x4e24, 0x0, @mcast1, 0x1}}, {{0xa, 0x4e23, 0xffff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}}, {{0xa, 0x4e21, 0x3, @loopback, 0x8001}}]}, 0x390) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7fffffff, 0x1, 0x1, 0x4, 0x5, 0x401}, &(0x7f00000000c0)=0x20) unlinkat(r2, &(0x7f00000001c0)='./file0\x00', 0x200) sendmmsg$inet6(r0, &(0x7f0000002700)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000140)="da72db", 0x3}, {&(0x7f0000000680)="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", 0x51a}], 0x2, &(0x7f0000001e80)=ANY=[@ANYBLOB="300000000000000029000000360000000002000000000000c910ff02000000000000000000000000000100000000000088000000000000002900000004000000000e000000000000006eeaecb3d4e901dd20ed91cdee97c5e7f027c779ee419e49365616b388a9761b2fd914cd38c4104e1ddd0bd01ed2826a5699889da8bdd0211700f87d5fc7069f5a89ed9fe5d138d526106653d2e896e7eae93923b1135e137ae09357c6a9b944794d24b798800f994e916d18e7a2d717211060367b5465c05dba03cf09d8c3ca84a665556a3095ab592a4d0bf866379587d5c9251c"], 0xb8}}], 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x16, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x4b}, @jumbo={0xc2, 0x4, 0x3bae9b3f}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0xac7, [0x8000, 0x3, 0x557d, 0x0, 0x9408]}}, @hao={0xc9, 0x10, @loopback}]}, 0x60) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x8, @mcast1, 0xd34b}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="7c7fb4ea33ce9084b73b4ac5cbdbff16ada2f30e8e8d0869b25e06363fc9ec440576978222feb635e769ba7ffd238f05102f54bc3a89508ab1adf5d108aeef5700571de46258b4604c43d8d60954d078f394e485fbb32f34e69e6bf28fcf95e80798903c29a4f0d69e4b657d6bd3c93960c1a5e111fef4b1413ed2fe1e641319a8c81a5e236a88814403f7ded6fbb89cd2377df68417fec264214baee834c3e570afe3b0b5b0be0ddb8a1c4348db63421db47b74d759bdceded070b123508e43b803c57a61a6cb764362e72b843d2160e29a697a", 0xd4}, {&(0x7f00000003c0)="aa450e55addf9b2499b928e82562c542ee5706a87c6729f124c352e640e1a912a7f7017ccc5a50721991d6fd6fcd21e6be3b7a473df4c0", 0x37}], 0x2, &(0x7f0000000440)}}, {{&(0x7f0000000480)={0xa, 0x4e21, 0x9, @private0, 0x4}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000004c0)="15856f8014b2c27aa6a1dd66cc12d6b1ae3a4b3803b21e6173bd35860368d780ffd7f922e4b9e76f883d18bfde5727fe94bc22268664fd3e9353f313b842945a39be095351654e4a88d7866e57a579c58e9d82d50d6742594bb33b4709010ddb67b2ff4aa857a76d", 0x68}, {&(0x7f0000000540)="f2bc731c01f0bd63cb59eb5d28a22b", 0xf}, {&(0x7f0000000580)="6518ccb3fc451459313a8b3324c6469ef7ad3664e8da019944e1a3c47170b04acb3bf7c5dc7f19eea083442e193ece698841eea5a8f8758e85892fc8924d5eb07a2825fc", 0x44}, {&(0x7f0000000bc0)="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", 0x1000}], 0x4}}, {{&(0x7f0000000640)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001bc0)="0b2a0e3b137644a788a686ff14f88f06d0de9b07cb96119851bee8d8a902a7ec424d7e6fc16cb6e503729bc1582e7e743280ef5a925c5b163dd3494a6d9b6783a32a58c31b34a9814de130c8b52407d4007586e20b4f0201be3acf965a7e8ab471d407589f8b2fbe24b52e6a985a65378c9c72227f037bc8aeb8e887e32c29f3a06d871a5abbfe2d250d2d122fbd04bb4b67d741ff56251c1f2beae304446117b0dbe127", 0xa4}, {&(0x7f0000001c80)="65854d601137247f7bd90cf9e52fe71f0ec09c2b163d1b78545bcf6aba9fed7c6cc86e3decc6c8a8bd17e4618c9a87b53374b80c3dad26abe7ca0b33f13dabf55a92f368911d087623374432f76cc075f9b9294affdb5f0c5129dfc898f842ecdabd21dd9eb121b64108e3d1b353cfc916c86067aa61ad8923a2d4eab739b92c6fe96b", 0x83}, {&(0x7f0000001d40)="1ecd41e78effb5f8b3456c09ee127c86120c306e13acbc83634323f1caeb9a68d03f84226e9e1001c5145ec90ccf564581b5c8005e82217f62e31816895126e9712845b6b4697ac12f7e273a53ebb560f25370bbb3f1e84539e793a365846eecff0cac2d40a86243f93985bce91f7c6c992bab413f5111493c60319c998e2e2b271e313c48deeb6794ce6f767e898654e8373d88a946727e7f977d09141cf8f537486c6fe0ab15c93062f11a8109847ed8318acfc70aaf82a03aa0be3786bc93e5d64de998c3b10ec48ba1ac74857985b1045c848ef3d140b965ef28116b40c66d33c8", 0xe3}], 0x3, &(0x7f0000002480)=ANY=[@ANYBLOB="140000000000000029000000430000000008000000000000100100000000000029000000370000002b1f000000000000048e3cf6b4322c055924804e96906be2f2b82013d36c72be8e204ecc65a491388794799a9222b63c6dd974d1cab8029faf2294e95db8714c754bae30aab186466d9c04500ce34ed48885a79b664db790fb35d7ff62fb29905d6b9335232ae777158299d51543e4df6686f0ab0d8344a14f2567ecb0f10a5483b0d68503c396ec7a8667ecb1d5a0746d2b20c8215c604b072800000000080709003100000000000000680000000000000057bd000000000000110000000000000001040000000001090000000000000000000109000000000000000000000100040107c204000003ffc910fc0000000000000000000000000000000502000928000004000000002900000036000000000100000000000000010005052ddd687d7401030000000014000000000000002900000008000000780000000000000014000000000000002900000008000000060000000000000032cc582882583eff0a4d1b711fc400d36d2ed5bc43b8534666d859f45ad846b1202539cf07b6272cbf01a08f7894daa6d443b586afeff2a250ddd13aa84d1de0a4ab326f4309a64f75604345ac69c1005e4d6dd6c3de1763e34c3e24ce06c7482f25d6bcf3654e98c702eaf931022ba37a4565555852048bcaf65a51290461dbb58b17b938625c7ff72320c2a5d6a1f0d1fc5b8556a1da49f8df992cb19e2773eafb7879f022be82fa9c"], 0x180}}], 0x3, 0x40) 00:39:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:39:57 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:40:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:40:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 4) 00:40:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:40:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1178}, 0x1) 00:40:10 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:40:10 executing program 7: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \t\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000b0000000c0006000100000001000000"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000425bd7000fcdbdf250c00000008000b0001fcffff08000b00ff0300000c0006003e81228bf42570d408000300", @ANYRES32=0x0, @ANYBLOB="8ecfe4249d5c0b9136e0c8237e68ed16902fb2a10523aeea95fdb7a5b8f5f5ff9262dedb46577dd3d0455ffd2534f5d5c35103dda078b14ce684cfa2f5316a79474cdf50cdf470c12c7fa2f3d16fcab3d2c20c1eeba170d5fb88"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x48810) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x81, 0x38, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000080)}, 0x7f883ec065f3d63, 0x0, 0x20, 0x5, 0x0, 0xfffffff9, 0x47fa, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) getpgrp(0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x4000040) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x9) [ 450.515565] FAULT_INJECTION: forcing a failure. [ 450.515565] name failslab, interval 1, probability 0, space 0, times 0 [ 450.517753] CPU: 1 UID: 0 PID: 5391 Comm: syz-executor.1 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 450.517783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 450.517795] Call Trace: [ 450.517802] [ 450.517810] dump_stack_lvl+0xfa/0x120 [ 450.517853] should_fail_ex+0x4d7/0x5e0 [ 450.517894] should_failslab+0xc2/0x120 [ 450.517925] __kmalloc_cache_noprof+0x73/0x6a0 [ 450.517945] ? x86_reserve_hardware+0xbf/0x560 [ 450.517968] ? __pfx_amd_pmu_addr_offset+0x10/0x10 [ 450.518000] ? allocate_fake_cpuc+0x41/0x1b0 [ 450.518029] ? allocate_fake_cpuc+0x41/0x1b0 [ 450.518061] allocate_fake_cpuc+0x41/0x1b0 [ 450.518083] x86_pmu_event_init+0x92d/0xbc0 [ 450.518113] perf_try_init_event+0x140/0x9f0 [ 450.518149] perf_event_alloc.part.0+0x118e/0x45f0 [ 450.518183] ? perf_event_alloc.part.0+0x1074/0x45f0 [ 450.518238] ? __pfx_perf_event_alloc.part.0+0x10/0x10 [ 450.518273] ? find_held_lock+0x2b/0x80 [ 450.518306] ? __do_sys_perf_event_open+0x11df/0x2c20 [ 450.518341] __do_sys_perf_event_open+0x719/0x2c20 [ 450.518379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 450.518408] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 450.518454] ? ksys_write+0x1a3/0x240 [ 450.518482] ? __pfx_ksys_write+0x10/0x10 [ 450.518523] do_syscall_64+0xbf/0x390 [ 450.518553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.518574] RIP: 0033:0x7fbbfe881b19 [ 450.518591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 450.518611] RSP: 002b:00007fbbfbdf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 450.518632] RAX: ffffffffffffffda RBX: 00007fbbfe994f60 RCX: 00007fbbfe881b19 [ 450.518646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 450.518659] RBP: 00007fbbfbdf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 450.518671] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 450.518684] R13: 00007ffce742b2bf R14: 00007fbbfbdf7300 R15: 0000000000022000 [ 450.518721] 00:40:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 5) 00:40:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 450.821757] cgroup: fork rejected by pids controller in /syz5 00:40:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:40:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 6) [ 451.040213] FAULT_INJECTION: forcing a failure. [ 451.040213] name failslab, interval 1, probability 0, space 0, times 0 [ 451.042007] CPU: 1 UID: 0 PID: 5504 Comm: syz-executor.1 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 451.042036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 451.042049] Call Trace: [ 451.042067] [ 451.042075] dump_stack_lvl+0xfa/0x120 [ 451.042111] should_fail_ex+0x4d7/0x5e0 [ 451.042152] should_failslab+0xc2/0x120 [ 451.042183] __kmalloc_noprof+0xc8/0x760 [ 451.042219] ? x86_pmu_event_init+0x20b/0xbc0 [ 451.042243] ? security_perf_event_alloc+0x13b/0x1b0 [ 451.042277] ? find_held_lock+0x2b/0x80 [ 451.042317] ? security_perf_event_alloc+0x13b/0x1b0 [ 451.042349] security_perf_event_alloc+0x13b/0x1b0 [ 451.042386] perf_event_alloc.part.0+0x1c46/0x45f0 [ 451.042422] ? perf_event_alloc.part.0+0x1074/0x45f0 [ 451.042476] ? __pfx_perf_event_alloc.part.0+0x10/0x10 [ 451.042511] ? find_held_lock+0x2b/0x80 [ 451.042543] ? __do_sys_perf_event_open+0x11df/0x2c20 [ 451.042578] __do_sys_perf_event_open+0x719/0x2c20 [ 451.042615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.042643] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 451.042689] ? ksys_write+0x1a3/0x240 [ 451.042717] ? __pfx_ksys_write+0x10/0x10 [ 451.042757] do_syscall_64+0xbf/0x390 [ 451.042794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.042815] RIP: 0033:0x7fbbfe881b19 [ 451.042832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 451.042852] RSP: 002b:00007fbbfbdf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 451.042872] RAX: ffffffffffffffda RBX: 00007fbbfe994f60 RCX: 00007fbbfe881b19 [ 451.042887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 451.042900] RBP: 00007fbbfbdf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 451.042912] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 451.042925] R13: 00007ffce742b2bf R14: 00007fbbfbdf7300 R15: 0000000000022000 [ 451.042961] 00:40:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:23 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 7) 00:40:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1178}, 0x1) 00:40:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:40:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:23 executing program 7: r0 = syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x44) getdents64(r0, &(0x7f00000001c0)=""/243, 0xf3) mknodat$loop(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x40, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) r3 = geteuid() syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x100, 0x6, &(0x7f00000006c0)=[{&(0x7f00000002c0)="f59fe8ec9ae6a8eb2693a05153fbcc48d473c721a565150db0713a2790be0c6f17477c98b484e2116ab0e45245c70b8ed61fd69246a6129f772a555f0df1c0a01c857812164d8812a704acda3ad29b7f121ad72af3142f016ed8d32d39104e5616ab0307e8a04ff5f750e0b2af3993806e3c1b8bf22fc83721ad23823f83b72aa11d260014db2ea832b798fffe95369764321b61fe7afdf69eb4eb1a16c4a744a3d89ed3a12141c5780a937f9757975b8251ac64c2d8c781debf11986c8b363a650070014b3c0e74dabaa3e6976b188bc46423bc350605416f6e720081b1b630254cb6c0c88c21ed5a5d547f9afc", 0xee, 0x5}, {&(0x7f00000003c0)="c6fac92d17fe821942dd0fca499476f06bc59d6536dca06709956efc7c9e186ca501690b1239cba3fbe208ff3571b16f36e4bec4e6be625ee647cd2609aeb6d37f85fc5b9c5a08ef0ed39c688460228fa07404f77a6125522fae901cae1f3094ef076c5371be3a4335ab77565f3c1b74afda43949f6e7b6be0eeba845dc8ca7d588210619b3f105f533362713011184bb2847220a86a9e6147ec22b5be079a5555b354f3bb12fd0d363b871d04f6f61a9272713ac693700b35cf85ab3afb376dbb3f9f5005c0fcd44813b8500306f407af7f", 0xd2, 0x401}, {&(0x7f0000000140)="53ff6edf09c04808d141df31d0ee107749c2c2cbfcc38ad543213fe5330be73defa09d516ac12f93b47be6913523f0df", 0x30, 0x9dc}, {&(0x7f00000004c0)="0a48d3f1c2059e7f2da4a2075a8b1d99e7ddf452bae3519b27c9f5fa94d17e64f2b823d3161c3094f82ebcb09124ae9c60d2ee2b78dc5d893bacd0776741f502fbbd34dc139a56c4ba09b8afbd027eaefecb67d21ea330059ab9163cda2e00f3c212360f7d7fea1d81e1818abc8bb5cec6fe39784f060100f5", 0x79}, {&(0x7f0000000540)="ed84d86be10a8248c257be5d52fb9d7607789022e708a82dd11ee8dd675a589f964ccfa9b64ea1f42fea0b4993e0490df4cd805a8be531ae42e3d7bdb036f031b76f3568c981", 0x46}, {&(0x7f00000005c0)="a1710b306580fefbc34d7a0082ba37687ac06a41dec6068675aa6524c046f9ba28892f3c56a9da4f8a168d743e72ac87a79d48fb7ee8cd7f733145ee6db325b0d198631177d40a2c27050f8078e0b17b3445c1807f480ddd7f4774575cd0fa3b043ff0647469da043b69e655c0bbdd9deb81031cfbceb4042602df980e73cb419559f384140012ebdee4eb3aab757d4d22385a4e66d5fd401a1fcf1e065f17a6e6403abe660d18187cb45ccff11765488171743124e581457610afb7c9fbd45cc5881b4edd92ac08498ee36b52f833624976fe9c5aa83eb204b7c85d650def4abbcc17d9d982", 0xe6, 0x80}], 0x1001000, &(0x7f0000000780)={[{'/:\xcd(\'@(.%}/\\-^/'}, {'#\\#'}, {}, {}, {'`\x11\xf9&E\xfb+'}, {'[&,#'}, {}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r3}}, {@appraise}, {@obj_role}, {@hash}, {@subj_type={'subj_type', 0x3d, '#$\','}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@appraise}, {@permit_directio}, {@fowner_gt}]}) 00:40:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:40:23 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:40:23 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 8) [ 464.208582] loop7: detected capacity change from 0 to 9 00:40:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 464.237386] loop7: detected capacity change from 0 to 9 [ 464.242560] FAULT_INJECTION: forcing a failure. [ 464.242560] name failslab, interval 1, probability 0, space 0, times 0 [ 464.243669] CPU: 0 UID: 0 PID: 5547 Comm: syz-executor.1 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 464.243686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 464.243694] Call Trace: [ 464.243699] [ 464.243704] dump_stack_lvl+0xfa/0x120 [ 464.243730] should_fail_ex+0x4d7/0x5e0 [ 464.243757] should_failslab+0xc2/0x120 [ 464.243776] __kmalloc_cache_noprof+0x73/0x6a0 [ 464.243790] ? __pfx_perf_lock_task_context+0x10/0x10 [ 464.243814] ? find_get_context+0xcb/0x680 [ 464.243841] ? find_get_context+0xcb/0x680 [ 464.243860] find_get_context+0xcb/0x680 [ 464.243881] ? __pfx_find_get_context+0x10/0x10 [ 464.243902] ? security_capable+0x2f/0x90 [ 464.243926] __do_sys_perf_event_open+0xa16/0x2c20 [ 464.243947] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 464.243967] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 464.243994] ? ksys_write+0x1a3/0x240 [ 464.244011] ? __pfx_ksys_write+0x10/0x10 [ 464.244034] do_syscall_64+0xbf/0x390 [ 464.244053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.244067] RIP: 0033:0x7fbbfe881b19 [ 464.244078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.244090] RSP: 002b:00007fbbfbdf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 464.244102] RAX: ffffffffffffffda RBX: 00007fbbfe994f60 RCX: 00007fbbfe881b19 [ 464.244111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 464.244118] RBP: 00007fbbfbdf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 464.244126] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 464.244134] R13: 00007ffce742b2bf R14: 00007fbbfbdf7300 R15: 0000000000022000 [ 464.244154] 00:40:23 executing program 2: rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:40:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:24 executing program 7: r0 = syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x44) getdents64(r0, &(0x7f00000001c0)=""/243, 0xf3) mknodat$loop(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x40, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) r3 = geteuid() syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x100, 0x6, &(0x7f00000006c0)=[{&(0x7f00000002c0)="f59fe8ec9ae6a8eb2693a05153fbcc48d473c721a565150db0713a2790be0c6f17477c98b484e2116ab0e45245c70b8ed61fd69246a6129f772a555f0df1c0a01c857812164d8812a704acda3ad29b7f121ad72af3142f016ed8d32d39104e5616ab0307e8a04ff5f750e0b2af3993806e3c1b8bf22fc83721ad23823f83b72aa11d260014db2ea832b798fffe95369764321b61fe7afdf69eb4eb1a16c4a744a3d89ed3a12141c5780a937f9757975b8251ac64c2d8c781debf11986c8b363a650070014b3c0e74dabaa3e6976b188bc46423bc350605416f6e720081b1b630254cb6c0c88c21ed5a5d547f9afc", 0xee, 0x5}, {&(0x7f00000003c0)="c6fac92d17fe821942dd0fca499476f06bc59d6536dca06709956efc7c9e186ca501690b1239cba3fbe208ff3571b16f36e4bec4e6be625ee647cd2609aeb6d37f85fc5b9c5a08ef0ed39c688460228fa07404f77a6125522fae901cae1f3094ef076c5371be3a4335ab77565f3c1b74afda43949f6e7b6be0eeba845dc8ca7d588210619b3f105f533362713011184bb2847220a86a9e6147ec22b5be079a5555b354f3bb12fd0d363b871d04f6f61a9272713ac693700b35cf85ab3afb376dbb3f9f5005c0fcd44813b8500306f407af7f", 0xd2, 0x401}, {&(0x7f0000000140)="53ff6edf09c04808d141df31d0ee107749c2c2cbfcc38ad543213fe5330be73defa09d516ac12f93b47be6913523f0df", 0x30, 0x9dc}, {&(0x7f00000004c0)="0a48d3f1c2059e7f2da4a2075a8b1d99e7ddf452bae3519b27c9f5fa94d17e64f2b823d3161c3094f82ebcb09124ae9c60d2ee2b78dc5d893bacd0776741f502fbbd34dc139a56c4ba09b8afbd027eaefecb67d21ea330059ab9163cda2e00f3c212360f7d7fea1d81e1818abc8bb5cec6fe39784f060100f5", 0x79}, {&(0x7f0000000540)="ed84d86be10a8248c257be5d52fb9d7607789022e708a82dd11ee8dd675a589f964ccfa9b64ea1f42fea0b4993e0490df4cd805a8be531ae42e3d7bdb036f031b76f3568c981", 0x46}, {&(0x7f00000005c0)="a1710b306580fefbc34d7a0082ba37687ac06a41dec6068675aa6524c046f9ba28892f3c56a9da4f8a168d743e72ac87a79d48fb7ee8cd7f733145ee6db325b0d198631177d40a2c27050f8078e0b17b3445c1807f480ddd7f4774575cd0fa3b043ff0647469da043b69e655c0bbdd9deb81031cfbceb4042602df980e73cb419559f384140012ebdee4eb3aab757d4d22385a4e66d5fd401a1fcf1e065f17a6e6403abe660d18187cb45ccff11765488171743124e581457610afb7c9fbd45cc5881b4edd92ac08498ee36b52f833624976fe9c5aa83eb204b7c85d650def4abbcc17d9d982", 0xe6, 0x80}], 0x1001000, &(0x7f0000000780)={[{'/:\xcd(\'@(.%}/\\-^/'}, {'#\\#'}, {}, {}, {'`\x11\xf9&E\xfb+'}, {'[&,#'}, {}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r3}}, {@appraise}, {@obj_role}, {@hash}, {@subj_type={'subj_type', 0x3d, '#$\','}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@appraise}, {@permit_directio}, {@fowner_gt}]}) 00:40:24 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 9) 00:40:24 executing program 2: rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:40:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) ptrace(0x10, 0x0) ptrace$setregs(0x3, 0x0, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 00:40:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 464.427088] loop7: detected capacity change from 0 to 9 00:40:35 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/29, 0x1d, 0x1000) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) 00:40:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1178}, 0x1) 00:40:35 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(r0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:40:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x9b, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:35 executing program 2: rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:40:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) ptrace(0x10, 0x0) ptrace$setregs(0x3, 0x0, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 00:40:35 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 10) 00:40:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 475.691763] FAULT_INJECTION: forcing a failure. [ 475.691763] name failslab, interval 1, probability 0, space 0, times 0 [ 475.693932] CPU: 1 UID: 0 PID: 5692 Comm: syz-executor.1 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 475.693966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 475.693980] Call Trace: [ 475.693989] [ 475.693998] dump_stack_lvl+0xfa/0x120 [ 475.694039] should_fail_ex+0x4d7/0x5e0 [ 475.694085] should_failslab+0xc2/0x120 [ 475.694121] __kmalloc_cache_noprof+0x73/0x6a0 [ 475.694148] ? __pfx___mutex_lock+0x10/0x10 [ 475.694180] ? find_get_pmu_context+0x90/0x9d0 [ 475.694220] ? find_get_pmu_context+0x90/0x9d0 [ 475.694249] find_get_pmu_context+0x90/0x9d0 [ 475.694281] ? security_capable+0x2f/0x90 [ 475.694326] __do_sys_perf_event_open+0x1529/0x2c20 [ 475.694383] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 475.694415] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 475.694468] ? ksys_write+0x1a3/0x240 [ 475.694500] ? __pfx_ksys_write+0x10/0x10 [ 475.694546] do_syscall_64+0xbf/0x390 [ 475.694583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.694606] RIP: 0033:0x7fbbfe881b19 [ 475.694625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 475.694648] RSP: 002b:00007fbbfbdf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 475.694672] RAX: ffffffffffffffda RBX: 00007fbbfe994f60 RCX: 00007fbbfe881b19 [ 475.694688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 475.694703] RBP: 00007fbbfbdf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 475.694718] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 475.694733] R13: 00007ffce742b2bf R14: 00007fbbfbdf7300 R15: 0000000000022000 [ 475.694774] 00:40:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:35 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/29, 0x1d, 0x1000) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) 00:40:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:35 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:40:35 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 11) 00:40:35 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) stat(&(0x7f00000006c0)='./file0\x00', 0x0) creat(&(0x7f0000000800)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000000040)=0x1) syz_open_dev$sg(&(0x7f0000000080), 0x40, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7f, 0xdf6, &(0x7f00000000c0)=0x1) 00:40:35 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 12) [ 476.066694] FAULT_INJECTION: forcing a failure. [ 476.066694] name failslab, interval 1, probability 0, space 0, times 0 [ 476.068718] CPU: 1 UID: 0 PID: 5783 Comm: syz-executor.1 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 476.068749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 476.068763] Call Trace: [ 476.068771] [ 476.068780] dump_stack_lvl+0xfa/0x120 [ 476.068821] should_fail_ex+0x4d7/0x5e0 [ 476.068872] ? __d_alloc+0x31/0xa10 [ 476.068903] should_failslab+0xc2/0x120 [ 476.068939] kmem_cache_alloc_lru_noprof+0x76/0x680 [ 476.068981] ? __d_alloc+0x31/0xa10 [ 476.069009] __d_alloc+0x31/0xa10 [ 476.069038] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 476.069071] d_alloc_pseudo+0x1d/0xc0 [ 476.069093] alloc_file_pseudo+0xbe/0x220 [ 476.069135] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 476.069175] ? lock_is_held_type+0x9e/0x120 [ 476.069211] __anon_inode_getfile+0xe1/0x280 [ 476.069242] __do_sys_perf_event_open+0x18cb/0x2c20 [ 476.069286] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 476.069337] ? ksys_write+0x1a3/0x240 [ 476.069366] ? __pfx_ksys_write+0x10/0x10 [ 476.069410] do_syscall_64+0xbf/0x390 [ 476.069444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.069468] RIP: 0033:0x7fbbfe881b19 [ 476.069487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 476.069508] RSP: 002b:00007fbbfbdf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 476.069530] RAX: ffffffffffffffda RBX: 00007fbbfe994f60 RCX: 00007fbbfe881b19 [ 476.069546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 476.069560] RBP: 00007fbbfbdf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 476.069574] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 476.069588] R13: 00007ffce742b2bf R14: 00007fbbfbdf7300 R15: 0000000000022000 [ 476.069628] 00:40:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:46 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:40:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1178}, 0x1) 00:40:46 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:40:46 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="0100ffffe81b46f1c78600", @ANYRES32, @ANYBLOB="05000000000000002e2f66696c653000"]) 00:40:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) ptrace(0x10, 0x0) ptrace$setregs(0x3, 0x0, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 00:40:46 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 13) 00:40:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:46 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:40:46 executing program 7: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x90, 0x4, 0x3, 0x80, 0x0, 0x9, 0x16002, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0x1}, 0x200, 0xfff, 0x9ca5, 0x2, 0x20, 0x8, 0x7fff, 0x0, 0x2, 0x0, 0xa4}, 0x0, 0x7, r1, 0xa) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000005, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f00000001c0)=@l2tp6, 0x80, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000000440)=""/113, 0x71}], 0x4, &(0x7f00000004c0)=""/186, 0xba}, 0x40}, {{&(0x7f0000000580)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/117, 0x75}], 0x1, &(0x7f00000006c0)=""/255, 0xff}, 0x7fff}], 0x2, 0x40000000, &(0x7f0000000840)) ptrace(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) 00:40:46 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 14) 00:40:46 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:40:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x8f, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:40:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 486.908504] FAULT_INJECTION: forcing a failure. [ 486.908504] name failslab, interval 1, probability 0, space 0, times 0 [ 486.910250] CPU: 1 UID: 0 PID: 5888 Comm: syz-executor.1 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 486.910281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 486.910294] Call Trace: [ 486.910303] [ 486.910312] dump_stack_lvl+0xfa/0x120 [ 486.910352] should_fail_ex+0x4d7/0x5e0 [ 486.910396] ? alloc_empty_file+0x58/0x1e0 [ 486.910432] should_failslab+0xc2/0x120 [ 486.910466] kmem_cache_alloc_noprof+0x72/0x680 [ 486.910490] ? find_held_lock+0x2b/0x80 [ 486.910550] ? alloc_empty_file+0x58/0x1e0 [ 486.910584] alloc_empty_file+0x58/0x1e0 [ 486.910623] alloc_file_pseudo+0x12b/0x220 [ 486.910663] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 486.910703] ? lock_is_held_type+0x9e/0x120 [ 486.910739] __anon_inode_getfile+0xe1/0x280 [ 486.910770] __do_sys_perf_event_open+0x18cb/0x2c20 [ 486.910814] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 486.910870] ? ksys_write+0x1a3/0x240 [ 486.910899] ? __pfx_ksys_write+0x10/0x10 [ 486.910943] do_syscall_64+0xbf/0x390 [ 486.910976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.911000] RIP: 0033:0x7fbbfe881b19 [ 486.911018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.911039] RSP: 002b:00007fbbfbdf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 486.911061] RAX: ffffffffffffffda RBX: 00007fbbfe994f60 RCX: 00007fbbfe881b19 [ 486.911077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 486.911090] RBP: 00007fbbfbdf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 486.911104] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 486.911119] R13: 00007ffce742b2bf R14: 00007fbbfbdf7300 R15: 0000000000022000 [ 486.911157] 00:41:00 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 15) 00:41:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1178}, 0x1) 00:41:00 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file1\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@gid={'gid', 0x3d, r2}}]}) chown(&(0x7f0000000000)='./file1\x00', r0, r2) 00:41:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:00 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:41:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, 0x0, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:41:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:00 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:41:00 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 16) 00:41:00 executing program 7: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000180)=""/117, 0x75}, {&(0x7f00000002c0)=""/171, 0xab}, {&(0x7f0000000380)=""/108, 0x6c}, {&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/27, 0x1b}], 0x6, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40000100) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31343338373338393700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040000c00000000000000d5f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000006100000000000000", 0x40, 0x540}, {&(0x7f0000000140)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff56ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe59b9eecf73c724fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d5f4655fd5f4655fd5f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f00000005c0)="ed41000000100000d5f4655fd6f4655fd6f4e55f0000000000000400800000000000080005e3ffff09f301000400000000000000000000000100000010000000f8c2a08c59ac4b3367dc7fc17813a1d80f304261e3b77c96c0601d884ef3e5ea8117f7f9f22e4ab63b078f98b4382f7e", 0x70, 0x4100}, {&(0x7f0000000040)=' \x00', 0x2, 0x4180}], 0x0, &(0x7f0000014d00)=ANY=[@ANYBLOB='\x00']) 00:41:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 500.831172] FAULT_INJECTION: forcing a failure. [ 500.831172] name failslab, interval 1, probability 0, space 0, times 0 [ 500.832255] CPU: 0 UID: 0 PID: 6003 Comm: syz-executor.1 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 500.832271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 500.832278] Call Trace: [ 500.832283] [ 500.832288] dump_stack_lvl+0xfa/0x120 [ 500.832313] should_fail_ex+0x4d7/0x5e0 [ 500.832337] ? security_file_alloc+0x35/0x130 [ 500.832352] should_failslab+0xc2/0x120 [ 500.832371] kmem_cache_alloc_noprof+0x72/0x680 [ 500.832385] ? __create_object+0x59/0x80 [ 500.832411] ? security_file_alloc+0x35/0x130 [ 500.832423] security_file_alloc+0x35/0x130 [ 500.832437] init_file+0x95/0x4c0 [ 500.832457] alloc_empty_file+0x76/0x1e0 [ 500.832477] alloc_file_pseudo+0x12b/0x220 [ 500.832497] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 500.832517] ? lock_is_held_type+0x9e/0x120 [ 500.832536] __anon_inode_getfile+0xe1/0x280 [ 500.832553] __do_sys_perf_event_open+0x18cb/0x2c20 [ 500.832577] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 500.832603] ? ksys_write+0x1a3/0x240 [ 500.832617] ? __pfx_ksys_write+0x10/0x10 [ 500.832640] do_syscall_64+0xbf/0x390 [ 500.832658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.832670] RIP: 0033:0x7fbbfe881b19 [ 500.832680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.832691] RSP: 002b:00007fbbfbdf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 500.832702] RAX: ffffffffffffffda RBX: 00007fbbfe994f60 RCX: 00007fbbfe881b19 [ 500.832710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 500.832717] RBP: 00007fbbfbdf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.832724] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 500.832731] R13: 00007ffce742b2bf R14: 00007fbbfbdf7300 R15: 0000000000022000 [ 500.832752] [ 500.884830] loop7: detected capacity change from 0 to 4096 00:41:00 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xec0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 500.920819] EXT4-fs error (device loop7): __ext4_fill_super:5510: inode #2: comm syz-executor.7: iget: bad i_size value: 9092548518429593600 [ 500.933632] EXT4-fs (loop7): get root inode failed [ 500.934515] EXT4-fs (loop7): mount failed [ 500.977536] loop7: detected capacity change from 0 to 4096 00:41:09 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff8120726d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:09 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 17) 00:41:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:41:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x1) 00:41:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, 0x0, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:41:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:09 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x400000}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r4 = gettid() perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x2a, 0x3f, 0x0, 0x80000000, 0x180, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x7}, 0x40000, 0x7, 0x81, 0x4, 0x100, 0x51, 0xbbf, 0x0, 0x101, 0x0, 0x80}, r4, 0x8, r2, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x18, &(0x7f0000000080), 0x4) 00:41:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x9b00, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:09 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="c000000002080102000000000000000001000007060002408808000096cc2b8c692ece5d8263290900010073797a3100000000050003002f0000000600024099fc00004c00048008000840ffffff010800054000000009080004400000f6b908000a4000000007080007400000000408000140000000010800074000000009080001400000000808000240000000f534000480080004400000000c080008400000000408000740000000f507000440000001ff0800074000000006080006400000005e0500030021000000446450f5140faf348494dace76242c118bb9ddf613894a00cc25cc7dd1471bc265eb4d104e0a5921aaa92ae9d9717e402d14c4bc0b0f73b0650acb52b4ffd846ab5c61a958cb32905477e3bf211c68af79a338e8de56cc1117f9f606194e265f2571483ab4412f70a044615f84675beb065008ff4ba158d3208ff81774293a5a80c69dd0c20c5d952a4c"], 0xc0}}, 0x24008090) r3 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{}, {@debug={'debug', 0x3d, 0xfffffffffffffffe}}, {@access_client}, {@privport}, {@mmap}, {@access_client}, {@access_client}, {@aname={'aname', 0x3d, '/proc/keys\x00'}}, {@version_u}], [{@obj_user={'obj_user', 0x3d, '%!'}}, {@seclabel}, {@subj_type}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_gt={'euid>', r6}}, {@fsname={'fsname', 0x3d, '/dev/loop#\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) ioctl$FICLONE(r3, 0x40049409, r4) sendfile(r0, r1, 0x0, 0x8001) 00:41:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:41:09 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 18) 00:41:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xc00e, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:09 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 510.002342] FAULT_INJECTION: forcing a failure. [ 510.002342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.004468] CPU: 1 UID: 0 PID: 6162 Comm: syz-executor.1 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 510.004502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 510.004516] Call Trace: [ 510.004524] [ 510.004534] dump_stack_lvl+0xfa/0x120 [ 510.004575] should_fail_ex+0x4d7/0x5e0 [ 510.004621] _copy_to_user+0x32/0xd0 [ 510.004650] simple_read_from_buffer+0xe0/0x180 [ 510.004681] proc_fail_nth_read+0x18a/0x240 [ 510.004718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.004755] ? security_file_permission+0x22/0x90 [ 510.004786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.004821] vfs_read+0x1eb/0xc70 [ 510.004869] ? __pfx_vfs_read+0x10/0x10 [ 510.004902] ? lock_release+0xc8/0x290 [ 510.004940] ? __fget_files+0x20d/0x3b0 [ 510.004985] ksys_read+0x121/0x240 [ 510.005015] ? __pfx_ksys_read+0x10/0x10 [ 510.005061] do_syscall_64+0xbf/0x390 [ 510.005097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.005122] RIP: 0033:0x7fbbfe83469c [ 510.005141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 510.005164] RSP: 002b:00007fbbfbdf7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.005188] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fbbfe83469c [ 510.005205] RDX: 000000000000000f RSI: 00007fbbfbdf71e0 RDI: 0000000000000003 [ 510.005220] RBP: 00007fbbfbdf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 510.005234] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 510.005249] R13: 00007ffce742b2bf R14: 00007fbbfbdf7300 R15: 0000000000022000 [ 510.005290] 00:41:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xec0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:41:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x80000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:10 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:41:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x8f00, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, 0x0, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:41:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xc00e, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:20 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 00:41:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:41:20 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:41:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, 0x0, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:41:20 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="c000000002080102000000000000000001000007060002408808000096cc2b8c692ece5d8263290900010073797a3100000000050003002f0000000600024099fc00004c00048008000840ffffff010800054000000009080004400000f6b908000a4000000007080007400000000408000140000000010800074000000009080001400000000808000240000000f534000480080004400000000c080008400000000408000740000000f507000440000001ff0800074000000006080006400000005e0500030021000000446450f5140faf348494dace76242c118bb9ddf613894a00cc25cc7dd1471bc265eb4d104e0a5921aaa92ae9d9717e402d14c4bc0b0f73b0650acb52b4ffd846ab5c61a958cb32905477e3bf211c68af79a338e8de56cc1117f9f606194e265f2571483ab4412f70a044615f84675beb065008ff4ba158d3208ff81774293a5a80c69dd0c20c5d952a4c"], 0xc0}}, 0x24008090) r3 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{}, {@debug={'debug', 0x3d, 0xfffffffffffffffe}}, {@access_client}, {@privport}, {@mmap}, {@access_client}, {@access_client}, {@aname={'aname', 0x3d, '/proc/keys\x00'}}, {@version_u}], [{@obj_user={'obj_user', 0x3d, '%!'}}, {@seclabel}, {@subj_type}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_gt={'euid>', r6}}, {@fsname={'fsname', 0x3d, '/dev/loop#\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) ioctl$FICLONE(r3, 0x40049409, r4) sendfile(r0, r1, 0x0, 0x8001) [ 521.144641] FAULT_INJECTION: forcing a failure. [ 521.144641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.145689] CPU: 0 UID: 0 PID: 6419 Comm: syz-executor.6 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 521.145707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 521.145715] Call Trace: [ 521.145720] [ 521.145725] dump_stack_lvl+0xfa/0x120 [ 521.145750] should_fail_ex+0x4d7/0x5e0 [ 521.145775] _copy_from_user+0x30/0xd0 [ 521.145789] perf_copy_attr+0x12f/0x920 [ 521.145809] __do_sys_perf_event_open+0xb9/0x2c20 [ 521.145826] ? __mutex_unlock_slowpath+0x157/0x750 [ 521.145846] ? kernel_write+0x633/0x660 [ 521.145866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 521.145882] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 521.145908] ? ksys_write+0x1a3/0x240 [ 521.145923] ? __pfx_ksys_write+0x10/0x10 [ 521.145946] do_syscall_64+0xbf/0x390 [ 521.145965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.145978] RIP: 0033:0x7fd28297cb19 [ 521.145989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 521.146000] RSP: 002b:00007fd27fef2188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 521.146013] RAX: ffffffffffffffda RBX: 00007fd282a8ff60 RCX: 00007fd28297cb19 [ 521.146022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 521.146029] RBP: 00007fd27fef21d0 R08: 0000000000000000 R09: 0000000000000000 [ 521.146037] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 521.146045] R13: 00007ffd1ba7270f R14: 00007fd27fef2300 R15: 0000000000022000 [ 521.146065] 00:41:20 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:31 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) r3 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{}, {@debug={'debug', 0x3d, 0xfffffffffffffffe}}, {@access_client}, {@privport}, {@mmap}, {@access_client}, {@access_client}, {@aname={'aname', 0x3d, '/proc/keys\x00'}}, {@version_u}], [{@obj_user={'obj_user', 0x3d, '%!'}}, {@seclabel}, {@subj_type}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_gt={'euid>', r6}}, {@fsname={'fsname', 0x3d, '/dev/loop#\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) ioctl$FICLONE(r3, 0x40049409, r4) sendfile(r0, r1, 0x0, 0x8001) 00:41:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:41:32 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) 00:41:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:41:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) (fail_nth: 1) 00:41:32 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x3, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 532.347428] FAULT_INJECTION: forcing a failure. [ 532.347428] name failslab, interval 1, probability 0, space 0, times 0 [ 532.349711] CPU: 1 UID: 0 PID: 6537 Comm: syz-executor.6 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 532.349750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 532.349766] Call Trace: [ 532.349775] [ 532.349786] dump_stack_lvl+0xfa/0x120 [ 532.349841] should_fail_ex+0x4d7/0x5e0 [ 532.349895] should_failslab+0xc2/0x120 [ 532.349937] kmem_cache_alloc_node_noprof+0x79/0x6a0 [ 532.349972] ? perf_trace_lock+0xb5/0x5d0 [ 532.350006] ? perf_event_alloc.part.0+0x124/0x45f0 [ 532.350065] ? perf_event_alloc.part.0+0x124/0x45f0 [ 532.350109] perf_event_alloc.part.0+0x124/0x45f0 [ 532.350170] ? __pfx_perf_trace_lock+0x10/0x10 [ 532.350217] ? __pfx_perf_event_alloc.part.0+0x10/0x10 [ 532.350263] ? find_held_lock+0x2b/0x80 [ 532.350306] ? __do_sys_perf_event_open+0x11df/0x2c20 [ 532.350353] __do_sys_perf_event_open+0x719/0x2c20 [ 532.350404] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 532.350442] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 532.350504] ? ksys_write+0x1a3/0x240 [ 532.350541] ? __pfx_ksys_write+0x10/0x10 [ 532.350595] do_syscall_64+0xbf/0x390 [ 532.350636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.350665] RIP: 0033:0x7fd28297cb19 [ 532.350687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 532.350713] RSP: 002b:00007fd27fef2188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 532.350740] RAX: ffffffffffffffda RBX: 00007fd282a8ff60 RCX: 00007fd28297cb19 [ 532.350759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 532.350776] RBP: 00007fd27fef21d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.350794] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 532.350811] R13: 00007ffd1ba7270f R14: 00007fd27fef2300 R15: 0000000000022000 [ 532.350859] [ 532.487361] FAULT_INJECTION: forcing a failure. [ 532.487361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.489076] CPU: 0 UID: 0 PID: 6552 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 532.489106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 532.489120] Call Trace: [ 532.489129] [ 532.489138] dump_stack_lvl+0xfa/0x120 [ 532.489177] should_fail_ex+0x4d7/0x5e0 [ 532.489221] _copy_from_user+0x30/0xd0 [ 532.489247] copy_msghdr_from_user+0x88/0x150 [ 532.489282] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 532.489319] ? __pfx_perf_trace_lock+0x10/0x10 [ 532.489355] ? lock_acquire+0x15e/0x2f0 [ 532.489389] ___sys_sendmsg+0xdc/0x1b0 [ 532.489423] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.489452] ? perf_trace_lock+0xb5/0x5d0 [ 532.489486] ? __pfx_perf_trace_lock+0x10/0x10 [ 532.489512] ? proc_fail_nth_write+0x97/0x220 [ 532.489549] ? lock_acquire+0x15e/0x2f0 [ 532.489575] ? __fget_files+0x34/0x3b0 [ 532.489602] ? find_held_lock+0x2b/0x80 [ 532.489637] ? __fget_files+0x203/0x3b0 [ 532.489663] ? lock_release+0xc8/0x290 [ 532.489695] ? __fget_files+0x20d/0x3b0 [ 532.489736] __sys_sendmsg+0x150/0x200 [ 532.489768] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.489805] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 532.489830] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 532.489864] ? ksys_write+0x1a3/0x240 [ 532.489893] ? __pfx_ksys_write+0x10/0x10 [ 532.489936] do_syscall_64+0xbf/0x390 [ 532.489970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.489994] RIP: 0033:0x7fa3d2671b19 [ 532.490012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 532.490033] RSP: 002b:00007fa3cfbc6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.490055] RAX: ffffffffffffffda RBX: 00007fa3d2785020 RCX: 00007fa3d2671b19 [ 532.490070] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 532.490084] RBP: 00007fa3cfbc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.490098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.490111] R13: 00007ffea6179faf R14: 00007fa3cfbc6300 R15: 0000000000022000 [ 532.490148] 00:41:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) (fail_nth: 2) 00:41:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x80000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:42 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r2, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) r3 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{}, {@debug={'debug', 0x3d, 0xfffffffffffffffe}}, {@access_client}, {@privport}, {@mmap}, {@access_client}, {@access_client}, {@aname={'aname', 0x3d, '/proc/keys\x00'}}, {@version_u}], [{@obj_user={'obj_user', 0x3d, '%!'}}, {@seclabel}, {@subj_type}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_gt={'euid>', r6}}, {@fsname={'fsname', 0x3d, '/dev/loop#\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) ioctl$FICLONE(r3, 0x40049409, r4) sendfile(r0, r1, 0x0, 0x8001) 00:41:42 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x4, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:41:42 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 3) 00:41:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) [ 542.740320] FAULT_INJECTION: forcing a failure. [ 542.740320] name failslab, interval 1, probability 0, space 0, times 0 [ 542.741313] CPU: 1 UID: 0 PID: 6675 Comm: syz-executor.4 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 542.741331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 542.741338] Call Trace: [ 542.741344] [ 542.741349] dump_stack_lvl+0xfa/0x120 [ 542.741375] should_fail_ex+0x4d7/0x5e0 [ 542.741401] should_failslab+0xc2/0x120 [ 542.741421] __kmalloc_noprof+0xc8/0x760 [ 542.741445] ? sock_kmalloc+0x111/0x170 [ 542.741462] ? sock_kmalloc+0x111/0x170 [ 542.741471] sock_kmalloc+0x111/0x170 [ 542.741484] ____sys_sendmsg+0x619/0xc20 [ 542.741499] ? copy_msghdr_from_user+0xfb/0x150 [ 542.741516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.741542] ? lock_acquire+0x15e/0x2f0 [ 542.741561] ___sys_sendmsg+0x10f/0x1b0 [ 542.741579] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.741596] ? perf_trace_lock+0xb5/0x5d0 [ 542.741616] ? __pfx_perf_trace_lock+0x10/0x10 [ 542.741629] ? proc_fail_nth_write+0x97/0x220 [ 542.741650] ? lock_acquire+0x15e/0x2f0 [ 542.741663] ? __fget_files+0x34/0x3b0 [ 542.741677] ? find_held_lock+0x2b/0x80 [ 542.741695] ? __fget_files+0x203/0x3b0 [ 542.741708] ? lock_release+0xc8/0x290 [ 542.741724] ? __fget_files+0x20d/0x3b0 [ 542.741745] __sys_sendmsg+0x150/0x200 [ 542.741761] ? __pfx___sys_sendmsg+0x10/0x10 [ 542.741784] ? __pfx_ksys_write+0x10/0x10 [ 542.741807] do_syscall_64+0xbf/0x390 [ 542.741825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.741843] RIP: 0033:0x7fa3d2671b19 [ 542.741852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 542.741863] RSP: 002b:00007fa3cfbc6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.741875] RAX: ffffffffffffffda RBX: 00007fa3d2785020 RCX: 00007fa3d2671b19 [ 542.741883] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 542.741890] RBP: 00007fa3cfbc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 542.741897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.741904] R13: 00007ffea6179faf R14: 00007fa3cfbc6300 R15: 0000000000022000 [ 542.741923] 00:41:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:41:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:42 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 4) 00:41:42 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x6, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:42 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 542.989682] FAULT_INJECTION: forcing a failure. [ 542.989682] name failslab, interval 1, probability 0, space 0, times 0 [ 542.990734] CPU: 1 UID: 0 PID: 6739 Comm: syz-executor.6 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 542.990751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 542.990758] Call Trace: [ 542.990762] [ 542.990767] dump_stack_lvl+0xfa/0x120 [ 542.990796] should_fail_ex+0x4d7/0x5e0 [ 542.990820] should_failslab+0xc2/0x120 [ 542.990844] __kmalloc_cache_noprof+0x73/0x6a0 [ 542.990855] ? x86_reserve_hardware+0xbf/0x560 [ 542.990870] ? __pfx_amd_pmu_addr_offset+0x10/0x10 [ 542.990893] ? allocate_fake_cpuc+0x41/0x1b0 [ 542.990909] ? allocate_fake_cpuc+0x41/0x1b0 [ 542.990920] allocate_fake_cpuc+0x41/0x1b0 [ 542.990932] x86_pmu_event_init+0x92d/0xbc0 [ 542.990948] perf_try_init_event+0x140/0x9f0 [ 542.990969] perf_event_alloc.part.0+0x118e/0x45f0 [ 542.990988] ? perf_event_alloc.part.0+0x1074/0x45f0 [ 542.991017] ? __pfx_perf_event_alloc.part.0+0x10/0x10 [ 542.991036] ? find_held_lock+0x2b/0x80 [ 542.991056] ? __do_sys_perf_event_open+0x11df/0x2c20 [ 542.991075] __do_sys_perf_event_open+0x719/0x2c20 [ 542.991096] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 542.991114] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 542.991139] ? ksys_write+0x1a3/0x240 [ 542.991156] ? __pfx_ksys_write+0x10/0x10 [ 542.991178] do_syscall_64+0xbf/0x390 [ 542.991195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.991207] RIP: 0033:0x7fd28297cb19 [ 542.991224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 542.991236] RSP: 002b:00007fd27fef2188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 542.991247] RAX: ffffffffffffffda RBX: 00007fd282a8ff60 RCX: 00007fd28297cb19 [ 542.991256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 542.991263] RBP: 00007fd27fef21d0 R08: 0000000000000000 R09: 0000000000000000 [ 542.991270] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 542.991277] R13: 00007ffd1ba7270f R14: 00007fd27fef2300 R15: 0000000000022000 [ 542.991297] 00:41:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) (fail_nth: 3) 00:41:53 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) r2 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{}, {@debug={'debug', 0x3d, 0xfffffffffffffffe}}, {@access_client}, {@privport}, {@mmap}, {@access_client}, {@access_client}, {@aname={'aname', 0x3d, '/proc/keys\x00'}}, {@version_u}], [{@obj_user={'obj_user', 0x3d, '%!'}}, {@seclabel}, {@subj_type}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_gt={'euid>', r5}}, {@fsname={'fsname', 0x3d, '/dev/loop#\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) ioctl$FICLONE(r2, 0x40049409, r3) 00:41:53 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xa, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:41:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:41:53 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 5) 00:41:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) 00:41:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:53 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x18, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:41:53 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 6) 00:41:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:41:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:41:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) [ 553.977969] FAULT_INJECTION: forcing a failure. [ 553.977969] name failslab, interval 1, probability 0, space 0, times 0 [ 553.979074] CPU: 1 UID: 0 PID: 6945 Comm: syz-executor.6 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 553.979091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 553.979099] Call Trace: [ 553.979103] [ 553.979108] dump_stack_lvl+0xfa/0x120 [ 553.979132] should_fail_ex+0x4d7/0x5e0 [ 553.979156] should_failslab+0xc2/0x120 [ 553.979176] __kmalloc_noprof+0xc8/0x760 [ 553.979197] ? x86_pmu_event_init+0x20b/0xbc0 [ 553.979211] ? security_perf_event_alloc+0x13b/0x1b0 [ 553.979232] ? find_held_lock+0x2b/0x80 [ 553.979260] ? security_perf_event_alloc+0x13b/0x1b0 [ 553.979279] security_perf_event_alloc+0x13b/0x1b0 [ 553.979300] perf_event_alloc.part.0+0x1c46/0x45f0 [ 553.979322] ? perf_event_alloc.part.0+0x1074/0x45f0 [ 553.979363] ? __pfx_perf_event_alloc.part.0+0x10/0x10 [ 553.979383] ? find_held_lock+0x2b/0x80 [ 553.979401] ? __do_sys_perf_event_open+0x11df/0x2c20 [ 553.979422] __do_sys_perf_event_open+0x719/0x2c20 [ 553.979443] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 553.979460] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 553.979487] ? ksys_write+0x1a3/0x240 [ 553.979503] ? __pfx_ksys_write+0x10/0x10 [ 553.979526] do_syscall_64+0xbf/0x390 [ 553.979544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.979557] RIP: 0033:0x7fd28297cb19 [ 553.979567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 553.979579] RSP: 002b:00007fd27fef2188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 553.979591] RAX: ffffffffffffffda RBX: 00007fd282a8ff60 RCX: 00007fd28297cb19 [ 553.979599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 553.979607] RBP: 00007fd27fef21d0 R08: 0000000000000000 R09: 0000000000000000 [ 553.979615] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 553.979622] R13: 00007ffd1ba7270f R14: 00007fd27fef2300 R15: 0000000000022000 [ 553.979642] 00:42:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x9b000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:05 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{}, {@debug={'debug', 0x3d, 0xfffffffffffffffe}}, {@access_client}, {@privport}, {@mmap}, {@access_client}, {@access_client}, {@aname={'aname', 0x3d, '/proc/keys\x00'}}, {@version_u}], [{@obj_user={'obj_user', 0x3d, '%!'}}, {@seclabel}, {@subj_type}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_gt={'euid>', r4}}, {@fsname={'fsname', 0x3d, '/dev/loop#\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) 00:42:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:42:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) 00:42:05 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x42, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:05 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 7) 00:42:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:42:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:05 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x300, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:05 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 8) 00:42:05 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x600, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:42:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xc00e0000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 565.667256] FAULT_INJECTION: forcing a failure. [ 565.667256] name failslab, interval 1, probability 0, space 0, times 0 [ 565.669005] CPU: 1 UID: 0 PID: 7107 Comm: syz-executor.6 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 565.669037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.669050] Call Trace: [ 565.669058] [ 565.669067] dump_stack_lvl+0xfa/0x120 [ 565.669106] should_fail_ex+0x4d7/0x5e0 [ 565.669149] should_failslab+0xc2/0x120 [ 565.669183] __kmalloc_cache_noprof+0x73/0x6a0 [ 565.669207] ? __pfx_perf_lock_task_context+0x10/0x10 [ 565.669246] ? find_get_context+0xcb/0x680 [ 565.669289] ? find_get_context+0xcb/0x680 [ 565.669324] find_get_context+0xcb/0x680 [ 565.669362] ? __pfx_find_get_context+0x10/0x10 [ 565.669401] ? security_capable+0x2f/0x90 [ 565.669442] __do_sys_perf_event_open+0xa16/0x2c20 [ 565.669481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 565.669511] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 565.669560] ? ksys_write+0x1a3/0x240 [ 565.669590] ? __pfx_ksys_write+0x10/0x10 [ 565.669633] do_syscall_64+0xbf/0x390 [ 565.669666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.669690] RIP: 0033:0x7fd28297cb19 [ 565.669708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 565.669730] RSP: 002b:00007fd27fef2188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 565.669752] RAX: ffffffffffffffda RBX: 00007fd282a8ff60 RCX: 00007fd28297cb19 [ 565.669767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 565.669780] RBP: 00007fd27fef21d0 R08: 0000000000000000 R09: 0000000000000000 [ 565.669794] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 565.669808] R13: 00007ffd1ba7270f R14: 00007fd27fef2300 R15: 0000000000022000 [ 565.669854] 00:42:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:05 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xa00, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:42:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:42:15 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4000) 00:42:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:15 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 9) 00:42:15 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x1800, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:42:15 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 10) 00:42:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xfffff000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:15 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) 00:42:15 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x2000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 576.216696] FAULT_INJECTION: forcing a failure. [ 576.216696] name failslab, interval 1, probability 0, space 0, times 0 [ 576.218770] CPU: 1 UID: 0 PID: 7226 Comm: syz-executor.6 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 576.218801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 576.218814] Call Trace: [ 576.218822] [ 576.218837] dump_stack_lvl+0xfa/0x120 [ 576.218875] should_fail_ex+0x4d7/0x5e0 [ 576.218918] should_failslab+0xc2/0x120 [ 576.218952] __kmalloc_cache_noprof+0x73/0x6a0 [ 576.218977] ? __pfx___mutex_lock+0x10/0x10 [ 576.219004] ? find_get_pmu_context+0x90/0x9d0 [ 576.219042] ? find_get_pmu_context+0x90/0x9d0 [ 576.219069] find_get_pmu_context+0x90/0x9d0 [ 576.219099] ? security_capable+0x2f/0x90 [ 576.219140] __do_sys_perf_event_open+0x1529/0x2c20 [ 576.219180] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 576.219209] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 576.219260] ? ksys_write+0x1a3/0x240 [ 576.219290] ? __pfx_ksys_write+0x10/0x10 [ 576.219334] do_syscall_64+0xbf/0x390 [ 576.219367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.219390] RIP: 0033:0x7fd28297cb19 [ 576.219408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.219430] RSP: 002b:00007fd27fef2188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 576.219452] RAX: ffffffffffffffda RBX: 00007fd282a8ff60 RCX: 00007fd28297cb19 [ 576.219467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 576.219480] RBP: 00007fd27fef21d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.219494] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 576.219508] R13: 00007ffd1ba7270f R14: 00007fd27fef2300 R15: 0000000000022000 [ 576.219547] 00:42:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:16 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:16 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 11) 00:42:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 1) 00:42:29 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:42:29 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x3f00, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:42:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x2, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:42:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:29 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 12) [ 589.388811] FAULT_INJECTION: forcing a failure. [ 589.388811] name failslab, interval 1, probability 0, space 0, times 0 [ 589.389927] CPU: 0 UID: 0 PID: 7360 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 589.389951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.389960] Call Trace: [ 589.389966] [ 589.389973] dump_stack_lvl+0xfa/0x120 [ 589.390002] should_fail_ex+0x4d7/0x5e0 [ 589.390037] ? getname_flags.part.0+0x48/0x540 [ 589.390056] should_failslab+0xc2/0x120 [ 589.390080] kmem_cache_alloc_noprof+0x72/0x680 [ 589.390100] ? find_held_lock+0x2b/0x80 [ 589.390143] ? getname_flags.part.0+0x48/0x540 [ 589.390156] getname_flags.part.0+0x48/0x540 [ 589.390179] getname_flags+0x95/0xe0 [ 589.390206] do_sys_openat2+0x9f/0x1b0 [ 589.390226] ? __pfx_do_sys_openat2+0x10/0x10 [ 589.390271] __x64_sys_creat+0xcc/0x120 [ 589.390293] ? __pfx___x64_sys_creat+0x10/0x10 [ 589.390307] ? __pfx_ksys_write+0x10/0x10 [ 589.390339] ? do_syscall_64+0x85/0x390 [ 589.390370] do_syscall_64+0xbf/0x390 [ 589.390396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.390412] RIP: 0033:0x7f72cc54cb19 [ 589.390424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.390440] RSP: 002b:00007f72c9ac2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 589.390457] RAX: ffffffffffffffda RBX: 00007f72cc65ff60 RCX: 00007f72cc54cb19 [ 589.390467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 589.390475] RBP: 00007f72c9ac21d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.390484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.390493] R13: 00007ffc0fad982f R14: 00007f72c9ac2300 R15: 0000000000022000 [ 589.390542] [ 589.449231] FAULT_INJECTION: forcing a failure. [ 589.449231] name failslab, interval 1, probability 0, space 0, times 0 [ 589.451218] CPU: 1 UID: 0 PID: 7368 Comm: syz-executor.6 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 589.451251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.451265] Call Trace: [ 589.451273] [ 589.451282] dump_stack_lvl+0xfa/0x120 [ 589.451322] should_fail_ex+0x4d7/0x5e0 [ 589.451367] ? __d_alloc+0x31/0xa10 [ 589.451397] should_failslab+0xc2/0x120 [ 589.451432] kmem_cache_alloc_lru_noprof+0x76/0x680 [ 589.451476] ? __d_alloc+0x31/0xa10 [ 589.451503] __d_alloc+0x31/0xa10 [ 589.451534] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 589.451567] d_alloc_pseudo+0x1d/0xc0 [ 589.451589] alloc_file_pseudo+0xbe/0x220 [ 589.451632] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 589.451673] ? lock_is_held_type+0x9e/0x120 [ 589.451710] __anon_inode_getfile+0xe1/0x280 [ 589.451742] __do_sys_perf_event_open+0x18cb/0x2c20 [ 589.451788] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 589.451868] ? ksys_write+0x1a3/0x240 [ 589.451898] ? __pfx_ksys_write+0x10/0x10 00:42:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 2) [ 589.451943] do_syscall_64+0xbf/0x390 [ 589.451978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.452002] RIP: 0033:0x7fd28297cb19 [ 589.452021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.452043] RSP: 002b:00007fd27fef2188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 589.452066] RAX: ffffffffffffffda RBX: 00007fd282a8ff60 RCX: 00007fd28297cb19 [ 589.452081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 589.452096] RBP: 00007fd27fef21d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.452110] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 589.452124] R13: 00007ffd1ba7270f R14: 00007fd27fef2300 R15: 0000000000022000 [ 589.452165] 00:42:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:29 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:42:29 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x4000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 3) 00:42:29 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 13) 00:42:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x8f000000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:42:40 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="c000000002080102000000000000000001000007060002408808000096cc2b8c692ece5d8263290900010073797a3100000000050003002f0000000600024099fc00004c00048008000840ffffff010800054000000009080004400000f6b908000a4000000007080007400000000408000140000000010800074000000009080001400000000808000240000000f534000480080004400000000c080008400000000408000740000000f507000440000001ff0800074000000006080006400000005e0500030021000000446450f5140faf348494dace76242c118bb9ddf613894a00cc25cc7dd1471bc265eb4d104e0a5921aaa92ae9d9717e402d14c4bc0b0f73b0650acb52b4ffd846ab5c61a958cb32905477e3bf211c68af79a338e8de56cc1117f9f606194e265f2571483ab4412f70a044615f84675beb065008ff4ba158d3208ff81774293a5a80c69dd0c20c5d952a4c"], 0xc0}}, 0x24008090) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:42:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x3, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:42:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:42:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xffffffff, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:40 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 14) 00:42:40 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x4200, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 4) [ 600.511744] FAULT_INJECTION: forcing a failure. [ 600.511744] name failslab, interval 1, probability 0, space 0, times 0 [ 600.512747] CPU: 0 UID: 0 PID: 7608 Comm: syz-executor.6 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 600.512763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.512771] Call Trace: [ 600.512776] [ 600.512781] dump_stack_lvl+0xfa/0x120 [ 600.512806] should_fail_ex+0x4d7/0x5e0 [ 600.512834] ? alloc_empty_file+0x58/0x1e0 [ 600.512853] should_failslab+0xc2/0x120 [ 600.512872] kmem_cache_alloc_noprof+0x72/0x680 [ 600.512885] ? find_held_lock+0x2b/0x80 [ 600.512910] ? alloc_empty_file+0x58/0x1e0 [ 600.512928] alloc_empty_file+0x58/0x1e0 [ 600.512947] alloc_file_pseudo+0x12b/0x220 [ 600.512967] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 600.512987] ? lock_is_held_type+0x9e/0x120 [ 600.513007] __anon_inode_getfile+0xe1/0x280 [ 600.513023] __do_sys_perf_event_open+0x18cb/0x2c20 [ 600.513048] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 600.513073] ? ksys_write+0x1a3/0x240 [ 600.513089] ? __pfx_ksys_write+0x10/0x10 [ 600.513111] do_syscall_64+0xbf/0x390 [ 600.513128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.513141] RIP: 0033:0x7fd28297cb19 [ 600.513150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.513162] RSP: 002b:00007fd27fef2188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 600.513173] RAX: ffffffffffffffda RBX: 00007fd282a8ff60 RCX: 00007fd28297cb19 [ 600.513181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 600.513188] RBP: 00007fd27fef21d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.513195] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 600.513202] R13: 00007ffd1ba7270f R14: 00007fd27fef2300 R15: 0000000000022000 [ 600.513223] [ 600.549822] FAULT_INJECTION: forcing a failure. [ 600.549822] name failslab, interval 1, probability 0, space 0, times 0 [ 600.551483] CPU: 0 UID: 0 PID: 7613 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 600.551499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.551505] Call Trace: [ 600.551510] [ 600.551515] dump_stack_lvl+0xfa/0x120 [ 600.551534] should_fail_ex+0x4d7/0x5e0 [ 600.551560] ? alloc_empty_file+0x58/0x1e0 [ 600.551579] should_failslab+0xc2/0x120 [ 600.551600] kmem_cache_alloc_noprof+0x72/0x680 [ 600.551629] ? alloc_empty_file+0x58/0x1e0 [ 600.551645] alloc_empty_file+0x58/0x1e0 [ 600.551669] path_openat+0xe0/0x2880 [ 600.551695] ? perf_trace_run_bpf_submit+0xef/0x180 [ 600.551724] ? __pfx_path_openat+0x10/0x10 [ 600.551738] ? perf_trace_lock_acquire+0x3c2/0x700 [ 600.551771] do_filp_open+0x1e8/0x450 [ 600.551787] ? __pfx_do_filp_open+0x10/0x10 [ 600.551824] ? find_held_lock+0x2b/0x80 [ 600.551846] ? alloc_fd+0x2c1/0x560 [ 600.551862] ? lock_release+0xc8/0x290 [ 600.551887] ? _raw_spin_unlock+0x1e/0x40 [ 600.551900] ? alloc_fd+0x2c1/0x560 [ 600.551947] do_sys_openat2+0x104/0x1b0 [ 600.551961] ? __pfx_do_sys_openat2+0x10/0x10 [ 600.552002] __x64_sys_creat+0xcc/0x120 [ 600.552017] ? __pfx___x64_sys_creat+0x10/0x10 [ 600.552043] ? do_syscall_64+0x85/0x390 [ 600.552064] do_syscall_64+0xbf/0x390 [ 600.552084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.552095] RIP: 0033:0x7f72cc54cb19 [ 600.552105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.552115] RSP: 002b:00007f72c9ac2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 600.552127] RAX: ffffffffffffffda RBX: 00007f72cc65ff60 RCX: 00007f72cc54cb19 [ 600.552134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 600.552141] RBP: 00007f72c9ac21d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.552148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.552154] R13: 00007ffc0fad982f R14: 00007f72c9ac2300 R15: 0000000000022000 [ 600.552190] 00:42:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xc00e0000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:40 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 15) 00:42:40 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, 0x1, r0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:42:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 5) 00:42:40 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x40000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0xf, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 6) 00:42:40 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 16) 00:42:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xfffff000, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 600.904562] FAULT_INJECTION: forcing a failure. [ 600.904562] name failslab, interval 1, probability 0, space 0, times 0 [ 600.905735] CPU: 0 UID: 0 PID: 7697 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 600.905752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.905759] Call Trace: [ 600.905764] [ 600.905770] dump_stack_lvl+0xfa/0x120 [ 600.905799] should_fail_ex+0x4d7/0x5e0 [ 600.905832] ? security_file_alloc+0x35/0x130 [ 600.905846] should_failslab+0xc2/0x120 [ 600.905865] kmem_cache_alloc_noprof+0x72/0x680 [ 600.905882] ? __create_object+0x59/0x80 [ 600.905915] ? security_file_alloc+0x35/0x130 [ 600.905927] security_file_alloc+0x35/0x130 [ 600.905943] init_file+0x95/0x4c0 [ 600.905968] alloc_empty_file+0x76/0x1e0 [ 600.905992] path_openat+0xe0/0x2880 [ 600.906018] ? perf_trace_run_bpf_submit+0xef/0x180 [ 600.906047] ? __pfx_path_openat+0x10/0x10 [ 600.906060] ? perf_trace_lock_acquire+0x3c2/0x700 [ 600.906094] do_filp_open+0x1e8/0x450 [ 600.906111] ? __pfx_do_filp_open+0x10/0x10 [ 600.906147] ? find_held_lock+0x2b/0x80 [ 600.906167] ? alloc_fd+0x2c1/0x560 [ 600.906182] ? lock_release+0xc8/0x290 [ 600.906206] ? _raw_spin_unlock+0x1e/0x40 [ 600.906218] ? alloc_fd+0x2c1/0x560 [ 600.906251] do_sys_openat2+0x104/0x1b0 [ 600.906264] ? __pfx_do_sys_openat2+0x10/0x10 [ 600.906300] __x64_sys_creat+0xcc/0x120 [ 600.906315] ? __pfx___x64_sys_creat+0x10/0x10 [ 600.906325] ? __pfx_ksys_write+0x10/0x10 [ 600.906351] ? do_syscall_64+0x85/0x390 [ 600.906373] do_syscall_64+0xbf/0x390 [ 600.906392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.906405] RIP: 0033:0x7f72cc54cb19 [ 600.906415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.906426] RSP: 002b:00007f72c9ac2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 600.906438] RAX: ffffffffffffffda RBX: 00007f72cc65ff60 RCX: 00007f72cc54cb19 [ 600.906446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 600.906452] RBP: 00007f72c9ac21d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.906460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.906466] R13: 00007ffc0fad982f R14: 00007f72c9ac2300 R15: 0000000000022000 [ 600.906502] [ 600.970199] FAULT_INJECTION: forcing a failure. [ 600.970199] name failslab, interval 1, probability 0, space 0, times 0 [ 600.971251] CPU: 0 UID: 0 PID: 7712 Comm: syz-executor.6 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 600.971266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.971273] Call Trace: [ 600.971276] [ 600.971281] dump_stack_lvl+0xfa/0x120 [ 600.971299] should_fail_ex+0x4d7/0x5e0 [ 600.971320] ? security_file_alloc+0x35/0x130 [ 600.971333] should_failslab+0xc2/0x120 [ 600.971349] kmem_cache_alloc_noprof+0x72/0x680 [ 600.971363] ? __create_object+0x59/0x80 [ 600.971387] ? security_file_alloc+0x35/0x130 [ 600.971399] security_file_alloc+0x35/0x130 [ 600.971413] init_file+0x95/0x4c0 [ 600.971432] alloc_empty_file+0x76/0x1e0 [ 600.971453] alloc_file_pseudo+0x12b/0x220 [ 600.971474] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 600.971495] ? lock_is_held_type+0x9e/0x120 [ 600.971513] __anon_inode_getfile+0xe1/0x280 [ 600.971529] __do_sys_perf_event_open+0x18cb/0x2c20 [ 600.971552] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 600.971578] ? ksys_write+0x1a3/0x240 [ 600.971593] ? __pfx_ksys_write+0x10/0x10 [ 600.971616] do_syscall_64+0xbf/0x390 [ 600.971633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.971645] RIP: 0033:0x7fd28297cb19 [ 600.971654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.971665] RSP: 002b:00007fd27fef2188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 600.971676] RAX: ffffffffffffffda RBX: 00007fd282a8ff60 RCX: 00007fd28297cb19 [ 600.971683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 600.971690] RBP: 00007fd27fef21d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.971697] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 600.971704] R13: 00007ffd1ba7270f R14: 00007fd27fef2300 R15: 0000000000022000 [ 600.971724] 00:42:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:50 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x24008090) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:42:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x4, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:42:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:42:50 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 17) 00:42:50 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x80000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 7) 00:42:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 8) 00:42:50 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 18) 00:42:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 610.801015] FAULT_INJECTION: forcing a failure. [ 610.801015] name failslab, interval 1, probability 0, space 0, times 0 [ 610.802254] CPU: 0 UID: 0 PID: 7778 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 610.802271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.802278] Call Trace: [ 610.802283] [ 610.802289] dump_stack_lvl+0xfa/0x120 [ 610.802317] should_fail_ex+0x4d7/0x5e0 [ 610.802347] ? ext4_alloc_inode+0x28/0x600 [ 610.802368] should_failslab+0xc2/0x120 [ 610.802389] kmem_cache_alloc_lru_noprof+0x76/0x680 [ 610.802418] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 610.802443] ? ext4_alloc_inode+0x28/0x600 [ 610.802460] ext4_alloc_inode+0x28/0x600 [ 610.802481] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 610.802499] alloc_inode+0x67/0x250 [ 610.802523] new_inode+0x1e/0x160 [ 610.802548] __ext4_new_inode+0x35d/0x4d70 [ 610.802574] ? lock_release+0xc8/0x290 [ 610.802614] ? __pfx___ext4_new_inode+0x10/0x10 [ 610.802644] ? __pfx___dquot_initialize+0x10/0x10 [ 610.802683] ? selinux_determine_inode_label+0x1b6/0x410 [ 610.802716] ext4_create+0x2e2/0x4e0 [ 610.802751] ? __pfx_ext4_create+0x10/0x10 [ 610.802771] ? security_inode_permission+0x72/0xe0 [ 610.802794] ? __pfx_ext4_create+0x10/0x10 [ 610.802812] lookup_open.isra.0+0x10f8/0x1530 [ 610.802850] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 610.802905] ? __pfx_down_write+0x10/0x10 [ 610.802924] ? mnt_get_write_access+0x7f/0x2c0 [ 610.802961] path_openat+0xc26/0x2880 [ 610.803007] ? __pfx_path_openat+0x10/0x10 [ 610.803021] ? perf_trace_lock_acquire+0x3c2/0x700 [ 610.803061] do_filp_open+0x1e8/0x450 [ 610.803078] ? __pfx_do_filp_open+0x10/0x10 [ 610.803121] ? find_held_lock+0x2b/0x80 [ 610.803142] ? alloc_fd+0x2c1/0x560 [ 610.803158] ? lock_release+0xc8/0x290 [ 610.803187] ? alloc_fd+0x2c1/0x560 [ 610.803226] do_sys_openat2+0x104/0x1b0 [ 610.803241] ? __pfx_do_sys_openat2+0x10/0x10 [ 610.803283] __x64_sys_creat+0xcc/0x120 [ 610.803299] ? __pfx___x64_sys_creat+0x10/0x10 [ 610.803310] ? __pfx_ksys_write+0x10/0x10 [ 610.803341] ? do_syscall_64+0x85/0x390 [ 610.803365] do_syscall_64+0xbf/0x390 [ 610.803387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.803401] RIP: 0033:0x7f72cc54cb19 [ 610.803412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.803424] RSP: 002b:00007f72c9ac2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 610.803436] RAX: ffffffffffffffda RBX: 00007f72cc65ff60 RCX: 00007f72cc54cb19 [ 610.803445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 610.803452] RBP: 00007f72c9ac21d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.803460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.803468] R13: 00007ffc0fad982f R14: 00007f72c9ac2300 R15: 0000000000022000 [ 610.803511] 00:42:50 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x400000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 610.848613] FAULT_INJECTION: forcing a failure. [ 610.848613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.849643] CPU: 0 UID: 0 PID: 7783 Comm: syz-executor.6 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 610.849659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.849666] Call Trace: [ 610.849669] [ 610.849674] dump_stack_lvl+0xfa/0x120 [ 610.849695] should_fail_ex+0x4d7/0x5e0 [ 610.849717] _copy_to_user+0x32/0xd0 [ 610.849732] simple_read_from_buffer+0xe0/0x180 [ 610.849747] proc_fail_nth_read+0x18a/0x240 [ 610.849766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 610.849783] ? security_file_permission+0x22/0x90 [ 610.849800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 610.849816] vfs_read+0x1eb/0xc70 [ 610.849840] ? __pfx_vfs_read+0x10/0x10 [ 610.849855] ? lock_release+0xc8/0x290 [ 610.849873] ? __fget_files+0x20d/0x3b0 [ 610.849895] ksys_read+0x121/0x240 [ 610.849909] ? __pfx_ksys_read+0x10/0x10 [ 610.849931] do_syscall_64+0xbf/0x390 [ 610.849949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.849961] RIP: 0033:0x7fd28292f69c [ 610.849970] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 610.849981] RSP: 002b:00007fd27fef2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 610.849992] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fd28292f69c [ 610.850001] RDX: 000000000000000f RSI: 00007fd27fef21e0 RDI: 0000000000000003 [ 610.850008] RBP: 00007fd27fef21d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.850015] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 610.850022] R13: 00007ffd1ba7270f R14: 00007fd27fef2300 R15: 0000000000022000 [ 610.850042] 00:42:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x180, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:42:50 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:42:50 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 9) 00:43:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:01 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x400001, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:43:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 10) 00:43:01 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x33fe0, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:01 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) [ 621.446433] FAULT_INJECTION: forcing a failure. [ 621.446433] name failslab, interval 1, probability 0, space 0, times 0 [ 621.447535] CPU: 0 UID: 0 PID: 7908 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 621.447551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.447559] Call Trace: [ 621.447564] [ 621.447570] dump_stack_lvl+0xfa/0x120 [ 621.447597] should_fail_ex+0x4d7/0x5e0 [ 621.447624] ? security_inode_alloc+0x3e/0x130 [ 621.447643] should_failslab+0xc2/0x120 [ 621.447663] kmem_cache_alloc_noprof+0x72/0x680 [ 621.447676] ? __pfx_map_id_range_down+0x10/0x10 [ 621.447708] ? security_inode_alloc+0x3e/0x130 [ 621.447725] security_inode_alloc+0x3e/0x130 [ 621.447748] inode_init_always_gfp+0xc94/0xff0 [ 621.447774] alloc_inode+0x8d/0x250 [ 621.447795] new_inode+0x1e/0x160 [ 621.447819] __ext4_new_inode+0x35d/0x4d70 [ 621.447850] ? lock_release+0xc8/0x290 [ 621.447891] ? __pfx___ext4_new_inode+0x10/0x10 [ 621.447919] ? __pfx___dquot_initialize+0x10/0x10 [ 621.447957] ? selinux_determine_inode_label+0x1b6/0x410 [ 621.447989] ext4_create+0x2e2/0x4e0 [ 621.448022] ? __pfx_ext4_create+0x10/0x10 [ 621.448041] ? security_inode_permission+0x72/0xe0 [ 621.448060] ? __pfx_ext4_create+0x10/0x10 [ 621.448077] lookup_open.isra.0+0x10f8/0x1530 [ 621.448105] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 621.448151] ? __pfx_down_write+0x10/0x10 [ 621.448166] ? mnt_get_write_access+0x7f/0x2c0 [ 621.448210] path_openat+0xc26/0x2880 [ 621.448249] ? __pfx_path_openat+0x10/0x10 [ 621.448262] ? perf_trace_lock_acquire+0x3c2/0x700 [ 621.448296] do_filp_open+0x1e8/0x450 [ 621.448313] ? __pfx_do_filp_open+0x10/0x10 [ 621.448350] ? find_held_lock+0x2b/0x80 [ 621.448368] ? alloc_fd+0x2c1/0x560 [ 621.448383] ? lock_release+0xc8/0x290 [ 621.448409] ? alloc_fd+0x2c1/0x560 [ 621.448442] do_sys_openat2+0x104/0x1b0 [ 621.448456] ? __pfx_do_sys_openat2+0x10/0x10 [ 621.448492] __x64_sys_creat+0xcc/0x120 [ 621.448506] ? __pfx___x64_sys_creat+0x10/0x10 [ 621.448531] ? do_syscall_64+0x85/0x390 [ 621.448552] do_syscall_64+0xbf/0x390 [ 621.448572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.448585] RIP: 0033:0x7f72cc54cb19 [ 621.448595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 621.448606] RSP: 002b:00007f72c9ac2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 621.448618] RAX: ffffffffffffffda RBX: 00007f72cc65ff60 RCX: 00007f72cc54cb19 [ 621.448626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 621.448632] RBP: 00007f72c9ac21d0 R08: 0000000000000000 R09: 0000000000000000 [ 621.448639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 621.448646] R13: 00007ffc0fad982f R14: 00007f72c9ac2300 R15: 0000000000022000 [ 621.448683] 00:43:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xffffffff, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0xfffffdef, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 11) 00:43:01 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x80ffff, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0xf, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:01 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:01 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 12) 00:43:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x2, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0xf, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:43:12 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x1000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:12 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:43:12 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x3, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 633.035597] FAULT_INJECTION: forcing a failure. [ 633.035597] name failslab, interval 1, probability 0, space 0, times 0 [ 633.037652] CPU: 1 UID: 0 PID: 8063 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 633.037685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.037699] Call Trace: [ 633.037707] [ 633.037716] dump_stack_lvl+0xfa/0x120 [ 633.037756] should_fail_ex+0x4d7/0x5e0 [ 633.037802] ? jbd2__journal_start+0x193/0x6b0 [ 633.037826] should_failslab+0xc2/0x120 [ 633.037868] kmem_cache_alloc_noprof+0x72/0x680 [ 633.037893] ? lock_is_held_type+0x9e/0x120 [ 633.037922] ? lock_is_held_type+0x9e/0x120 [ 633.037957] ? jbd2__journal_start+0x193/0x6b0 [ 633.037981] jbd2__journal_start+0x193/0x6b0 [ 633.038014] __ext4_journal_start_sb+0x325/0x5d0 [ 633.038058] __ext4_new_inode+0x2cbe/0x4d70 [ 633.038117] ? __pfx___ext4_new_inode+0x10/0x10 [ 633.038159] ? __pfx___dquot_initialize+0x10/0x10 [ 633.038207] ? selinux_determine_inode_label+0x1b6/0x410 [ 633.038254] ext4_create+0x2e2/0x4e0 [ 633.038292] ? __pfx_ext4_create+0x10/0x10 [ 633.038319] ? security_inode_permission+0x72/0xe0 [ 633.038349] ? __pfx_ext4_create+0x10/0x10 [ 633.038375] lookup_open.isra.0+0x10f8/0x1530 [ 633.038413] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 633.038468] ? __pfx_down_write+0x10/0x10 [ 633.038497] ? mnt_get_write_access+0x7f/0x2c0 [ 633.038546] path_openat+0xc26/0x2880 [ 633.038595] ? __pfx_path_openat+0x10/0x10 [ 633.038625] ? perf_trace_lock_acquire+0xc9/0x700 [ 633.038670] do_filp_open+0x1e8/0x450 [ 633.038700] ? __pfx_do_filp_open+0x10/0x10 [ 633.038749] ? find_held_lock+0x2b/0x80 [ 633.038786] ? alloc_fd+0x2c1/0x560 [ 633.038813] ? lock_release+0xc8/0x290 [ 633.038851] ? alloc_fd+0x2c1/0x560 [ 633.038894] do_sys_openat2+0x104/0x1b0 [ 633.038918] ? __pfx_do_sys_openat2+0x10/0x10 [ 633.038963] __x64_sys_creat+0xcc/0x120 [ 633.038989] ? __pfx___x64_sys_creat+0x10/0x10 [ 633.039012] ? __pfx_ksys_write+0x10/0x10 [ 633.039051] ? do_syscall_64+0x85/0x390 [ 633.039087] do_syscall_64+0xbf/0x390 [ 633.039121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.039146] RIP: 0033:0x7f72cc54cb19 [ 633.039165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.039188] RSP: 002b:00007f72c9ac2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 633.039212] RAX: ffffffffffffffda RBX: 00007f72cc65ff60 RCX: 00007f72cc54cb19 [ 633.039228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 633.039243] RBP: 00007f72c9ac21d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.039257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.039271] R13: 00007ffc0fad982f R14: 00007f72c9ac2300 R15: 0000000000022000 [ 633.039313] [ 633.084102] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory 00:43:12 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x4, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:12 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x1004000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x180, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 13) 00:43:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x3, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:12 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 14) 00:43:12 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x2000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:13 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x6, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 633.376717] FAULT_INJECTION: forcing a failure. [ 633.376717] name failslab, interval 1, probability 0, space 0, times 0 [ 633.377812] CPU: 0 UID: 0 PID: 8167 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 633.377832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.377839] Call Trace: [ 633.377845] [ 633.377850] dump_stack_lvl+0xfa/0x120 [ 633.377878] should_fail_ex+0x4d7/0x5e0 [ 633.377909] should_failslab+0xc2/0x120 [ 633.377928] __kmalloc_noprof+0xc8/0x760 [ 633.377953] ? current_umask+0x12/0x80 [ 633.377971] ? posix_acl_create.part.0+0x2a0/0x480 [ 633.377985] ? security_inode_init_security+0x13d/0x390 [ 633.378015] ? security_inode_init_security+0x13d/0x390 [ 633.378032] security_inode_init_security+0x13d/0x390 [ 633.378052] ? __pfx_ext4_initxattrs+0x10/0x10 [ 633.378068] ? __pfx_security_inode_init_security+0x10/0x10 [ 633.378088] ? ext4_inode_journal_mode+0x267/0x580 [ 633.378110] ? crc32c+0x1ae/0x350 [ 633.378137] __ext4_new_inode+0x3452/0x4d70 [ 633.378188] ? __pfx___ext4_new_inode+0x10/0x10 [ 633.378217] ? __pfx___dquot_initialize+0x10/0x10 [ 633.378250] ? selinux_determine_inode_label+0x1b6/0x410 [ 633.378280] ext4_create+0x2e2/0x4e0 [ 633.378314] ? __pfx_ext4_create+0x10/0x10 [ 633.378333] ? security_inode_permission+0x72/0xe0 [ 633.378353] ? __pfx_ext4_create+0x10/0x10 [ 633.378370] lookup_open.isra.0+0x10f8/0x1530 [ 633.378398] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 633.378446] ? __pfx_down_write+0x10/0x10 [ 633.378461] ? mnt_get_write_access+0x7f/0x2c0 [ 633.378495] path_openat+0xc26/0x2880 [ 633.378538] ? __pfx_path_openat+0x10/0x10 [ 633.378551] ? perf_trace_lock_acquire+0x3c2/0x700 [ 633.378587] do_filp_open+0x1e8/0x450 [ 633.378603] ? __pfx_do_filp_open+0x10/0x10 [ 633.378641] ? find_held_lock+0x2b/0x80 [ 633.378660] ? alloc_fd+0x2c1/0x560 [ 633.378675] ? lock_release+0xc8/0x290 [ 633.378701] ? alloc_fd+0x2c1/0x560 [ 633.378735] do_sys_openat2+0x104/0x1b0 [ 633.378749] ? __pfx_do_sys_openat2+0x10/0x10 [ 633.378786] __x64_sys_creat+0xcc/0x120 [ 633.378801] ? __pfx___x64_sys_creat+0x10/0x10 [ 633.378811] ? __pfx_ksys_write+0x10/0x10 [ 633.378838] ? do_syscall_64+0x85/0x390 [ 633.378859] do_syscall_64+0xbf/0x390 [ 633.378879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.378892] RIP: 0033:0x7f72cc54cb19 [ 633.378902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.378913] RSP: 002b:00007f72c9ac2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 633.378924] RAX: ffffffffffffffda RBX: 00007f72cc65ff60 RCX: 00007f72cc54cb19 [ 633.378932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 633.378939] RBP: 00007f72c9ac21d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.378945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.378952] R13: 00007ffc0fad982f R14: 00007f72c9ac2300 R15: 0000000000022000 [ 633.378989] 00:43:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x4, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x33fe0, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:43:24 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:24 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x3000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:43:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 15) 00:43:24 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 16) 00:43:24 executing program 7: r0 = syz_open_dev$loop(0x0, 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x5, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:24 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x4000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0xfffffdef, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:24 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xa, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 644.817644] FAULT_INJECTION: forcing a failure. [ 644.817644] name failslab, interval 1, probability 0, space 0, times 0 [ 644.818737] CPU: 0 UID: 0 PID: 8230 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 644.818752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 644.818759] Call Trace: [ 644.818765] [ 644.818771] dump_stack_lvl+0xfa/0x120 [ 644.818798] should_fail_ex+0x4d7/0x5e0 [ 644.818831] should_failslab+0xc2/0x120 [ 644.818851] __kmalloc_node_track_caller_noprof+0xc1/0x760 [ 644.818870] ? lock_acquire+0x15e/0x2f0 [ 644.818886] ? sidtab_sid2str_get+0x85/0x6f0 [ 644.818898] ? sidtab_sid2str_get+0x17e/0x6f0 [ 644.818922] ? kmemdup_noprof+0x2b/0x60 [ 644.818936] kmemdup_noprof+0x2b/0x60 [ 644.818951] sidtab_sid2str_get+0x17e/0x6f0 [ 644.818973] sidtab_entry_to_string+0x33/0x110 [ 644.819001] security_sid_to_context_core+0x350/0x620 [ 644.819030] selinux_inode_init_security+0x433/0x650 [ 644.819059] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 644.819077] ? trace_kmalloc+0x1f/0xb0 [ 644.819098] ? current_umask+0x12/0x80 [ 644.819117] ? security_inode_init_security+0x13d/0x390 [ 644.819153] security_inode_init_security+0x1e6/0x390 [ 644.819173] ? __pfx_ext4_initxattrs+0x10/0x10 [ 644.819189] ? __pfx_security_inode_init_security+0x10/0x10 [ 644.819210] ? ext4_inode_journal_mode+0x267/0x580 [ 644.819232] ? crc32c+0x1ae/0x350 [ 644.819259] __ext4_new_inode+0x3452/0x4d70 [ 644.819310] ? __pfx___ext4_new_inode+0x10/0x10 [ 644.819336] ? __pfx___dquot_initialize+0x10/0x10 [ 644.819367] ? selinux_determine_inode_label+0x1b6/0x410 [ 644.819396] ext4_create+0x2e2/0x4e0 [ 644.819427] ? __pfx_ext4_create+0x10/0x10 [ 644.819445] ? security_inode_permission+0x72/0xe0 [ 644.819465] ? __pfx_ext4_create+0x10/0x10 [ 644.819482] lookup_open.isra.0+0x10f8/0x1530 [ 644.819511] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 644.819559] ? __pfx_down_write+0x10/0x10 [ 644.819574] ? mnt_get_write_access+0x7f/0x2c0 [ 644.819608] path_openat+0xc26/0x2880 [ 644.819648] ? __pfx_path_openat+0x10/0x10 [ 644.819661] ? perf_trace_lock_acquire+0x3c2/0x700 [ 644.819696] do_filp_open+0x1e8/0x450 [ 644.819713] ? __pfx_do_filp_open+0x10/0x10 [ 644.819751] ? find_held_lock+0x2b/0x80 [ 644.819770] ? alloc_fd+0x2c1/0x560 [ 644.819785] ? lock_release+0xc8/0x290 [ 644.819811] ? alloc_fd+0x2c1/0x560 [ 644.819845] do_sys_openat2+0x104/0x1b0 [ 644.819860] ? __pfx_do_sys_openat2+0x10/0x10 [ 644.819897] __x64_sys_creat+0xcc/0x120 [ 644.819911] ? __pfx___x64_sys_creat+0x10/0x10 [ 644.819922] ? __pfx_ksys_write+0x10/0x10 [ 644.819949] ? do_syscall_64+0x85/0x390 [ 644.819971] do_syscall_64+0xbf/0x390 [ 644.819991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.820004] RIP: 0033:0x7f72cc54cb19 [ 644.820015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 644.820026] RSP: 002b:00007f72c9ac2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 644.820037] RAX: ffffffffffffffda RBX: 00007f72cc65ff60 RCX: 00007f72cc54cb19 [ 644.820045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 644.820052] RBP: 00007f72c9ac21d0 R08: 0000000000000000 R09: 0000000000000000 [ 644.820059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.820065] R13: 00007ffc0fad982f R14: 00007f72c9ac2300 R15: 0000000000022000 [ 644.820104] 00:43:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 17) 00:43:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x300, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:43:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:43:35 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x18, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x6, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:35 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x6000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:35 executing program 7: r0 = syz_open_dev$loop(0x0, 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x2, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:35 executing program 7: r0 = syz_open_dev$loop(0x0, 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 18) 00:43:35 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x42, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x7, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:35 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xa000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:35 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 19) 00:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x3, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) (fail_nth: 20) 00:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x4, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:45 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r0}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:43:45 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x18000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:45 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x300, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x4b8, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:43:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x8, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:45 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x20000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:45 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x600, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 665.700208] FAULT_INJECTION: forcing a failure. [ 665.700208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.702340] CPU: 0 UID: 0 PID: 8513 Comm: syz-executor.2 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 665.702369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 665.702381] Call Trace: [ 665.702389] [ 665.702399] dump_stack_lvl+0xfa/0x120 [ 665.702439] should_fail_ex+0x4d7/0x5e0 [ 665.702491] _copy_to_user+0x32/0xd0 [ 665.702525] simple_read_from_buffer+0xe0/0x180 [ 665.702563] proc_fail_nth_read+0x18a/0x240 [ 665.702603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.702641] ? security_file_permission+0x22/0x90 [ 665.702675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.702712] vfs_read+0x1eb/0xc70 [ 665.702763] ? __pfx_vfs_read+0x10/0x10 [ 665.702800] ? lock_release+0xc8/0x290 [ 665.702852] ? __fget_files+0x20d/0x3b0 [ 665.702916] ksys_read+0x121/0x240 [ 665.702946] ? __pfx_ksys_read+0x10/0x10 [ 665.703008] do_syscall_64+0xbf/0x390 [ 665.703046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.703069] RIP: 0033:0x7f72cc4ff69c [ 665.703087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 665.703107] RSP: 002b:00007f72c9ac2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 665.703127] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f72cc4ff69c [ 665.703141] RDX: 000000000000000f RSI: 00007f72c9ac21e0 RDI: 0000000000000004 [ 665.703154] RBP: 00007f72c9ac21d0 R08: 0000000000000000 R09: 0000000000000000 [ 665.703166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 665.703179] R13: 00007ffc0fad982f R14: 00007f72c9ac2300 R15: 0000000000022000 [ 665.703247] 00:43:45 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x3f000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:45 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x5, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x9, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:43:45 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xa00, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:45 executing program 7: syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x810, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:43:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2) 00:43:57 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x42000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r0}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x6, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:57 executing program 7: syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:57 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x1800, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:57 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x2000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x9b, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x7, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:43:57 executing program 7: syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:43:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x3) 00:43:57 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xf5ffffff, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:10 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x3f00, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x8, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0xf00, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:44:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xfeffffff, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r0}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:44:10 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, 0x0) 00:44:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x4) 00:44:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xffff8000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x9, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:10 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, 0x0) 00:44:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x5) 00:44:10 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x4000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x300, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xfffffff5, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:10 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x4200, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xfffffffe, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:10 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, 0x0) 00:44:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:22 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:22 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x40000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x6) 00:44:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x500, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x1008, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:44:22 executing program 7: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x4000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r0}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:44:22 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x8f, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x600, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:44:23 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x80000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x7) 00:44:23 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x400000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:23 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x4000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:44:35 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) (fail_nth: 1) 00:44:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x8) 00:44:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x700, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:35 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x400001, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r0}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:44:35 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 716.016864] FAULT_INJECTION: forcing a failure. [ 716.016864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.018681] CPU: 1 UID: 0 PID: 9110 Comm: syz-executor.7 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 716.018712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 716.018725] Call Trace: [ 716.018733] [ 716.018742] dump_stack_lvl+0xfa/0x120 [ 716.018779] should_fail_ex+0x4d7/0x5e0 [ 716.018821] _copy_from_user+0x30/0xd0 [ 716.018853] blkdev_common_ioctl+0x1025/0x21d0 [ 716.018888] ? find_held_lock+0x2b/0x80 [ 716.018924] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 716.018953] ? perf_trace_lock_acquire+0xc9/0x700 [ 716.018981] ? lock_is_held_type+0x9e/0x120 [ 716.019010] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 716.019044] ? do_vfs_ioctl+0x125/0x1470 [ 716.019069] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 716.019089] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 716.019126] ? __mutex_unlock_slowpath+0x151/0x750 [ 716.019156] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 716.019194] ? __ww_mutex_check_waiters+0x347/0x3f0 [ 716.019224] ? __fget_files+0x34/0x3b0 [ 716.019250] ? find_held_lock+0x2b/0x80 [ 716.019284] ? __fget_files+0x203/0x3b0 [ 716.019318] blkdev_ioctl+0x1d0/0x6d0 [ 716.019347] ? __pfx_blkdev_ioctl+0x10/0x10 [ 716.019378] ? selinux_file_ioctl+0xb9/0x280 [ 716.019416] ? __pfx_blkdev_ioctl+0x10/0x10 [ 716.019449] __x64_sys_ioctl+0x18f/0x210 [ 716.019475] do_syscall_64+0xbf/0x390 [ 716.019508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.019532] RIP: 0033:0x7f9acaabbb19 [ 716.019550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 716.019571] RSP: 002b:00007f9ac8031188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.019593] RAX: ffffffffffffffda RBX: 00007f9acabcef60 RCX: 00007f9acaabbb19 [ 716.019608] RDX: 0000000020000100 RSI: 0000000000001277 RDI: 0000000000000003 [ 716.019622] RBP: 00007f9ac80311d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.019635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.019649] R13: 00007ffc7e02ff7f R14: 00007f9ac8031300 R15: 0000000000022000 [ 716.019685] 00:44:35 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x80ffff, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x10) 00:44:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x300, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x900, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:35 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:35 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) (fail_nth: 2) 00:44:35 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x1000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x500, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 716.397282] FAULT_INJECTION: forcing a failure. [ 716.397282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.399074] CPU: 1 UID: 0 PID: 9232 Comm: syz-executor.7 Not tainted 6.17.0-rc6-next-20250917 #1 PREEMPT(voluntary) [ 716.399104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 716.399117] Call Trace: [ 716.399126] [ 716.399135] dump_stack_lvl+0xfa/0x120 [ 716.399172] should_fail_ex+0x4d7/0x5e0 [ 716.399215] _copy_to_user+0x32/0xd0 [ 716.399241] simple_read_from_buffer+0xe0/0x180 [ 716.399271] proc_fail_nth_read+0x18a/0x240 [ 716.399305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 716.399338] ? security_file_permission+0x22/0x90 [ 716.399367] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 716.399399] vfs_read+0x1eb/0xc70 [ 716.399435] ? __pfx_vfs_read+0x10/0x10 [ 716.399466] ? lock_release+0xc8/0x290 [ 716.399500] ? __fget_files+0x20d/0x3b0 [ 716.399542] ksys_read+0x121/0x240 [ 716.399569] ? __pfx_ksys_read+0x10/0x10 [ 716.399611] do_syscall_64+0xbf/0x390 [ 716.399644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.399667] RIP: 0033:0x7f9acaa6e69c [ 716.399685] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 716.399707] RSP: 002b:00007f9ac8031170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 716.399728] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f9acaa6e69c [ 716.399744] RDX: 000000000000000f RSI: 00007f9ac80311e0 RDI: 0000000000000004 [ 716.399757] RBP: 00007f9ac80311d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.399770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.399783] R13: 00007ffc7e02ff7f R14: 00007f9ac8031300 R15: 0000000000022000 [ 716.399821] 00:44:48 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x18) 00:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0xb804, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:44:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x600, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r0}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:44:48 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x1004000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:44:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xec0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:48 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x2000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf00, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x700, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:44:48 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:44:48 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x3000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x24) 00:44:48 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:48 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x4000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:44:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x301, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x40000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:45:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x125d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x9b00, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:00 executing program 5: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:45:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2e) 00:45:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x900, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:00 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x6000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:00 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x125e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xc0) 00:45:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xec0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:00 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xa000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x80000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:45:14 executing program 5: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:45:14 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xf0) 00:45:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xc00e, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:14 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x125f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf00, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:14 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x18000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:14 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:14 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1260, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:14 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x20000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x112) 00:45:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x8f00, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:15 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:15 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1261, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:32 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x3f000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x300) 00:45:32 executing program 5: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:45:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:45:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x80000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:32 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1262, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xc00e, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:32 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf0ffff, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x321) 00:45:33 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1263, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:33 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x42000000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:33 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x1000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x408) 00:45:33 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:33 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1264, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x80000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:43 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xf5ffffff, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:45:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1265, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x2000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x480) 00:45:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:43 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:45:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x3000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x500) 00:45:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1267, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:43 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xfeffffff, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf0ffff, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:56 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x4000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:56 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1268, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:45:56 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xffff8000, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x555) 00:45:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x1000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:45:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x600) 00:45:56 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xfffffff5, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:56 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:45:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x2000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x5000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:45:56 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:45:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x700) 00:45:56 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0xfffffffe, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x8100000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:46:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x3000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:07 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:07 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:46:07 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1274, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x6000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x804) 00:46:07 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:07 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:07 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:07 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1276, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x4000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:07 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xa9f) 00:46:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x7000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:07 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1278, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x5000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x9000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0xf000000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:46:19 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1279, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:19 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:46:19 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x1201) 00:46:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:19 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x1800) 00:46:19 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x6000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:19 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2000) 00:46:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x9b000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:19 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:19 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x10000000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:46:32 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:32 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x9effffff, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x7000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:46:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2103) 00:46:32 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x9000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:32 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:32 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xc00e0000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:32 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:46:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2400) 00:46:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x8f000000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:46:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:46:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf0ffffff, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2830) 00:46:43 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2e00) 00:46:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xfffff000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:43 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x3028) 00:46:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0xb8040000, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:46:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xffffff7f, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:54 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:54 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:46:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x9effffff, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x5505) 00:46:54 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xffffff9e, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x8004) 00:46:54 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:54 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:54 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4b47, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:46:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xc00e0000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xfffffff0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:46:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x9f0a) 00:47:05 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:05 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4b49, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:47:05 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xffffffff, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xf0ffffff, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:47:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:47:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xc000) 00:47:05 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:05 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x541b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:47:05 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xfffff000, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:05 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:47:05 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:05 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xf000) [ 868.569058] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 868.572572] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 868.581331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 868.587719] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 868.590447] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 870.605013] Bluetooth: hci6: command tx timeout [ 872.654005] Bluetooth: hci6: command tx timeout [ 874.700923] Bluetooth: hci6: command tx timeout [ 876.749150] Bluetooth: hci6: command tx timeout [ 888.088481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.090065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.150399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.151561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:47:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:47:38 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xffffff7f, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:38 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x5450, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:47:38 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x80000) 00:47:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:47:38 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x5451, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:47:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x200000) 00:47:38 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x2, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:38 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xffffff9e, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:38 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x80ffff) 00:47:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:47:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x3, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:49 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:49 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x5452, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:47:49 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:47:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xc00000) 00:47:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xfffffff0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x4, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:49 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xf0ffff) 00:47:49 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x5460, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:47:49 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0xffffffff, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:47:49 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:47:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x1000000) 00:48:00 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x5, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:48:00 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2000000) 00:48:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:48:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x40049409, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:00 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x40081271, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x40086602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:00 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x2, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x6, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x3000000) 00:48:00 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x40087602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:12 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:12 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x4000000) 00:48:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xf, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:48:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x7, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x3, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:12 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x40101283, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, 0x0, 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:48:12 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x40101286, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:12 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x5000000) 00:48:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x4, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x8, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:12 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:12 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:12 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x40101288, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:12 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:12 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x401070c9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x9, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x6000000) 00:48:24 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x10, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:48:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, 0x0, 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:48:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x5, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:24 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:24 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x401070ca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:24 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:24 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x401070cd, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:24 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x7000000) 00:48:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x6, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:24 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x401870c8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:35 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x9b, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:35 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x7, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x8040000) 00:48:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x300, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:48:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, 0x0, 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:48:35 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x401870cb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x10000000) 00:48:35 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x8, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:36 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:36 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x401870cc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x300, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x9, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x12010000) 00:48:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4b8, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:48:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:48:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x500, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:46 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x401c5820, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:46 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x18000000) 00:48:46 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:47 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4020940d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:47 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x600, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:47 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x8f, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x810, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:48:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:48:59 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80041284, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:59 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x21030000) 00:48:59 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x700, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:59 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:59 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80041285, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:48:59 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:59 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x24000000) 00:48:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x300, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:48:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:48:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x900, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x500, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x27eff851) 00:49:09 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:09 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80081270, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:49:09 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xf00, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:49:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xec0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x600, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:09 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:10 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80081272, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x28300000) 00:49:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x700, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf00, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 990.861032] Bluetooth: hci6: command 0x0406 tx timeout 00:49:20 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2e000000) 00:49:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1008, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:49:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x9b00, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x900, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:20 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80081280, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:49:20 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x51f8ef27) 00:49:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xc00e, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:20 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:20 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80086601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:20 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xec0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:49:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:49:31 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x55050000) 00:49:31 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80087601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:31 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf00, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r0}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:49:31 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80111500, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:31 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x801c581f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x80040000) 00:49:31 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x80000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x8f00, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:31 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80811501, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r0}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:49:43 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xc00e, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x9f0a0000) 00:49:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf0ffff, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb804, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:49:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r1 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r0}}, 0x58) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0x3, r2, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r1, 0xffffffffffffffff, r2], 0x4}, 0x58) 00:49:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xa1ffffff) 00:49:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x1000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:43 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xe4ffffff) 00:49:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x2000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc0101282, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x40000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:49:53 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xfbffffff) 00:49:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:49:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x80000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:53 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x3000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:53 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xfeffffff) 00:49:53 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:53 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:49:53 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:49:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xffff8000) 00:49:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf0ffff, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x4000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:49:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:50:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:50:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x80000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:50:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xfffff000) 00:50:06 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:06 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x5000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x1000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:06 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc030128a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:06 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:06 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc0401289, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xffffff7f) 00:50:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x2000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x6000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:06 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:06 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc040128b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:06 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x3000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:50:19 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:50:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x7000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xffffffa1) 00:50:19 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:19 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc0481273, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:19 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:19 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x9000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:19 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:19 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xffffffe4) 00:50:19 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x4000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x5000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:30 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:50:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:50:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x9b000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:30 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xfffffffb) 00:50:30 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x6000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:30 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:30 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x9effffff, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xfffffffe) 00:50:31 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:31 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:42 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:50:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x8000000000000) 00:50:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:50:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xc00e0000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x7000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:42 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:42 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x9000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x20000000000000) 00:50:42 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf0ffffff, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:42 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:42 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8100000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:50:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0x0, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:50:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xfffff000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:54 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:50:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x8f000000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:54 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x80ffff00000000) 00:50:54 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1094.930290] perf: interrupt took too long (4141 > 4065), lowering kernel.perf_event_max_sample_rate to 48000 [ 1094.931860] perf: interrupt took too long (4141 > 4065), lowering kernel.perf_event_max_sample_rate to 48000 00:50:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xc0000000000000) [ 1094.958471] perf: interrupt took too long (5195 > 5176), lowering kernel.perf_event_max_sample_rate to 38000 [ 1094.960424] perf: interrupt took too long (6512 > 6493), lowering kernel.perf_event_max_sample_rate to 30000 00:50:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x9effffff, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:54 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) [ 1094.999891] perf: interrupt took too long (8163 > 8140), lowering kernel.perf_event_max_sample_rate to 24000 00:50:54 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1095.033740] perf: interrupt took too long (10235 > 10203), lowering kernel.perf_event_max_sample_rate to 19000 [ 1095.089036] perf: interrupt took too long (12800 > 12793), lowering kernel.perf_event_max_sample_rate to 15000 00:50:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xffffff7f, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:50:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xf0ffffffffffff) 00:50:54 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:50:54 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:07 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xc00e0000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xffffff9e, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xf000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:51:07 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:07 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0x0, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:51:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x100000000000000) 00:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xfffffff0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:07 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x200000000000000) 00:51:07 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xf0ffffff, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:07 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:07 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0x0, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:51:07 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x300000000000000) 00:51:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x10000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:51:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:51:18 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:18 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:18 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x400000000000000) 00:51:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xfffff000, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:19 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:19 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:19 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xffffff7f, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x500000000000000) 00:51:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xffffff9e, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:19 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xfffffff0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:32 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x2}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:32 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x600000000000000) 00:51:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:51:32 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x40000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:51:32 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x700000000000000) 00:51:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x3}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:32 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:32 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:32 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:43 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb8040000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:51:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:51:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x4}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x804000000000000) 00:51:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x5}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x1000000000000000) 00:51:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:43 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x1201000000000000) 00:51:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x2}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4000000000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:51:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x6}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x3}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x0, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:51:54 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x1800000000000000) 00:51:54 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:54 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x4}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2103000000000000) 00:51:54 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:51:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x7}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:51:54 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:54 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:51:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2400000000000000) 00:52:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x9}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8000000000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:52:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x0, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:52:04 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x5}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2830000000000000) 00:52:04 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:04 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:04 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0xf}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:04 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:04 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:04 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x2e00000000000000) 00:52:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x6}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:05 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:05 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) [ 1168.024297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1168.027562] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1168.032609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1168.038482] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1168.043173] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1170.125478] Bluetooth: hci0: command tx timeout [ 1172.176221] Bluetooth: hci0: command tx timeout [ 1174.220884] Bluetooth: hci0: command tx timeout [ 1176.268940] Bluetooth: hci0: command tx timeout [ 1187.381307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.382389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.415790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.416639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:52:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x7}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x9b}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:39 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:39 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x51f8ef2700000000) 00:52:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x0, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:52:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:52:39 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:39 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:39 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x5505000000000000) 00:52:39 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x9}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:48 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:52:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:52:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x8004000000000000) 00:52:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:48 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0xf}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x2}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x8f}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x9f0a000000000000) 00:52:48 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x3}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:48 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x2}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xa1ffffff00000000) 00:52:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x4}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:59 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:59 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:59 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:52:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:52:59 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xe4ffffff00000000) 00:52:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x5}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:52:59 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:59 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:52:59 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xfbffffff00000000) 00:52:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x3}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:53:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xfeffffff00000000) 00:53:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x6}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x810000000000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:53:10 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xffffff7f00000000) 00:53:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x4}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:10 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80403d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:53:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:53:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x7}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x5}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:10 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xffffffff00000000) 00:53:10 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca", [0x3]}) 00:53:11 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:11 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffff000) 00:53:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xf00000000000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:53:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x8}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:53:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x6}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:22 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca", [0x300]}) 00:53:22 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:22 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:22 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4, 0xf8, 0x20, 0xff, 0x0, 0x0, 0x401, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x6c7467ff}, 0x40, 0x9, 0x4, 0x3, 0x8000, 0x292ae46f, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0x8, r0, 0x8) rmdir(&(0x7f0000000000)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x1, 0x2, 0x80, 0x7, 0x0, 0x2, 0x40200, 0x1e, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0x4, 0x10000}, 0x40000, 0xd1, 0x9, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3f, 0x0, 0xf5}, 0x0, 0xffffffffffffffff, r0, 0x8) creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x4, 0x1, 0x7, 0x6, 0x0, 0x8000, 0x8010a, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x80, 0x0, 0x6, 0x3, 0x5, 0x5, 0x3f, 0x0, 0x6, 0x0, 0x240}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) 00:53:22 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x5, 0xae, 0x4, 0x0, 0xff, 0x8c0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfc1b, 0x1, @perf_config_ext={0x7, 0x1000000005}, 0x48, 0x2, 0xcc2, 0x6, 0x10001, 0xac32, 0x6, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0x1, r0, 0xe) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x402000, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendfile(r2, r3, &(0x7f00000002c0)=0x8001, 0x6) rmdir(&(0x7f0000000000)='./file0\x00') r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendfile(r0, r5, &(0x7f0000000200)=0x1, 0x7fffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) r6 = signalfd4(r1, &(0x7f0000000340)={[0x8]}, 0x8, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0x5, 0x3f}}, './file0\x00'}) ioctl$FIONCLEX(r5, 0x5450) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r8, &(0x7f0000000240)=[{&(0x7f0000000140)='s', 0x1}], 0x1, 0x498a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)="1c969f0a09ff758dcbc99c78e96e7f1b34010f3f8ad722bf1865ce7cdb8c8131ec760dc12776d6f9e2a1aaa88529c26b4d03ab79bb6ec3bb2359ba21484c9218f4648c387bdccab4c8033955d3c5b409be637f254c21682dece006f872fdb5aa50187377a5d54d3d080d359d25ef4e20a354a088053c3b207590b201bc5bcc02d50903a6796bd0cfbf8bb5c704b051c6e8a83f54602c8b33ce465a75909561bef3f72d1efe54f1", 0xa7}], 0x1, 0x1000, 0x29c8) symlinkat(&(0x7f0000000180)='\x00', r8, &(0x7f00000001c0)='./file0\x00') sendfile(r5, r4, &(0x7f0000000040)=0x7, 0x1000) 00:53:22 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:22 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x7}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:22 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca", [0x3000000]}) 00:53:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x9}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 1253.792473] loop2: detected capacity change from 0 to 264192 [ 1253.835029] loop2: detected capacity change from 0 to 264192 00:53:33 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80000000, 0x8, &(0x7f00000015c0)=[{&(0x7f0000000200)="fd426d32f96bcce7ca0779fb3073e0c9697cca4badaf1063c3dde19ca2e13c07d8239036a639b58dd03189e1377e32b1e9a607b1", 0x34, 0x6}, {&(0x7f0000000240)="9d3d103f373281be5858e7686b8a1d90f5130ece2b654f04e3e3bcff915b6da4f6e367b46b426bf36c28d9fb2ad9c12045d502b26e71dd2970955ad84e152fbdf230e18c15b22ae3845ff64ae0a85ee05ff5d9656a49fdf0c4328aa60dc17b9c411fe0f5a36e0adec31f69019d4c93a119cfd97ba6bf2bba99f7f5a88b060063f3864d1caebff29b73007ec19866f7da3fd7bba49ab2a9b01fb75a9abe99910c5a4197a4f9357abbb800ae994f46a4b94beb74fb05f54d05426e57d5724fae7024382c3dbe5927d1ce4b57afe80833", 0xcf, 0x9}, {&(0x7f0000000400)="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", 0xff, 0x8}, {&(0x7f0000000340)="07ecb101", 0x4, 0x1}, {&(0x7f0000000380)="01b05bbd8389913bdf3ee4101ad81100", 0x10, 0x6}, {&(0x7f0000000500)="b2b14bbc1256753963dc7090161ec6b834dd8e9e188177ffeefc3ff8b6ea7fca2245ed8d6e4ed9366e68b47ff806667aa3e9ce2922fde078e29104ac66443587c31083fdd8c08d15048648ca47a4f94d570f9a277dc32778ebb3427b", 0x5c, 0x33e6}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="39f8bb331c3d5b3f20acdbf7f9d3a2bdbeb941ce28bdbc", 0x17}], 0x4020, &(0x7f0000001680)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@mode={'mode', 0x3d, 0x503}}, {@huge_within_size}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}], [{@dont_appraise}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '#&*^\xad-/R'}}, {@uid_lt={'uid<', 0xee00}}, {@seclabel}]}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000010001, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockname(r0, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000040)=0x80) 00:53:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1000000000000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:53:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x8}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:33 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:33 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:53:33 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca", [0x300000000000000]}) 00:53:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0xf}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:33 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$setregs(0x3, r1, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x14, 0x7c, 0x3, 0x80, 0x0, 0x10001, 0x0, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_config_ext={0x7, 0x400}, 0x50800, 0x6, 0x7ff, 0x5, 0x100000001000000, 0x2da, 0x1000, 0x0, 0xc0000000, 0x0, 0x8}, 0x0, 0xa, r0, 0x3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x20, 0x0, 0x31, 0x1, 0x0, 0x7, 0x40615, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x7, @perf_config_ext={0x8, 0x3}, 0x8000, 0x7, 0x0, 0x1, 0x9, 0x0, 0x87, 0x0, 0xff, 0x0, 0x8}, r1, 0x0, r2, 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x9) 00:53:33 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca", [0x0, 0x3]}) 00:53:33 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:33 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x9b}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x9}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:53:33 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:53:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4000000000000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:53:45 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x30, 0x4, 0x9, 0x0, 0x3, 0x80009, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x205c, 0xfff, 0xff, 0x7, 0x3, 0x1, 0x6, 0x0, 0xe496, 0x0, 0xfffffffffffffffb}, 0x0, 0x10, r0, 0x1) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:53:45 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:45 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca", [0x0, 0x300]}) 00:53:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0xf0}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0xf}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:45 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x8f}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:45 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:45 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1, 0xf7}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x3, 0x0, 0x6, 0x0, 0x3, 0x4, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040)}, 0x1, 0x6, 0x0, 0x6, 0x20, 0x7f, 0x1, 0x0, 0x10000, 0x0, 0x5}, r1, 0x6, r2, 0x8) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r1) 00:53:45 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca", [0x0, 0x3000000]}) 00:53:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x300}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:45 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:45 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0xf0}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:57 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:57 executing program 2: sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x200440f1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:53:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:53:57 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:57 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca", [0x0, 0x300000000000000]}) 00:53:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb804000000000000, &(0x7f0000000740)=ANY=[], 0x1178}, 0x0) 00:53:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x500}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:57 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) r1 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xfd, 0x8, 0x1f, 0x6, 0x0, 0x1, 0x104ca, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0xb}, 0x43800, 0x0, 0x8, 0x5, 0x9, 0x4d2, 0x1, 0x0, 0x7, 0x0, 0xe398}, 0x0, 0x8, 0xffffffffffffffff, 0xa) sendfile(r0, r1, &(0x7f0000000200)=0x100000001, 0x4) 00:53:57 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:57 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/118, 0x6c) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 00:53:57 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = memfd_secret(0x80000) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 00:53:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{0x1, 0x0, 0x600}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 00:53:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x190a484, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000940), &(0x7f0000000980)=@v2={0x2000000, [{0x6f, 0xfe41}, {0xffff, 0x8}]}, 0x14, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = creat(0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(r1, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@version_L}, {@cache_loose}, {@cache_none}, {@msize={'msize', 0x3d, 0x80000001}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '*'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@smackfsdef}]}}) r2 = clone3(&(0x7f00000007c0)={0x8000000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000600)=""/107, 0x6b, &(0x7f0000000680)=""/227, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r1}}, 0x58) r3 = fork() ptrace(0x10, r3) ptrace$setregs(0x3, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") clone3(&(0x7f00000008c0)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x1}, &(0x7f0000000440)=""/28, 0x1c, &(0x7f0000000480)=""/192, &(0x7f0000000840)=[0x0, r2, 0xffffffffffffffff, r3], 0x4}, 0x58) 00:53:57 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x1, 0x6, 0xc, 0x19, "84c30005f46c7bfbc90b7abba4e3b042abd9922a98960f6bc08112b358bf22fdae8d13078876216053ee1b9921059601ea4b93874420b46c7d8885aa29ad3042", "a58d295c811dce304aa9602f2a14ea269139a8932fa192dc1565d80806ffca6f", [0x4, 0x51]}) [ 1289.035194] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1293.964873] Bluetooth: hci0: command 0x0406 tx timeout BUG: memory leak unreferenced object 0xffff8880497881c0 (size 360): comm "syz-executor.7", pid 17042, jiffies 4295944728 hex dump (first 32 bytes): 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... ff ff ff ff ff ff ff ff 60 23 90 88 ff ff ff ff ........`#...... backtrace (crc 8e2cfdba): kmem_cache_alloc_noprof+0x406/0x680 alloc_empty_file+0x58/0x1e0 alloc_file_pseudo+0x12b/0x220 __anon_inode_getfile+0xe1/0x280 __do_sys_perf_event_open+0x18cb/0x2c20 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88800d81bf40 (size 16): comm "syz-executor.7", pid 17042, jiffies 4295944728 hex dump (first 16 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 35cdddfe): kmem_cache_alloc_noprof+0x406/0x680 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 alloc_file_pseudo+0x12b/0x220 __anon_inode_getfile+0xe1/0x280 __do_sys_perf_event_open+0x18cb/0x2c20 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888049788700 (size 360): comm "syz-executor.7", pid 17042, jiffies 4295944736 hex dump (first 32 bytes): 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... ff ff ff ff ff ff ff ff 60 23 90 88 ff ff ff ff ........`#...... backtrace (crc 820fa854): kmem_cache_alloc_noprof+0x406/0x680 alloc_empty_file+0x58/0x1e0 alloc_file_pseudo+0x12b/0x220 __anon_inode_getfile+0xe1/0x280 __do_sys_perf_event_open+0x18cb/0x2c20 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88800d81b1a0 (size 16): comm "syz-executor.7", pid 17042, jiffies 4295944736 hex dump (first 16 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 35cdddfe): kmem_cache_alloc_noprof+0x406/0x680 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 alloc_file_pseudo+0x12b/0x220 __anon_inode_getfile+0xe1/0x280 __do_sys_perf_event_open+0x18cb/0x2c20 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: leak checking failed VM DIAGNOSIS: 00:54:14 Registers: info registers vcpu 0 RAX=00000000004ed72b RBX=0000000000000000 RCX=ffffffff84bd50b7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c9a70 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8663e650 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bd3dae RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e53cc000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdc1dd9af0 CR3=000000001fd40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004124682000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000006b95f7 RBX=0000000000000001 RCX=ffffffff84bd50b7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c9a70 RBP=dffffc0000000000 RSP=ffff888009727e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8663e650 R13=1ffff110012e4fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bd3dae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e54cc000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005635d25035c8 CR3=000000001fcd2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2930363320657a697328203063313838 XMM03=3120646970202c22372e726f74756365 XMM04=202020200a2e2e2e2e2e2e2e2e2e2e4e XMM05=30302066662066662066662066662065 XMM06=203030203030202020200a3a29736574 XMM07=642078656820200a3832373434393539 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000