ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x8000000000000}, 0x0) 09:01:45 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0x0, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:01:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:45 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:01:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:59 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x40030000000000}, 0x0) 09:01:59 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:01:59 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:01:59 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:02:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x100000000000000}, 0x0) 09:02:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:02:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:00 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:02:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:00 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:02:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x200000000000000}, 0x0) 09:02:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:02:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x300000000000000}, 0x0) 09:02:15 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:02:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:02:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x400000000000000}, 0x0) 09:02:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:15 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:02:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x500000000000000}, 0x0) 09:02:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:02:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:02:31 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:02:31 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:02:31 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:02:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x600000000000000}, 0x0) 09:02:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x700000000000000}, 0x0) 09:02:31 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:02:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:31 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:02:31 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:02:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x900000000000000}, 0x0) 09:02:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:31 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:31 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:02:46 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:02:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:46 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:02:46 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:02:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:46 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(0xffffffffffffffff, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:02:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0xf00000000000000}, 0x0) 09:02:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 09:02:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:47 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:02:47 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:02:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:02:47 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(0xffffffffffffffff, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:02:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:02:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 09:03:00 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:03:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:00 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:00 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:03:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:03:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:03:01 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x31, 0x0, 0x8}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:01 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:15 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:15 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:15 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:03:15 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x31, 0xf}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) 09:03:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:03:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x3}, 0x0) 09:03:15 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:03:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:03:15 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:03:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:15 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:30 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:03:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 09:03:30 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:30 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:30 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:30 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:03:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:03:30 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) 09:03:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:03:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:30 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:03:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:30 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:03:44 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:44 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:44 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:03:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x6}, 0x0) 09:03:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x7}, 0x0) 09:03:45 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:45 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:03:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:03:45 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) 09:03:58 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:03:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:03:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:03:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:03:58 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:03:58 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:04:17 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:04:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x9}, 0x0) 09:04:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:04:17 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:04:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 6: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xf}, 0x0) 09:04:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:04:17 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:04:17 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:04:17 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2a}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 6: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x300}, 0x0) 09:04:17 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:32 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:04:32 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:32 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:04:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2a}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:32 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:04:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x500}, 0x0) 09:04:32 executing program 6: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:32 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x600}, 0x0) 09:04:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2a}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:32 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:04:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:04:32 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:32 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:04:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:49 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:04:49 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:04:49 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:04:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:04:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x700}, 0x0) 09:04:49 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:49 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x900}, 0x0) 09:04:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x24}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:04:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 09:04:49 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:04:49 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:05:04 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:05:04 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:04 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:05:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x24}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 09:05:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:05:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:04 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x24}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 09:05:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:05:04 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:05:04 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:05:04 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:20 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:05:20 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:05:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, 0x0, 0x86) 09:05:20 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 09:05:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:20 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:38 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0) 09:05:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 09:05:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:05:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:38 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:05:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:38 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:05:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 09:05:38 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0) 09:05:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0) 09:05:38 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:05:38 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:05:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:05:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 09:05:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0) 09:05:38 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0) 09:05:38 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:05:38 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:05:38 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 09:05:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 09:05:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x13}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:52 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:05:52 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:05:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0) 09:05:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x0) 09:05:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 09:05:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0) 09:05:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x13}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:05:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0) 09:06:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 09:06:09 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x13}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:06:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 09:06:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 09:06:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0) 09:06:09 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:06:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:06:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 09:06:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 09:06:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 09:06:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:06:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 09:06:09 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:06:09 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:09 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 09:06:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 09:06:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 09:06:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 09:06:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 09:06:27 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:06:27 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 09:06:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:06:27 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r1, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 09:06:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 09:06:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:06:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:06:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 09:06:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 09:06:27 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:27 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:06:27 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:06:44 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:44 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:06:44 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:06:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:06:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 09:06:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 09:06:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 09:06:44 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:06:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 09:06:44 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:06:44 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 09:06:44 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) dup2(0xffffffffffffffff, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:44 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:06:44 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:06:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:06:45 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x0, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:00 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:00 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x0, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 09:07:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:00 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:07:00 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:07:00 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x0, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x0, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:17 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:17 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:07:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x0, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 09:07:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:17 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:07:17 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x20, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 09:07:17 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x2) 09:07:18 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) 09:07:18 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) dup2(0xffffffffffffffff, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x3) 09:07:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x0, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:18 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:33 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x0, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:33 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) dup2(0xffffffffffffffff, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x20, r1, 0x1, 0x0, 0x0, {0x2b}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 09:07:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x4) 09:07:33 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:07:33 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x5) 09:07:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x0, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:34 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:34 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x0, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x6) 09:07:34 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:07:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:34 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x20, r1, 0x1, 0x0, 0x0, {0x2e}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 09:07:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:48 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:07:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:07:48 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:48 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x7) 09:07:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x8) 09:07:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:48 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:07:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:07:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:01 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x9) 09:08:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:01 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:01 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:01 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:01 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0xf) 09:08:02 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:02 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:02 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:02 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x300) 09:08:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:02 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x500) 09:08:02 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:02 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:18 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:18 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:18 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:18 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x600) 09:08:18 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x700) 09:08:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x900) 09:08:32 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:32 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:32 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:32 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0xf00) 09:08:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:32 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:32 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:32 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:32 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) 09:08:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x30000) 09:08:33 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:33 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:33 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:49 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280)}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:49 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x34000) 09:08:49 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:49 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:49 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x80000) 09:08:49 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:49 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:08:49 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:08:49 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280)}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:08:49 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:11 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:11 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280)}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:11 executing program 1: mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:09:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x400300) 09:09:11 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:09:11 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 09:09:11 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:09:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x1000000) 09:09:11 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:11 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) (fail_nth: 1) 09:09:11 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:09:11 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 1) 09:09:11 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x0, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x2000000) [ 2574.040617] FAULT_INJECTION: forcing a failure. [ 2574.040617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2574.043198] CPU: 1 PID: 11015 Comm: syz-executor.1 Not tainted 5.10.235 #1 [ 2574.044654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2574.046396] Call Trace: [ 2574.046949] dump_stack+0x107/0x167 [ 2574.047714] should_fail.cold+0x5/0xa [ 2574.048539] _copy_from_user+0x2e/0x1b0 [ 2574.049375] __copy_msghdr_from_user+0x91/0x4b0 [ 2574.050348] ? __ia32_sys_shutdown+0x80/0x80 [ 2574.051269] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2574.052356] ? __lock_acquire+0x1657/0x5b00 [ 2574.053282] ? __lock_acquire+0xbb1/0x5b00 [ 2574.054178] sendmsg_copy_msghdr+0xa1/0x160 [ 2574.055082] ? do_recvmmsg+0x6d0/0x6d0 [ 2574.055896] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2574.056999] ? lock_downgrade+0x6d0/0x6d0 [ 2574.057882] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2574.058981] ___sys_sendmsg+0xc6/0x170 [ 2574.059792] ? sendmsg_copy_msghdr+0x160/0x160 [ 2574.060771] ? __fget_files+0x2cf/0x520 [ 2574.061607] ? lock_downgrade+0x6d0/0x6d0 [ 2574.062475] ? find_held_lock+0x2c/0x110 [ 2574.063335] ? __fget_files+0x2f8/0x520 [ 2574.064169] ? __fget_light+0xea/0x290 [ 2574.064998] __sys_sendmsg+0xe5/0x1b0 [ 2574.065800] ? __sys_sendmsg_sock+0x40/0x40 [ 2574.066702] ? rcu_read_lock_any_held+0x75/0xa0 [ 2574.067670] ? fput_many+0x2f/0x1a0 [ 2574.068439] ? ksys_write+0x1a9/0x260 [ 2574.069231] ? __ia32_sys_read+0xb0/0xb0 [ 2574.070089] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2574.071182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2574.072255] ? trace_hardirqs_on+0x5b/0x180 [ 2574.073178] do_syscall_64+0x33/0x40 [ 2574.073953] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2574.075017] RIP: 0033:0x7f80019feb19 [ 2574.075801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2574.079683] RSP: 002b:00007f7ffef74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2574.081288] RAX: ffffffffffffffda RBX: 00007f8001b11f60 RCX: 00007f80019feb19 [ 2574.082779] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2574.084261] RBP: 00007f7ffef741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.085762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2574.087248] R13: 00007ffc2397b97f R14: 00007f7ffef74300 R15: 0000000000022000 [ 2574.103317] FAULT_INJECTION: forcing a failure. [ 2574.103317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2574.106171] CPU: 1 PID: 11022 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2574.107612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2574.109358] Call Trace: [ 2574.109913] dump_stack+0x107/0x167 [ 2574.110679] should_fail.cold+0x5/0xa [ 2574.111482] _copy_from_user+0x2e/0x1b0 [ 2574.112360] __copy_msghdr_from_user+0x91/0x4b0 [ 2574.113368] ? __ia32_sys_shutdown+0x80/0x80 [ 2574.114407] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2574.115564] ? __lock_acquire+0x1657/0x5b00 [ 2574.116509] ? __lock_acquire+0xbb1/0x5b00 [ 2574.117393] sendmsg_copy_msghdr+0xa1/0x160 [ 2574.118302] ? do_recvmmsg+0x6d0/0x6d0 [ 2574.119125] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2574.120231] ? lock_downgrade+0x6d0/0x6d0 [ 2574.121113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2574.122220] ___sys_sendmsg+0xc6/0x170 [ 2574.123034] ? sendmsg_copy_msghdr+0x160/0x160 [ 2574.123997] ? __fget_files+0x2cf/0x520 [ 2574.124839] ? lock_downgrade+0x6d0/0x6d0 [ 2574.125699] ? find_held_lock+0x2c/0x110 [ 2574.126558] ? __fget_files+0x2f8/0x520 [ 2574.127398] ? __fget_light+0xea/0x290 [ 2574.128218] __sys_sendmsg+0xe5/0x1b0 [ 2574.129042] ? __sys_sendmsg_sock+0x40/0x40 [ 2574.129938] ? rcu_read_lock_any_held+0x75/0xa0 [ 2574.130903] ? fput_many+0x2f/0x1a0 [ 2574.131659] ? ksys_write+0x1a9/0x260 [ 2574.132459] ? __ia32_sys_read+0xb0/0xb0 [ 2574.133314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2574.134410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2574.135475] ? trace_hardirqs_on+0x5b/0x180 [ 2574.136376] do_syscall_64+0x33/0x40 [ 2574.137167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2574.138229] RIP: 0033:0x7f6a897f1b19 [ 2574.139001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2574.142855] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2574.144452] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2574.145942] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2574.147433] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.148922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2574.150413] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 09:09:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) (fail_nth: 1) 09:09:11 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:09:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x3000000) 09:09:11 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x0, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) (fail_nth: 2) 09:09:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 2) [ 2574.364143] FAULT_INJECTION: forcing a failure. [ 2574.364143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2574.366535] CPU: 0 PID: 11042 Comm: syz-executor.1 Not tainted 5.10.235 #1 [ 2574.366691] FAULT_INJECTION: forcing a failure. [ 2574.366691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2574.367912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2574.367921] Call Trace: [ 2574.367946] dump_stack+0x107/0x167 [ 2574.367970] should_fail.cold+0x5/0xa [ 2574.373994] _copy_from_user+0x2e/0x1b0 [ 2574.374780] iovec_from_user+0x141/0x400 [ 2574.375582] __import_iovec+0x67/0x590 [ 2574.376351] ? __ia32_sys_shutdown+0x80/0x80 [ 2574.377257] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2574.378305] import_iovec+0x83/0xb0 [ 2574.379036] sendmsg_copy_msghdr+0x131/0x160 [ 2574.379904] ? do_recvmmsg+0x6d0/0x6d0 [ 2574.380683] ? lock_downgrade+0x6d0/0x6d0 [ 2574.381499] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2574.382528] ___sys_sendmsg+0xc6/0x170 [ 2574.383300] ? sendmsg_copy_msghdr+0x160/0x160 [ 2574.384201] ? __fget_files+0x2cf/0x520 [ 2574.384991] ? lock_downgrade+0x6d0/0x6d0 [ 2574.385802] ? find_held_lock+0x2c/0x110 [ 2574.386604] ? __fget_files+0x2f8/0x520 [ 2574.387388] ? __fget_light+0xea/0x290 [ 2574.388158] __sys_sendmsg+0xe5/0x1b0 [ 2574.388910] ? __sys_sendmsg_sock+0x40/0x40 [ 2574.389761] ? rcu_read_lock_any_held+0x75/0xa0 [ 2574.390671] ? fput_many+0x2f/0x1a0 [ 2574.391382] ? ksys_write+0x1a9/0x260 [ 2574.392132] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2574.393180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2574.394187] ? trace_hardirqs_on+0x5b/0x180 [ 2574.395035] do_syscall_64+0x33/0x40 [ 2574.395763] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2574.396780] RIP: 0033:0x7f80019feb19 [ 2574.397508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2574.401149] RSP: 002b:00007f7ffef74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2574.402618] RAX: ffffffffffffffda RBX: 00007f8001b11f60 RCX: 00007f80019feb19 [ 2574.404010] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2574.405399] RBP: 00007f7ffef741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.406780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2574.408167] R13: 00007ffc2397b97f R14: 00007f7ffef74300 R15: 0000000000022000 [ 2574.409584] CPU: 1 PID: 11043 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2574.411047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2574.412815] Call Trace: [ 2574.413372] dump_stack+0x107/0x167 [ 2574.414141] should_fail.cold+0x5/0xa [ 2574.414945] _copy_from_user+0x2e/0x1b0 [ 2574.415785] iovec_from_user+0x141/0x400 [ 2574.416648] __import_iovec+0x67/0x590 [ 2574.417473] ? __ia32_sys_shutdown+0x80/0x80 [ 2574.418402] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2574.419515] import_iovec+0x83/0xb0 [ 2574.420280] sendmsg_copy_msghdr+0x131/0x160 [ 2574.421215] ? do_recvmmsg+0x6d0/0x6d0 [ 2574.422038] ? lock_downgrade+0x6d0/0x6d0 [ 2574.422906] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2574.424005] ___sys_sendmsg+0xc6/0x170 [ 2574.424829] ? sendmsg_copy_msghdr+0x160/0x160 [ 2574.425792] ? __fget_files+0x2cf/0x520 [ 2574.426624] ? lock_downgrade+0x6d0/0x6d0 [ 2574.427484] ? find_held_lock+0x2c/0x110 [ 2574.428343] ? __fget_files+0x2f8/0x520 [ 2574.429189] ? __fget_light+0xea/0x290 [ 2574.430014] __sys_sendmsg+0xe5/0x1b0 [ 2574.430808] ? __sys_sendmsg_sock+0x40/0x40 [ 2574.431710] ? rcu_read_lock_any_held+0x75/0xa0 [ 2574.432689] ? fput_many+0x2f/0x1a0 [ 2574.433446] ? ksys_write+0x1a9/0x260 [ 2574.434247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2574.435351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2574.436442] ? trace_hardirqs_on+0x5b/0x180 [ 2574.437353] do_syscall_64+0x33/0x40 [ 2574.438138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2574.439214] RIP: 0033:0x7f6a897f1b19 [ 2574.439993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2574.443850] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2574.445455] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2574.446948] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2574.448448] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.449939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2574.451440] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 09:09:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) (fail_nth: 3) 09:09:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 1) 09:09:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 3) 09:09:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x4000000) 09:09:29 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2591.939761] FAULT_INJECTION: forcing a failure. 09:09:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) 09:09:29 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) [ 2591.939761] name failslab, interval 1, probability 0, space 0, times 0 09:09:29 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x0, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2591.943146] CPU: 0 PID: 11049 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2591.944656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2591.946438] Call Trace: [ 2591.947006] dump_stack+0x107/0x167 [ 2591.947784] should_fail.cold+0x5/0xa [ 2591.948590] ? __alloc_skb+0x6d/0x5b0 [ 2591.949420] should_failslab+0x5/0x20 [ 2591.950236] kmem_cache_alloc_node+0x55/0x330 [ 2591.951182] ? lock_downgrade+0x6d0/0x6d0 [ 2591.952065] __alloc_skb+0x6d/0x5b0 [ 2591.952854] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 2591.954023] netlink_sendmsg+0x998/0xe00 [ 2591.954895] ? netlink_unicast+0x800/0x800 [ 2591.955800] ? netlink_unicast+0x800/0x800 [ 2591.956725] __sock_sendmsg+0x154/0x190 [ 2591.957563] ____sys_sendmsg+0x70d/0x870 [ 2591.958438] ? sock_write_iter+0x3d0/0x3d0 [ 2591.959335] ? do_recvmmsg+0x6d0/0x6d0 [ 2591.960172] ? lock_downgrade+0x6d0/0x6d0 [ 2591.961073] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2591.962201] ___sys_sendmsg+0xf3/0x170 [ 2591.963030] ? sendmsg_copy_msghdr+0x160/0x160 [ 2591.964014] ? __fget_files+0x2cf/0x520 [ 2591.964861] ? lock_downgrade+0x6d0/0x6d0 [ 2591.965752] ? find_held_lock+0x2c/0x110 [ 2591.966617] ? __fget_files+0x2f8/0x520 [ 2591.967478] ? __fget_light+0xea/0x290 [ 2591.968308] __sys_sendmsg+0xe5/0x1b0 [ 2591.969134] ? __sys_sendmsg_sock+0x40/0x40 [ 2591.970061] ? rcu_read_lock_any_held+0x75/0xa0 [ 2591.971062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2591.972175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2591.973270] ? trace_hardirqs_on+0x5b/0x180 [ 2591.974191] do_syscall_64+0x33/0x40 [ 2591.974981] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2591.976065] RIP: 0033:0x7f6a897f1b19 [ 2591.976860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2591.980813] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2591.982431] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2591.983958] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2591.985489] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2591.987016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2591.988545] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 [ 2592.010777] FAULT_INJECTION: forcing a failure. [ 2592.010777] name failslab, interval 1, probability 0, space 0, times 0 [ 2592.013276] CPU: 0 PID: 11063 Comm: syz-executor.1 Not tainted 5.10.235 #1 [ 2592.014745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.016492] Call Trace: [ 2592.017092] dump_stack+0x107/0x167 [ 2592.017876] should_fail.cold+0x5/0xa [ 2592.018692] ? __alloc_skb+0x6d/0x5b0 [ 2592.019500] should_failslab+0x5/0x20 [ 2592.020322] kmem_cache_alloc_node+0x55/0x330 [ 2592.021297] ? lock_downgrade+0x6d0/0x6d0 [ 2592.022186] __alloc_skb+0x6d/0x5b0 [ 2592.022965] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 2592.024146] netlink_sendmsg+0x998/0xe00 [ 2592.025038] ? netlink_unicast+0x800/0x800 [ 2592.025948] ? netlink_unicast+0x800/0x800 [ 2592.026850] __sock_sendmsg+0x154/0x190 [ 2592.027695] ____sys_sendmsg+0x70d/0x870 [ 2592.028565] ? sock_write_iter+0x3d0/0x3d0 [ 2592.029488] ? do_recvmmsg+0x6d0/0x6d0 [ 2592.030315] ? lock_downgrade+0x6d0/0x6d0 [ 2592.031196] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2592.032316] ___sys_sendmsg+0xf3/0x170 [ 2592.033162] ? sendmsg_copy_msghdr+0x160/0x160 [ 2592.034139] ? __fget_files+0x2cf/0x520 [ 2592.034988] ? lock_downgrade+0x6d0/0x6d0 [ 2592.035872] ? find_held_lock+0x2c/0x110 [ 2592.036752] ? __fget_files+0x2f8/0x520 [ 2592.037609] ? __fget_light+0xea/0x290 [ 2592.038445] __sys_sendmsg+0xe5/0x1b0 [ 2592.039263] ? __sys_sendmsg_sock+0x40/0x40 [ 2592.040184] ? rcu_read_lock_any_held+0x75/0xa0 [ 2592.041209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2592.042331] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2592.043421] ? trace_hardirqs_on+0x5b/0x180 [ 2592.044342] do_syscall_64+0x33/0x40 [ 2592.045152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2592.046242] RIP: 0033:0x7f80019feb19 [ 2592.047036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2592.050979] RSP: 002b:00007f7ffef74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2592.052600] RAX: ffffffffffffffda RBX: 00007f8001b11f60 RCX: 00007f80019feb19 [ 2592.054131] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2592.055650] RBP: 00007f7ffef741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2592.057178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2592.058695] R13: 00007ffc2397b97f R14: 00007f7ffef74300 R15: 0000000000022000 [ 2592.080210] FAULT_INJECTION: forcing a failure. [ 2592.080210] name failslab, interval 1, probability 0, space 0, times 0 [ 2592.082852] CPU: 0 PID: 11064 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2592.084307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.086063] Call Trace: [ 2592.086616] dump_stack+0x107/0x167 [ 2592.087373] should_fail.cold+0x5/0xa [ 2592.088172] ? getname_flags.part.0+0x50/0x4f0 [ 2592.089147] should_failslab+0x5/0x20 [ 2592.089950] kmem_cache_alloc+0x5b/0x310 [ 2592.090802] getname_flags.part.0+0x50/0x4f0 [ 2592.091722] getname_flags+0x9a/0xe0 [ 2592.092501] do_mkdirat+0x8f/0x2b0 [ 2592.093268] ? user_path_create+0xf0/0xf0 [ 2592.094152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2592.095253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2592.096337] do_syscall_64+0x33/0x40 [ 2592.097142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2592.098220] RIP: 0033:0x7fce19a4eb19 [ 2592.099014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2592.102879] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2592.104481] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2592.105979] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2592.107478] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2592.108992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2592.110485] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:09:45 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:09:45 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x0, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x5000000) 09:09:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="2f770000000000000000fb0000000800010000000000d68403cd69bbde6087959a2c5bcbc2a38045b8cbfaab4205d89fbe4f2bb87a45bbcd0cc8829c22bb5d7bd3eeec60cec542be021cbbc3c419db1a6673626826f45a73e6ee5cbce16723a416eb5cb66fc1110a125fe6bc05b270ff6832ce5b2b83ff98eaaabe8e725a50aa66adb5d22143169f62d86425fde44b757e15e22c695d5ed02b847167a41028695a2e5a4dd2608c4e79de1cf8e5cdda74de6bf04703c27d"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20040c94) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x74, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x74}, 0x1, 0x0, 0x0, 0x40011}, 0x8015) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) 09:09:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 4) 09:09:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 2) 09:09:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) (fail_nth: 4) 09:09:45 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2607.928607] FAULT_INJECTION: forcing a failure. [ 2607.928607] name failslab, interval 1, probability 0, space 0, times 0 [ 2607.931018] CPU: 1 PID: 11085 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2607.932480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.934264] Call Trace: [ 2607.934827] dump_stack+0x107/0x167 [ 2607.935597] should_fail.cold+0x5/0xa [ 2607.936417] ? create_object.isra.0+0x3a/0xa20 [ 2607.937390] should_failslab+0x5/0x20 [ 2607.938211] kmem_cache_alloc+0x5b/0x310 [ 2607.939078] ? find_held_lock+0x2c/0x110 [ 2607.939936] create_object.isra.0+0x3a/0xa20 [ 2607.940890] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2607.941980] kmem_cache_alloc_node+0x169/0x330 [ 2607.942778] FAULT_INJECTION: forcing a failure. [ 2607.942778] name failslab, interval 1, probability 0, space 0, times 0 [ 2607.942946] ? lock_downgrade+0x6d0/0x6d0 [ 2607.942972] __alloc_skb+0x6d/0x5b0 [ 2607.946923] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 2607.948096] netlink_sendmsg+0x998/0xe00 [ 2607.948969] ? netlink_unicast+0x800/0x800 [ 2607.949869] ? netlink_unicast+0x800/0x800 [ 2607.950775] __sock_sendmsg+0x154/0x190 [ 2607.951615] ____sys_sendmsg+0x70d/0x870 [ 2607.952478] ? sock_write_iter+0x3d0/0x3d0 [ 2607.953377] ? do_recvmmsg+0x6d0/0x6d0 [ 2607.954207] ? lock_downgrade+0x6d0/0x6d0 [ 2607.955091] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2607.956196] ___sys_sendmsg+0xf3/0x170 [ 2607.957027] ? sendmsg_copy_msghdr+0x160/0x160 [ 2607.957997] ? __fget_files+0x2cf/0x520 [ 2607.958841] ? lock_downgrade+0x6d0/0x6d0 [ 2607.959714] ? find_held_lock+0x2c/0x110 [ 2607.960569] ? __fget_files+0x2f8/0x520 [ 2607.961415] ? __fget_light+0xea/0x290 [ 2607.962239] __sys_sendmsg+0xe5/0x1b0 [ 2607.963048] ? __sys_sendmsg_sock+0x40/0x40 [ 2607.963953] ? rcu_read_lock_any_held+0x75/0xa0 [ 2607.964979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2607.966090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2607.967174] ? trace_hardirqs_on+0x5b/0x180 [ 2607.968093] do_syscall_64+0x33/0x40 [ 2607.968884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.969960] RIP: 0033:0x7f6a897f1b19 [ 2607.970747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.974647] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2607.976250] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2607.977761] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2607.979263] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.980769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2607.982274] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 [ 2607.983830] CPU: 0 PID: 11088 Comm: syz-executor.1 Not tainted 5.10.235 #1 [ 2607.985316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.987072] Call Trace: [ 2607.987632] dump_stack+0x107/0x167 [ 2607.988397] should_fail.cold+0x5/0xa [ 2607.989219] ? create_object.isra.0+0x3a/0xa20 [ 2607.990205] should_failslab+0x5/0x20 [ 2607.991014] kmem_cache_alloc+0x5b/0x310 [ 2607.991876] ? find_held_lock+0x2c/0x110 [ 2607.992743] create_object.isra.0+0x3a/0xa20 [ 2607.993684] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2607.994770] kmem_cache_alloc_node+0x169/0x330 [ 2607.995742] ? lock_downgrade+0x6d0/0x6d0 [ 2607.996622] __alloc_skb+0x6d/0x5b0 [ 2607.997419] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 2607.998581] netlink_sendmsg+0x998/0xe00 [ 2607.999448] ? netlink_unicast+0x800/0x800 [ 2608.000342] ? netlink_unicast+0x800/0x800 [ 2608.001249] __sock_sendmsg+0x154/0x190 [ 2608.002082] ____sys_sendmsg+0x70d/0x870 [ 2608.002954] ? sock_write_iter+0x3d0/0x3d0 [ 2608.003852] ? do_recvmmsg+0x6d0/0x6d0 [ 2608.004683] ? lock_downgrade+0x6d0/0x6d0 [ 2608.005572] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2608.006689] ___sys_sendmsg+0xf3/0x170 [ 2608.007512] ? sendmsg_copy_msghdr+0x160/0x160 [ 2608.008478] ? __fget_files+0x2cf/0x520 [ 2608.009325] ? lock_downgrade+0x6d0/0x6d0 [ 2608.010200] ? find_held_lock+0x2c/0x110 [ 2608.011050] ? __fget_files+0x2f8/0x520 [ 2608.011893] ? __fget_light+0xea/0x290 [ 2608.012722] __sys_sendmsg+0xe5/0x1b0 [ 2608.013535] ? __sys_sendmsg_sock+0x40/0x40 [ 2608.014449] ? rcu_read_lock_any_held+0x75/0xa0 [ 2608.015441] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2608.016544] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2608.017636] ? trace_hardirqs_on+0x5b/0x180 [ 2608.018544] do_syscall_64+0x33/0x40 [ 2608.019337] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2608.020415] RIP: 0033:0x7f80019feb19 [ 2608.021219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2608.025130] RSP: 002b:00007f7ffef74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2608.026731] RAX: ffffffffffffffda RBX: 00007f8001b11f60 RCX: 00007f80019feb19 [ 2608.028229] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2608.029756] RBP: 00007f7ffef741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2608.031258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2608.032755] R13: 00007ffc2397b97f R14: 00007f7ffef74300 R15: 0000000000022000 [ 2608.066257] FAULT_INJECTION: forcing a failure. [ 2608.066257] name failslab, interval 1, probability 0, space 0, times 0 [ 2608.068702] CPU: 0 PID: 11090 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2608.070207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2608.071961] Call Trace: [ 2608.072516] dump_stack+0x107/0x167 [ 2608.073296] should_fail.cold+0x5/0xa [ 2608.074105] ? create_object.isra.0+0x3a/0xa20 [ 2608.075074] should_failslab+0x5/0x20 [ 2608.075876] kmem_cache_alloc+0x5b/0x310 [ 2608.076734] ? ksys_write+0x21a/0x260 [ 2608.077545] create_object.isra.0+0x3a/0xa20 [ 2608.078463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2608.079534] kmem_cache_alloc+0x159/0x310 [ 2608.080394] getname_flags.part.0+0x50/0x4f0 [ 2608.081329] getname_flags+0x9a/0xe0 [ 2608.082110] do_mkdirat+0x8f/0x2b0 [ 2608.082854] ? user_path_create+0xf0/0xf0 [ 2608.083731] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2608.084835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2608.085929] do_syscall_64+0x33/0x40 [ 2608.086714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2608.087792] RIP: 0033:0x7fce19a4eb19 [ 2608.088568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2608.092450] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2608.094068] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2608.095566] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2608.097077] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2608.098572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2608.100104] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:09:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 5) 09:09:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x6000000) 09:09:45 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:09:45 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) [ 2608.201627] FAULT_INJECTION: forcing a failure. [ 2608.201627] name failslab, interval 1, probability 0, space 0, times 0 [ 2608.204131] CPU: 1 PID: 11101 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2608.205598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2608.207353] Call Trace: [ 2608.207911] dump_stack+0x107/0x167 [ 2608.208664] should_fail.cold+0x5/0xa [ 2608.209464] should_failslab+0x5/0x20 [ 2608.210250] __kmalloc_node_track_caller+0x74/0x3b0 [ 2608.211286] ? netlink_sendmsg+0x998/0xe00 [ 2608.212167] ? lock_downgrade+0x6d0/0x6d0 [ 2608.213051] __alloc_skb+0xb1/0x5b0 [ 2608.213825] netlink_sendmsg+0x998/0xe00 [ 2608.214670] ? netlink_unicast+0x800/0x800 [ 2608.215566] ? netlink_unicast+0x800/0x800 [ 2608.216444] __sock_sendmsg+0x154/0x190 [ 2608.217286] ____sys_sendmsg+0x70d/0x870 [ 2608.218136] ? sock_write_iter+0x3d0/0x3d0 [ 2608.219020] ? do_recvmmsg+0x6d0/0x6d0 [ 2608.219839] ? lock_downgrade+0x6d0/0x6d0 [ 2608.220707] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2608.221812] ___sys_sendmsg+0xf3/0x170 [ 2608.222631] ? sendmsg_copy_msghdr+0x160/0x160 [ 2608.223600] ? __fget_files+0x2cf/0x520 [ 2608.224432] ? lock_downgrade+0x6d0/0x6d0 [ 2608.225314] ? find_held_lock+0x2c/0x110 [ 2608.226178] ? __fget_files+0x2f8/0x520 [ 2608.227015] ? __fget_light+0xea/0x290 [ 2608.227832] __sys_sendmsg+0xe5/0x1b0 [ 2608.228626] ? __sys_sendmsg_sock+0x40/0x40 [ 2608.229536] ? rcu_read_lock_any_held+0x75/0xa0 [ 2608.230522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2608.231620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2608.232690] ? trace_hardirqs_on+0x5b/0x180 [ 2608.233679] do_syscall_64+0x33/0x40 [ 2608.234604] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2608.235885] RIP: 0033:0x7f6a897f1b19 [ 2608.236848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2608.241714] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2608.243320] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2608.244825] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2608.246340] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2608.247853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2608.249338] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 09:09:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 3) 09:09:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) (fail_nth: 5) 09:09:45 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x0, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:09:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x7000000) 09:09:45 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1400, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000015855e0d36393e7dc49ad45f8da46547447815c917a83b244327d26628520943ace1dfefbacdce1452a588500390d0365b31dbd182e1abe42a010514b35bfbd0b0af87c271588cc597e9fb5583ffa84f629e3ee13f42dad09d045d98d7a0eeb444617d00904427819b6aa05ad01614c52c1e2e", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) [ 2608.368440] FAULT_INJECTION: forcing a failure. [ 2608.368440] name failslab, interval 1, probability 0, space 0, times 0 [ 2608.370967] CPU: 0 PID: 11116 Comm: syz-executor.1 Not tainted 5.10.235 #1 [ 2608.372429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2608.374182] Call Trace: [ 2608.374744] dump_stack+0x107/0x167 [ 2608.375518] should_fail.cold+0x5/0xa [ 2608.376332] should_failslab+0x5/0x20 [ 2608.377154] __kmalloc_node_track_caller+0x74/0x3b0 [ 2608.378215] ? netlink_sendmsg+0x998/0xe00 [ 2608.379114] ? lock_downgrade+0x6d0/0x6d0 [ 2608.379995] __alloc_skb+0xb1/0x5b0 [ 2608.380771] netlink_sendmsg+0x998/0xe00 [ 2608.381641] ? netlink_unicast+0x800/0x800 [ 2608.382545] ? netlink_unicast+0x800/0x800 [ 2608.383441] __sock_sendmsg+0x154/0x190 [ 2608.384288] ____sys_sendmsg+0x70d/0x870 [ 2608.385161] ? sock_write_iter+0x3d0/0x3d0 [ 2608.386053] ? do_recvmmsg+0x6d0/0x6d0 [ 2608.386892] ? lock_downgrade+0x6d0/0x6d0 [ 2608.387792] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2608.388924] ___sys_sendmsg+0xf3/0x170 [ 2608.389742] ? sendmsg_copy_msghdr+0x160/0x160 [ 2608.390727] ? __fget_files+0x2cf/0x520 [ 2608.391577] ? lock_downgrade+0x6d0/0x6d0 [ 2608.392455] ? find_held_lock+0x2c/0x110 [ 2608.393328] ? __fget_files+0x2f8/0x520 [ 2608.394174] ? __fget_light+0xea/0x290 [ 2608.395005] __sys_sendmsg+0xe5/0x1b0 [ 2608.395810] ? __sys_sendmsg_sock+0x40/0x40 [ 2608.396725] ? rcu_read_lock_any_held+0x75/0xa0 [ 2608.397733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2608.398837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2608.399929] ? trace_hardirqs_on+0x5b/0x180 [ 2608.400845] do_syscall_64+0x33/0x40 [ 2608.401646] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2608.402725] RIP: 0033:0x7f80019feb19 [ 2608.403506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2608.407389] RSP: 002b:00007f7ffef74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2608.409022] RAX: ffffffffffffffda RBX: 00007f8001b11f60 RCX: 00007f80019feb19 [ 2608.410536] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2608.412056] RBP: 00007f7ffef741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2608.413578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2608.415096] R13: 00007ffc2397b97f R14: 00007f7ffef74300 R15: 0000000000022000 09:09:45 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:09:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x9000000) [ 2608.427397] FAULT_INJECTION: forcing a failure. [ 2608.427397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2608.430202] CPU: 1 PID: 11112 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2608.431679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2608.433495] Call Trace: [ 2608.434092] dump_stack+0x107/0x167 [ 2608.434890] should_fail.cold+0x5/0xa [ 2608.435722] strncpy_from_user+0x34/0x470 [ 2608.436626] getname_flags.part.0+0x95/0x4f0 [ 2608.437573] getname_flags+0x9a/0xe0 [ 2608.438373] do_mkdirat+0x8f/0x2b0 [ 2608.439142] ? user_path_create+0xf0/0xf0 [ 2608.440043] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2608.441176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2608.442279] do_syscall_64+0x33/0x40 [ 2608.443068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2608.444173] RIP: 0033:0x7fce19a4eb19 [ 2608.444966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2608.448848] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2608.450461] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2608.451969] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2608.453491] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2608.455006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2608.456514] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:10:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 4) 09:10:02 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:02 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:10:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0xf000000) 09:10:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 6) 09:10:02 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x0, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) (fail_nth: 6) 09:10:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r2) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r4, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x4841) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0d9a07b0d40a62c95256e2f2d8757cadf66e8795df8d60cca818c2534e1deaa64a528270bf326f18af0e4bcd79742c448d0f", @ANYRES16=r4, @ANYBLOB="080025bd7000fcdbdf25020000000800070064010100"], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x5c, r7, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_CSMA_RETRIES={0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xc0}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xd8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r12, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) [ 2625.278660] FAULT_INJECTION: forcing a failure. [ 2625.278660] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.281110] CPU: 1 PID: 11133 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2625.282542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.284247] Call Trace: [ 2625.284793] dump_stack+0x107/0x167 [ 2625.285566] should_fail.cold+0x5/0xa [ 2625.286343] ? create_object.isra.0+0x3a/0xa20 [ 2625.287291] should_failslab+0x5/0x20 [ 2625.288070] kmem_cache_alloc+0x5b/0x310 [ 2625.288905] create_object.isra.0+0x3a/0xa20 [ 2625.289823] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2625.290888] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2625.291938] ? netlink_sendmsg+0x998/0xe00 [ 2625.292842] ? lock_downgrade+0x6d0/0x6d0 [ 2625.293727] __alloc_skb+0xb1/0x5b0 [ 2625.294486] netlink_sendmsg+0x998/0xe00 [ 2625.295350] ? netlink_unicast+0x800/0x800 [ 2625.296243] ? netlink_unicast+0x800/0x800 [ 2625.297126] __sock_sendmsg+0x154/0x190 [ 2625.297954] ____sys_sendmsg+0x70d/0x870 [ 2625.298070] FAULT_INJECTION: forcing a failure. [ 2625.298070] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2625.298842] ? sock_write_iter+0x3d0/0x3d0 [ 2625.298859] ? do_recvmmsg+0x6d0/0x6d0 [ 2625.298880] ? mark_lock+0xf5/0x2df0 [ 2625.302878] ? lock_downgrade+0x6d0/0x6d0 [ 2625.303794] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2625.304890] ___sys_sendmsg+0xf3/0x170 [ 2625.305721] ? sendmsg_copy_msghdr+0x160/0x160 [ 2625.306753] ? __fget_files+0x2cf/0x520 [ 2625.307591] ? lock_downgrade+0x6d0/0x6d0 [ 2625.308453] ? find_held_lock+0x2c/0x110 [ 2625.309304] ? __fget_files+0x2f8/0x520 [ 2625.310170] ? __fget_light+0xea/0x290 [ 2625.311016] __sys_sendmsg+0xe5/0x1b0 [ 2625.311795] ? __sys_sendmsg_sock+0x40/0x40 [ 2625.312694] ? rcu_read_lock_any_held+0x75/0xa0 [ 2625.313668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.314739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.315790] ? trace_hardirqs_on+0x5b/0x180 [ 2625.316675] do_syscall_64+0x33/0x40 [ 2625.317449] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2625.318507] RIP: 0033:0x7f6a897f1b19 [ 2625.319263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.323024] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2625.324598] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2625.326099] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2625.327683] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.329220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2625.330737] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 [ 2625.332222] CPU: 0 PID: 11143 Comm: syz-executor.1 Not tainted 5.10.235 #1 [ 2625.333168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.334279] Call Trace: [ 2625.334651] dump_stack+0x107/0x167 [ 2625.335143] should_fail.cold+0x5/0xa [ 2625.335653] __alloc_pages_nodemask+0x182/0x600 [ 2625.336269] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2625.337075] ? __kmalloc_node_track_caller+0x393/0x3b0 [ 2625.337796] alloc_pages_current+0x187/0x280 [ 2625.338380] allocate_slab+0x26f/0x380 [ 2625.338910] ___slab_alloc+0x470/0x700 [ 2625.339438] ? netlink_sendmsg+0x998/0xe00 [ 2625.340004] ? __kmalloc_node_track_caller+0x393/0x3b0 [ 2625.340700] __kmalloc_node_track_caller+0x393/0x3b0 [ 2625.341371] ? netlink_sendmsg+0x998/0xe00 [ 2625.341931] __alloc_skb+0xb1/0x5b0 [ 2625.342415] netlink_sendmsg+0x998/0xe00 [ 2625.342949] ? netlink_unicast+0x800/0x800 [ 2625.343530] ? netlink_unicast+0x800/0x800 [ 2625.344082] __sock_sendmsg+0x154/0x190 [ 2625.344604] ____sys_sendmsg+0x70d/0x870 [ 2625.345144] ? sock_write_iter+0x3d0/0x3d0 [ 2625.345694] ? do_recvmmsg+0x6d0/0x6d0 [ 2625.346210] ? lock_downgrade+0x6d0/0x6d0 [ 2625.346772] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2625.347457] ___sys_sendmsg+0xf3/0x170 [ 2625.347968] ? sendmsg_copy_msghdr+0x160/0x160 [ 2625.348570] ? __fget_files+0x2cf/0x520 [ 2625.349096] ? lock_downgrade+0x6d0/0x6d0 [ 2625.349647] ? find_held_lock+0x2c/0x110 [ 2625.350199] ? __fget_files+0x2f8/0x520 [ 2625.350727] ? __fget_light+0xea/0x290 [ 2625.351244] __sys_sendmsg+0xe5/0x1b0 [ 2625.351743] ? __sys_sendmsg_sock+0x40/0x40 [ 2625.352311] ? rcu_read_lock_any_held+0x75/0xa0 [ 2625.352939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.353638] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.354312] ? trace_hardirqs_on+0x5b/0x180 [ 2625.354901] do_syscall_64+0x33/0x40 [ 2625.355395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2625.356082] RIP: 0033:0x7f80019feb19 [ 2625.356571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.358980] RSP: 002b:00007f7ffef74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2625.359982] RAX: ffffffffffffffda RBX: 00007f8001b11f60 RCX: 00007f80019feb19 [ 2625.360929] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2625.361871] RBP: 00007f7ffef741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.362803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2625.363740] R13: 00007ffc2397b97f R14: 00007f7ffef74300 R15: 0000000000022000 [ 2625.380107] blktrace: Concurrent blktraces are not allowed on loop12 09:10:02 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x0, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:02 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) [ 2625.410289] FAULT_INJECTION: forcing a failure. [ 2625.410289] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.411971] CPU: 0 PID: 11145 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2625.412874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.413950] Call Trace: [ 2625.414290] dump_stack+0x107/0x167 [ 2625.414762] should_fail.cold+0x5/0xa [ 2625.415252] ? __d_alloc+0x2a/0x990 [ 2625.415719] should_failslab+0x5/0x20 [ 2625.416208] kmem_cache_alloc+0x5b/0x310 [ 2625.416740] __d_alloc+0x2a/0x990 [ 2625.417189] ? dput+0x1ae/0xcd0 [ 2625.417619] d_alloc+0x46/0x1c0 [ 2625.418059] __lookup_hash+0xcc/0x190 [ 2625.418554] filename_create+0x186/0x4a0 [ 2625.419081] ? filename_parentat+0x570/0x570 [ 2625.419639] ? getname_flags.part.0+0x1dd/0x4f0 [ 2625.420256] do_mkdirat+0xa2/0x2b0 [ 2625.420716] ? user_path_create+0xf0/0xf0 [ 2625.421265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.421947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.422612] do_syscall_64+0x33/0x40 [ 2625.423107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2625.423761] RIP: 0033:0x7fce19a4eb19 [ 2625.424235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.426620] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2625.427600] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2625.428525] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2625.429449] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.430371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2625.431301] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:10:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0xffffff7f) 09:10:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 7) 09:10:02 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) (fail_nth: 7) [ 2625.517242] blktrace: Concurrent blktraces are not allowed on loop12 [ 2625.517776] FAULT_INJECTION: forcing a failure. [ 2625.517776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2625.520592] CPU: 1 PID: 11158 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2625.522059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.523830] Call Trace: [ 2625.524393] dump_stack+0x107/0x167 [ 2625.525166] should_fail.cold+0x5/0xa [ 2625.525971] _copy_from_iter_full+0x201/0xa60 [ 2625.526923] ? __virt_addr_valid+0x170/0x5d0 [ 2625.527857] ? __check_object_size+0x319/0x440 [ 2625.528830] netlink_sendmsg+0x879/0xe00 [ 2625.529712] ? netlink_unicast+0x800/0x800 [ 2625.530616] ? netlink_unicast+0x800/0x800 [ 2625.531509] __sock_sendmsg+0x154/0x190 [ 2625.532345] ____sys_sendmsg+0x70d/0x870 [ 2625.533215] ? sock_write_iter+0x3d0/0x3d0 [ 2625.534105] ? do_recvmmsg+0x6d0/0x6d0 [ 2625.534927] ? lock_downgrade+0x6d0/0x6d0 [ 2625.535806] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2625.536916] ___sys_sendmsg+0xf3/0x170 [ 2625.537747] ? sendmsg_copy_msghdr+0x160/0x160 [ 2625.538710] ? __fget_files+0x2cf/0x520 [ 2625.539549] ? lock_downgrade+0x6d0/0x6d0 [ 2625.540429] ? find_held_lock+0x2c/0x110 [ 2625.541302] ? __fget_files+0x2f8/0x520 [ 2625.542149] ? __fget_light+0xea/0x290 [ 2625.542973] __sys_sendmsg+0xe5/0x1b0 [ 2625.543770] ? __sys_sendmsg_sock+0x40/0x40 [ 2625.544682] ? rcu_read_lock_any_held+0x75/0xa0 [ 2625.545695] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.546805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.547885] ? trace_hardirqs_on+0x5b/0x180 [ 2625.548709] FAULT_INJECTION: forcing a failure. [ 2625.548709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2625.548788] do_syscall_64+0x33/0x40 [ 2625.550948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2625.552027] RIP: 0033:0x7f6a897f1b19 [ 2625.552808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.556692] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2625.558301] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2625.559801] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2625.561323] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.562824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2625.564324] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 [ 2625.565852] CPU: 0 PID: 11164 Comm: syz-executor.1 Not tainted 5.10.235 #1 [ 2625.566679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.567668] Call Trace: [ 2625.567993] dump_stack+0x107/0x167 [ 2625.568427] should_fail.cold+0x5/0xa [ 2625.568881] _copy_from_iter_full+0x201/0xa60 [ 2625.569420] ? __virt_addr_valid+0x170/0x5d0 [ 2625.569943] ? __check_object_size+0x319/0x440 [ 2625.570485] netlink_sendmsg+0x879/0xe00 [ 2625.570975] ? netlink_unicast+0x800/0x800 [ 2625.571477] ? netlink_unicast+0x800/0x800 [ 2625.571978] __sock_sendmsg+0x154/0x190 [ 2625.572446] ____sys_sendmsg+0x70d/0x870 [ 2625.572925] ? sock_write_iter+0x3d0/0x3d0 [ 2625.573438] ? do_recvmmsg+0x6d0/0x6d0 [ 2625.573898] ? lock_downgrade+0x6d0/0x6d0 [ 2625.574388] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2625.575004] ___sys_sendmsg+0xf3/0x170 [ 2625.575462] ? sendmsg_copy_msghdr+0x160/0x160 [ 2625.576000] ? __fget_files+0x2cf/0x520 [ 2625.576459] ? lock_downgrade+0x6d0/0x6d0 [ 2625.576943] ? find_held_lock+0x2c/0x110 [ 2625.577432] ? __fget_files+0x2f8/0x520 [ 2625.577901] ? __fget_light+0xea/0x290 [ 2625.578359] __sys_sendmsg+0xe5/0x1b0 [ 2625.578801] ? __sys_sendmsg_sock+0x40/0x40 [ 2625.579305] ? rcu_read_lock_any_held+0x75/0xa0 [ 2625.579853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.580467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.581073] ? trace_hardirqs_on+0x5b/0x180 [ 2625.581586] do_syscall_64+0x33/0x40 [ 2625.582026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2625.582624] RIP: 0033:0x7f80019feb19 [ 2625.583058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.585223] RSP: 002b:00007f7ffef74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2625.586109] RAX: ffffffffffffffda RBX: 00007f8001b11f60 RCX: 00007f80019feb19 [ 2625.586940] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2625.587772] RBP: 00007f7ffef741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.588604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2625.589449] R13: 00007ffc2397b97f R14: 00007f7ffef74300 R15: 0000000000022000 09:10:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) 09:10:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) (fail_nth: 8) 09:10:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 8) 09:10:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x3000000000000) 09:10:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 5) 09:10:19 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x0, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:19 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:19 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) [ 2641.800030] FAULT_INJECTION: forcing a failure. [ 2641.800030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2641.802543] CPU: 0 PID: 11179 Comm: syz-executor.1 Not tainted 5.10.235 #1 [ 2641.803357] blktrace: Concurrent blktraces are not allowed on loop12 [ 2641.804003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2641.804009] Call Trace: [ 2641.804034] dump_stack+0x107/0x167 [ 2641.804053] should_fail.cold+0x5/0xa [ 2641.804076] _copy_from_iter_full+0x201/0xa60 [ 2641.804097] ? __virt_addr_valid+0x170/0x5d0 [ 2641.804116] ? __check_object_size+0x319/0x440 [ 2641.804139] netlink_sendmsg+0x879/0xe00 [ 2641.804161] ? netlink_unicast+0x800/0x800 [ 2641.804187] ? netlink_unicast+0x800/0x800 [ 2641.804206] __sock_sendmsg+0x154/0x190 [ 2641.804224] ____sys_sendmsg+0x70d/0x870 [ 2641.804244] ? sock_write_iter+0x3d0/0x3d0 [ 2641.804260] ? do_recvmmsg+0x6d0/0x6d0 [ 2641.804282] ? lock_downgrade+0x6d0/0x6d0 [ 2641.804302] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2641.804325] ___sys_sendmsg+0xf3/0x170 [ 2641.804345] ? sendmsg_copy_msghdr+0x160/0x160 [ 2641.804366] ? __fget_files+0x2cf/0x520 [ 2641.804390] ? lock_downgrade+0x6d0/0x6d0 [ 2641.823930] ? find_held_lock+0x2c/0x110 [ 2641.824816] ? __fget_files+0x2f8/0x520 [ 2641.825690] ? __fget_light+0xea/0x290 [ 2641.826533] __sys_sendmsg+0xe5/0x1b0 [ 2641.827352] ? __sys_sendmsg_sock+0x40/0x40 [ 2641.828274] ? rcu_read_lock_any_held+0x75/0xa0 [ 2641.829284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2641.830422] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2641.831523] ? trace_hardirqs_on+0x5b/0x180 [ 2641.832450] do_syscall_64+0x33/0x40 [ 2641.833250] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2641.834372] RIP: 0033:0x7f80019feb19 [ 2641.835168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2641.839090] RSP: 002b:00007f7ffef74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2641.840745] RAX: ffffffffffffffda RBX: 00007f8001b11f60 RCX: 00007f80019feb19 [ 2641.842288] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2641.843827] RBP: 00007f7ffef741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2641.845537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2641.847065] R13: 00007ffc2397b97f R14: 00007f7ffef74300 R15: 0000000000022000 [ 2641.849096] FAULT_INJECTION: forcing a failure. [ 2641.849096] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.851947] CPU: 1 PID: 11183 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2641.853484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2641.855318] Call Trace: [ 2641.855888] dump_stack+0x107/0x167 [ 2641.856688] should_fail.cold+0x5/0xa [ 2641.857549] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 2641.858993] should_failslab+0x5/0x20 [ 2641.859830] __kmalloc+0x72/0x390 [ 2641.860599] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 2641.862011] genl_family_rcv_msg_doit+0xda/0x330 [ 2641.863063] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2641.864514] ? cap_capable+0x1cd/0x230 [ 2641.865388] ? security_capable+0x95/0xc0 [ 2641.866322] ? ns_capable+0xe2/0x110 [ 2641.867129] genl_rcv_msg+0x36a/0x5a0 [ 2641.867969] ? genl_get_cmd+0x480/0x480 [ 2641.868845] ? ieee802154_llsec_add_dev+0x750/0x750 [ 2641.869958] ? lock_release+0x680/0x680 [ 2641.870828] ? netlink_deliver_tap+0xf4/0xcc0 [ 2641.871826] netlink_rcv_skb+0x14b/0x430 [ 2641.872703] ? genl_get_cmd+0x480/0x480 [ 2641.873593] ? netlink_ack+0xab0/0xab0 [ 2641.874457] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2641.875469] ? is_vmalloc_addr+0x7b/0xb0 [ 2641.876364] genl_rcv+0x24/0x40 [ 2641.877074] netlink_unicast+0x54e/0x800 [ 2641.877981] ? netlink_attachskb+0x870/0x870 [ 2641.878953] netlink_sendmsg+0x90f/0xe00 09:10:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004000) [ 2641.879873] ? netlink_unicast+0x800/0x800 [ 2641.881033] ? netlink_unicast+0x800/0x800 [ 2641.881995] __sock_sendmsg+0x154/0x190 [ 2641.882877] ____sys_sendmsg+0x70d/0x870 [ 2641.883758] FAULT_INJECTION: forcing a failure. [ 2641.883758] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.886197] ? sock_write_iter+0x3d0/0x3d0 [ 2641.886245] ? do_recvmmsg+0x6d0/0x6d0 [ 2641.886269] ? lock_downgrade+0x6d0/0x6d0 [ 2641.888955] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2641.890130] ___sys_sendmsg+0xf3/0x170 [ 2641.890998] ? sendmsg_copy_msghdr+0x160/0x160 [ 2641.892024] ? __fget_files+0x2cf/0x520 [ 2641.892903] ? lock_downgrade+0x6d0/0x6d0 [ 2641.893982] ? find_held_lock+0x2c/0x110 [ 2641.895101] ? __fget_files+0x2f8/0x520 [ 2641.896194] ? __fget_light+0xea/0x290 [ 2641.897261] __sys_sendmsg+0xe5/0x1b0 [ 2641.898239] ? __sys_sendmsg_sock+0x40/0x40 [ 2641.899309] ? rcu_read_lock_any_held+0x75/0xa0 [ 2641.900352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2641.901526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2641.902668] ? trace_hardirqs_on+0x5b/0x180 [ 2641.903618] do_syscall_64+0x33/0x40 [ 2641.904437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2641.905591] RIP: 0033:0x7f6a897f1b19 [ 2641.906407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2641.910466] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2641.912132] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2641.913732] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2641.915319] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2641.916876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2641.918475] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 [ 2641.920062] CPU: 0 PID: 11181 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2641.921585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2641.923377] Call Trace: [ 2641.923953] dump_stack+0x107/0x167 [ 2641.924738] should_fail.cold+0x5/0xa [ 2641.925569] ? create_object.isra.0+0x3a/0xa20 [ 2641.926552] should_failslab+0x5/0x20 [ 2641.927366] kmem_cache_alloc+0x5b/0x310 [ 2641.928246] create_object.isra.0+0x3a/0xa20 [ 2641.929195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2641.930311] kmem_cache_alloc+0x159/0x310 [ 2641.931221] __d_alloc+0x2a/0x990 [ 2641.931969] ? dput+0x1ae/0xcd0 [ 2641.932686] d_alloc+0x46/0x1c0 [ 2641.933409] __lookup_hash+0xcc/0x190 [ 2641.934235] filename_create+0x186/0x4a0 [ 2641.935107] ? filename_parentat+0x570/0x570 [ 2641.936057] ? getname_flags.part.0+0x1dd/0x4f0 [ 2641.937065] do_mkdirat+0xa2/0x2b0 [ 2641.937841] ? user_path_create+0xf0/0xf0 [ 2641.938748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2641.939887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2641.941001] do_syscall_64+0x33/0x40 [ 2641.941818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2641.942925] RIP: 0033:0x7fce19a4eb19 [ 2641.943725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2641.947746] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2641.949397] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2641.950945] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2641.952484] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2641.954035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2641.955578] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:10:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) (fail_nth: 9) 09:10:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x8000000000000) 09:10:19 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x40030000000000) 09:10:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 9) [ 2642.065999] FAULT_INJECTION: forcing a failure. [ 2642.065999] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.068600] CPU: 1 PID: 11196 Comm: syz-executor.1 Not tainted 5.10.235 #1 [ 2642.070088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2642.071862] Call Trace: [ 2642.072442] dump_stack+0x107/0x167 [ 2642.073227] should_fail.cold+0x5/0xa [ 2642.074050] ? create_object.isra.0+0x3a/0xa20 [ 2642.075030] should_failslab+0x5/0x20 [ 2642.075843] kmem_cache_alloc+0x5b/0x310 [ 2642.076714] ? lock_release+0x680/0x680 [ 2642.077917] create_object.isra.0+0x3a/0xa20 [ 2642.078855] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2642.079946] __kmalloc+0x16e/0x390 [ 2642.080722] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 2642.082095] genl_family_rcv_msg_doit+0xda/0x330 [ 2642.083107] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2642.084510] ? cap_capable+0x1cd/0x230 [ 2642.085370] ? security_capable+0x95/0xc0 [ 2642.086258] ? ns_capable+0xe2/0x110 [ 2642.087045] genl_rcv_msg+0x36a/0x5a0 [ 2642.087866] ? genl_get_cmd+0x480/0x480 [ 2642.088717] ? ieee802154_llsec_add_devkey+0x500/0x500 [ 2642.089865] ? lock_release+0x680/0x680 [ 2642.090713] ? netlink_deliver_tap+0xf4/0xcc0 [ 2642.091675] netlink_rcv_skb+0x14b/0x430 [ 2642.092545] ? genl_get_cmd+0x480/0x480 [ 2642.093418] ? netlink_ack+0xab0/0xab0 [ 2642.094276] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2642.095249] ? is_vmalloc_addr+0x7b/0xb0 [ 2642.096107] genl_rcv+0x24/0x40 [ 2642.096811] netlink_unicast+0x54e/0x800 [ 2642.097698] ? netlink_attachskb+0x870/0x870 [ 2642.098821] netlink_sendmsg+0x90f/0xe00 [ 2642.099929] ? netlink_unicast+0x800/0x800 [ 2642.101068] ? netlink_unicast+0x800/0x800 [ 2642.102210] __sock_sendmsg+0x154/0x190 [ 2642.103260] ____sys_sendmsg+0x70d/0x870 [ 2642.104194] ? sock_write_iter+0x3d0/0x3d0 [ 2642.105211] ? do_recvmmsg+0x6d0/0x6d0 [ 2642.106044] ? lock_downgrade+0x6d0/0x6d0 [ 2642.106918] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2642.108021] ___sys_sendmsg+0xf3/0x170 [ 2642.108858] ? sendmsg_copy_msghdr+0x160/0x160 [ 2642.109835] ? __fget_files+0x2cf/0x520 [ 2642.110674] ? lock_downgrade+0x6d0/0x6d0 [ 2642.111544] ? find_held_lock+0x2c/0x110 [ 2642.112403] ? __fget_files+0x2f8/0x520 [ 2642.113257] ? __fget_light+0xea/0x290 [ 2642.114091] __sys_sendmsg+0xe5/0x1b0 [ 2642.114899] ? __sys_sendmsg_sock+0x40/0x40 [ 2642.115814] ? rcu_read_lock_any_held+0x75/0xa0 [ 2642.116805] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2642.117921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2642.119020] ? trace_hardirqs_on+0x5b/0x180 [ 2642.119930] do_syscall_64+0x33/0x40 [ 2642.120728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2642.121821] RIP: 0033:0x7f80019feb19 [ 2642.122603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2642.126559] RSP: 002b:00007f7ffef74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2642.128158] RAX: ffffffffffffffda RBX: 00007f8001b11f60 RCX: 00007f80019feb19 [ 2642.129689] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2642.131195] RBP: 00007f7ffef741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2642.132696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2642.134223] R13: 00007ffc2397b97f R14: 00007f7ffef74300 R15: 0000000000022000 09:10:19 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x0, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2642.164683] FAULT_INJECTION: forcing a failure. [ 2642.164683] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.167212] CPU: 0 PID: 11202 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2642.168682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2642.170442] Call Trace: [ 2642.171004] dump_stack+0x107/0x167 [ 2642.171785] should_fail.cold+0x5/0xa [ 2642.172606] ? create_object.isra.0+0x3a/0xa20 [ 2642.173598] should_failslab+0x5/0x20 [ 2642.174406] kmem_cache_alloc+0x5b/0x310 [ 2642.175270] ? lock_release+0x680/0x680 [ 2642.176124] create_object.isra.0+0x3a/0xa20 [ 2642.177053] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2642.178148] __kmalloc+0x16e/0x390 [ 2642.178918] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 2642.180278] genl_family_rcv_msg_doit+0xda/0x330 [ 2642.181289] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2642.182729] ? cap_capable+0x1cd/0x230 [ 2642.183566] ? security_capable+0x95/0xc0 [ 2642.184455] ? ns_capable+0xe2/0x110 [ 2642.185251] genl_rcv_msg+0x36a/0x5a0 [ 2642.186071] ? genl_get_cmd+0x480/0x480 [ 2642.186919] ? ieee802154_llsec_add_dev+0x750/0x750 [ 2642.187990] ? lock_release+0x680/0x680 [ 2642.188834] ? netlink_deliver_tap+0xf4/0xcc0 [ 2642.189899] netlink_rcv_skb+0x14b/0x430 [ 2642.190796] ? genl_get_cmd+0x480/0x480 [ 2642.191639] ? netlink_ack+0xab0/0xab0 [ 2642.192476] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2642.193459] ? is_vmalloc_addr+0x7b/0xb0 [ 2642.194341] genl_rcv+0x24/0x40 [ 2642.195045] netlink_unicast+0x54e/0x800 [ 2642.195908] ? netlink_attachskb+0x870/0x870 [ 2642.196855] netlink_sendmsg+0x90f/0xe00 [ 2642.197736] ? netlink_unicast+0x800/0x800 [ 2642.198642] ? netlink_unicast+0x800/0x800 [ 2642.199548] __sock_sendmsg+0x154/0x190 [ 2642.200392] ____sys_sendmsg+0x70d/0x870 [ 2642.201253] ? sock_write_iter+0x3d0/0x3d0 [ 2642.202168] ? do_recvmmsg+0x6d0/0x6d0 [ 2642.202995] ? lock_downgrade+0x6d0/0x6d0 [ 2642.203868] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2642.204993] ___sys_sendmsg+0xf3/0x170 [ 2642.205833] ? sendmsg_copy_msghdr+0x160/0x160 [ 2642.206808] ? __fget_files+0x2cf/0x520 [ 2642.207653] ? lock_downgrade+0x6d0/0x6d0 [ 2642.208532] ? find_held_lock+0x2c/0x110 [ 2642.209509] ? __fget_files+0x2f8/0x520 [ 2642.210364] ? __fget_light+0xea/0x290 [ 2642.211212] __sys_sendmsg+0xe5/0x1b0 [ 2642.212018] ? __sys_sendmsg_sock+0x40/0x40 [ 2642.212944] ? rcu_read_lock_any_held+0x75/0xa0 [ 2642.213963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2642.215083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2642.216181] ? trace_hardirqs_on+0x5b/0x180 [ 2642.217110] do_syscall_64+0x33/0x40 [ 2642.217914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2642.219003] RIP: 0033:0x7f6a897f1b19 [ 2642.219797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2642.223733] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2642.225367] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2642.226896] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2642.228426] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2642.229975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2642.231519] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 09:10:19 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:10:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) (fail_nth: 10) 09:10:35 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 6) 09:10:35 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:10:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x100000000000000) 09:10:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) 09:10:35 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x0, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 10) [ 2657.865877] FAULT_INJECTION: forcing a failure. [ 2657.865877] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.868495] CPU: 1 PID: 11224 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2657.870021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.871865] Call Trace: [ 2657.872429] dump_stack+0x107/0x167 [ 2657.873208] should_fail.cold+0x5/0xa [ 2657.874030] ? __alloc_skb+0x6d/0x5b0 [ 2657.874842] should_failslab+0x5/0x20 [ 2657.875696] kmem_cache_alloc_node+0x55/0x330 [ 2657.876706] __alloc_skb+0x6d/0x5b0 [ 2657.877493] netlink_ack+0x1ed/0xab0 [ 2657.878295] ? ieee802154_llsec_add_dev+0x750/0x750 [ 2657.879414] ? netlink_sendmsg+0xe00/0xe00 [ 2657.880389] ? lock_release+0x680/0x680 [ 2657.881242] ? netlink_deliver_tap+0xf4/0xcc0 [ 2657.882260] netlink_rcv_skb+0x348/0x430 [ 2657.883207] ? genl_get_cmd+0x480/0x480 [ 2657.884061] ? netlink_ack+0xab0/0xab0 [ 2657.884947] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2657.886010] ? is_vmalloc_addr+0x7b/0xb0 [ 2657.886879] genl_rcv+0x24/0x40 [ 2657.887623] netlink_unicast+0x54e/0x800 [ 2657.888519] ? netlink_attachskb+0x870/0x870 [ 2657.889537] netlink_sendmsg+0x90f/0xe00 [ 2657.890413] ? netlink_unicast+0x800/0x800 [ 2657.891331] ? netlink_unicast+0x800/0x800 [ 2657.892281] __sock_sendmsg+0x154/0x190 [ 2657.893208] ____sys_sendmsg+0x70d/0x870 [ 2657.894088] ? sock_write_iter+0x3d0/0x3d0 [ 2657.895035] ? do_recvmmsg+0x6d0/0x6d0 [ 2657.895949] ? lock_downgrade+0x6d0/0x6d0 [ 2657.896834] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2657.898012] ___sys_sendmsg+0xf3/0x170 [ 2657.898925] ? sendmsg_copy_msghdr+0x160/0x160 [ 2657.899903] ? __fget_files+0x2cf/0x520 [ 2657.900755] ? lock_downgrade+0x6d0/0x6d0 [ 2657.901650] ? find_held_lock+0x2c/0x110 [ 2657.902553] ? __fget_files+0x2f8/0x520 [ 2657.903439] ? __fget_light+0xea/0x290 [ 2657.904341] __sys_sendmsg+0xe5/0x1b0 [ 2657.905149] ? __sys_sendmsg_sock+0x40/0x40 [ 2657.906126] ? rcu_read_lock_any_held+0x75/0xa0 [ 2657.907214] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2657.908333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2657.909491] ? trace_hardirqs_on+0x5b/0x180 [ 2657.910478] do_syscall_64+0x33/0x40 [ 2657.911272] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.912366] RIP: 0033:0x7f6a897f1b19 [ 2657.913201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.917234] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2657.918942] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2657.920452] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2657.921991] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2657.923510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2657.925029] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 [ 2657.959272] FAULT_INJECTION: forcing a failure. [ 2657.959272] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.962111] CPU: 1 PID: 11230 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2657.963629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.965378] Call Trace: [ 2657.965947] dump_stack+0x107/0x167 [ 2657.966714] should_fail.cold+0x5/0xa [ 2657.967529] ? cgroup_mkdir+0x251/0xf50 [ 2657.968415] should_failslab+0x5/0x20 [ 2657.969283] __kmalloc+0x72/0x390 [ 2657.970038] cgroup_mkdir+0x251/0xf50 [ 2657.970855] ? cgroup_destroy_locked+0x710/0x710 [ 2657.971862] kernfs_iop_mkdir+0x14d/0x1e0 [ 2657.972744] vfs_mkdir+0x493/0x750 [ 2657.973499] do_mkdirat+0x150/0x2b0 [ 2657.974279] ? user_path_create+0xf0/0xf0 [ 2657.975161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2657.976267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2657.977360] do_syscall_64+0x33/0x40 [ 2657.978155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.979245] RIP: 0033:0x7fce19a4eb19 [ 2657.980033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.983967] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2657.985594] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2657.987106] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2657.988610] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2657.990179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2657.991730] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:10:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x200000000000000) 09:10:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) 09:10:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:10:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 11) 09:10:35 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:10:35 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x0, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x300000000000000) 09:10:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:10:35 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2658.163945] FAULT_INJECTION: forcing a failure. [ 2658.163945] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.166386] CPU: 0 PID: 11254 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2658.167853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2658.169599] Call Trace: [ 2658.170156] dump_stack+0x107/0x167 [ 2658.170919] should_fail.cold+0x5/0xa [ 2658.171729] ? create_object.isra.0+0x3a/0xa20 [ 2658.172694] should_failslab+0x5/0x20 [ 2658.173620] kmem_cache_alloc+0x5b/0x310 [ 2658.174648] create_object.isra.0+0x3a/0xa20 [ 2658.175792] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2658.177024] kmem_cache_alloc_node+0x169/0x330 [ 2658.178146] __alloc_skb+0x6d/0x5b0 [ 2658.179008] netlink_ack+0x1ed/0xab0 [ 2658.179914] ? ieee802154_llsec_add_dev+0x750/0x750 [ 2658.180996] ? netlink_sendmsg+0xe00/0xe00 [ 2658.181908] ? lock_release+0x680/0x680 [ 2658.182747] ? netlink_deliver_tap+0xf4/0xcc0 [ 2658.183702] netlink_rcv_skb+0x348/0x430 [ 2658.184600] ? genl_get_cmd+0x480/0x480 [ 2658.185449] ? netlink_ack+0xab0/0xab0 [ 2658.186298] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2658.187285] ? is_vmalloc_addr+0x7b/0xb0 [ 2658.188152] genl_rcv+0x24/0x40 [ 2658.188855] netlink_unicast+0x54e/0x800 [ 2658.189736] ? netlink_attachskb+0x870/0x870 [ 2658.190693] netlink_sendmsg+0x90f/0xe00 [ 2658.191573] ? netlink_unicast+0x800/0x800 [ 2658.192488] ? netlink_unicast+0x800/0x800 [ 2658.193404] __sock_sendmsg+0x154/0x190 [ 2658.194265] ____sys_sendmsg+0x70d/0x870 [ 2658.195132] ? sock_write_iter+0x3d0/0x3d0 [ 2658.196040] ? do_recvmmsg+0x6d0/0x6d0 [ 2658.196876] ? lock_downgrade+0x6d0/0x6d0 [ 2658.197764] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2658.198881] ___sys_sendmsg+0xf3/0x170 [ 2658.199715] ? sendmsg_copy_msghdr+0x160/0x160 [ 2658.200689] ? __fget_files+0x2cf/0x520 [ 2658.201562] ? lock_downgrade+0x6d0/0x6d0 [ 2658.202454] ? find_held_lock+0x2c/0x110 [ 2658.203345] ? __fget_files+0x2f8/0x520 [ 2658.204206] ? __fget_light+0xea/0x290 [ 2658.205055] __sys_sendmsg+0xe5/0x1b0 [ 2658.205893] ? __sys_sendmsg_sock+0x40/0x40 [ 2658.206824] ? rcu_read_lock_any_held+0x75/0xa0 [ 2658.207833] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2658.208963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2658.210078] ? trace_hardirqs_on+0x5b/0x180 [ 2658.211008] do_syscall_64+0x33/0x40 [ 2658.211804] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2658.212910] RIP: 0033:0x7f6a897f1b19 [ 2658.213716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2658.217724] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2658.219622] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2658.221361] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2658.223106] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2658.224825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2658.226603] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 09:10:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 7) 09:10:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x2, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) [ 2658.361848] FAULT_INJECTION: forcing a failure. [ 2658.361848] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.364751] CPU: 0 PID: 11272 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2658.366438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2658.368436] Call Trace: [ 2658.369089] dump_stack+0x107/0x167 [ 2658.369998] should_fail.cold+0x5/0xa [ 2658.370925] ? create_object.isra.0+0x3a/0xa20 [ 2658.372055] should_failslab+0x5/0x20 [ 2658.372974] kmem_cache_alloc+0x5b/0x310 [ 2658.373968] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2658.375384] ? trace_hardirqs_on+0x5b/0x180 [ 2658.376458] create_object.isra.0+0x3a/0xa20 [ 2658.377636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2658.378952] __kmalloc+0x16e/0x390 [ 2658.379877] cgroup_mkdir+0x251/0xf50 [ 2658.380853] ? cgroup_destroy_locked+0x710/0x710 [ 2658.381896] kernfs_iop_mkdir+0x14d/0x1e0 [ 2658.382768] vfs_mkdir+0x493/0x750 [ 2658.383520] do_mkdirat+0x150/0x2b0 [ 2658.384268] ? user_path_create+0xf0/0xf0 [ 2658.385121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2658.386233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2658.387321] do_syscall_64+0x33/0x40 [ 2658.388087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2658.389150] RIP: 0033:0x7fce19a4eb19 [ 2658.389949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2658.393875] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2658.395497] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2658.396994] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2658.398516] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2658.400009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2658.401516] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:10:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 8) 09:10:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100400200060000000001000000"], 0x14}}, 0x0) 09:10:51 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:10:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 12) 09:10:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x400000000000000) 09:10:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x3, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:10:51 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:10:51 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x0, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2673.827321] FAULT_INJECTION: forcing a failure. [ 2673.827321] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.828704] CPU: 0 PID: 11288 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2673.829515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2673.830505] Call Trace: [ 2673.830821] dump_stack+0x107/0x167 [ 2673.831249] should_fail.cold+0x5/0xa [ 2673.831712] should_failslab+0x5/0x20 [ 2673.832157] __kmalloc_node_track_caller+0x74/0x3b0 [ 2673.832738] ? netlink_ack+0x1ed/0xab0 [ 2673.833201] __alloc_skb+0xb1/0x5b0 [ 2673.833628] netlink_ack+0x1ed/0xab0 [ 2673.834069] ? ieee802154_llsec_add_dev+0x750/0x750 [ 2673.834656] ? netlink_sendmsg+0xe00/0xe00 [ 2673.835153] ? lock_release+0x680/0x680 [ 2673.835628] ? netlink_deliver_tap+0xf4/0xcc0 [ 2673.836169] netlink_rcv_skb+0x348/0x430 [ 2673.836657] ? genl_get_cmd+0x480/0x480 [ 2673.837147] ? netlink_ack+0xab0/0xab0 [ 2673.837621] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2673.838183] ? is_vmalloc_addr+0x7b/0xb0 [ 2673.838677] genl_rcv+0x24/0x40 [ 2673.839077] netlink_unicast+0x54e/0x800 [ 2673.839574] ? netlink_attachskb+0x870/0x870 [ 2673.840104] netlink_sendmsg+0x90f/0xe00 [ 2673.840586] ? netlink_unicast+0x800/0x800 [ 2673.841089] ? netlink_unicast+0x800/0x800 [ 2673.841592] __sock_sendmsg+0x154/0x190 [ 2673.842069] ____sys_sendmsg+0x70d/0x870 [ 2673.842551] ? sock_write_iter+0x3d0/0x3d0 [ 2673.843048] ? do_recvmmsg+0x6d0/0x6d0 [ 2673.843514] ? lock_downgrade+0x6d0/0x6d0 [ 2673.844011] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2673.844635] ___sys_sendmsg+0xf3/0x170 [ 2673.845097] ? sendmsg_copy_msghdr+0x160/0x160 [ 2673.845637] ? __fget_files+0x2cf/0x520 [ 2673.846110] ? lock_downgrade+0x6d0/0x6d0 [ 2673.846599] ? find_held_lock+0x2c/0x110 [ 2673.847078] ? __fget_files+0x2f8/0x520 [ 2673.847548] ? __fget_light+0xea/0x290 [ 2673.848008] __sys_sendmsg+0xe5/0x1b0 [ 2673.848466] ? __sys_sendmsg_sock+0x40/0x40 [ 2673.848980] ? rcu_read_lock_any_held+0x75/0xa0 [ 2673.849531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2673.850156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.850762] ? trace_hardirqs_on+0x5b/0x180 [ 2673.851270] do_syscall_64+0x33/0x40 [ 2673.851709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2673.852314] RIP: 0033:0x7f6a897f1b19 [ 2673.852760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.854981] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2673.855896] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2673.856756] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2673.857719] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.858745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2673.859751] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 09:10:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x8, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) [ 2673.893210] FAULT_INJECTION: forcing a failure. [ 2673.893210] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.895929] CPU: 1 PID: 11292 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2673.897380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2673.899117] Call Trace: [ 2673.899685] dump_stack+0x107/0x167 [ 2673.900450] should_fail.cold+0x5/0xa [ 2673.901250] ? create_object.isra.0+0x3a/0xa20 [ 2673.902211] should_failslab+0x5/0x20 [ 2673.903012] kmem_cache_alloc+0x5b/0x310 [ 2673.903862] create_object.isra.0+0x3a/0xa20 [ 2673.904787] kmemleak_alloc_percpu+0xa0/0x100 [ 2673.905721] pcpu_alloc+0x4e2/0x1240 [ 2673.906521] ? cset_cgroup_from_root+0x220/0x220 [ 2673.907509] percpu_ref_init+0x31/0x3d0 [ 2673.908347] cgroup_mkdir+0x288/0xf50 [ 2673.909148] ? cgroup_destroy_locked+0x710/0x710 [ 2673.910154] kernfs_iop_mkdir+0x14d/0x1e0 [ 2673.911018] vfs_mkdir+0x493/0x750 [ 2673.911771] do_mkdirat+0x150/0x2b0 [ 2673.912536] ? user_path_create+0xf0/0xf0 [ 2673.913410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2673.914514] ? syscall_enter_from_user_mode+0x1d/0x50 09:10:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 13) [ 2673.915658] do_syscall_64+0x33/0x40 [ 2673.916515] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2673.917595] RIP: 0033:0x7fce19a4eb19 09:10:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x500000000000000) [ 2673.918388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.922361] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2673.923954] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2673.925454] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 09:10:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x9, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) [ 2673.926965] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.928566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2673.930073] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:10:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20000085) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004050) [ 2673.973565] FAULT_INJECTION: forcing a failure. [ 2673.973565] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.976153] CPU: 1 PID: 11307 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2673.977613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2673.979367] Call Trace: [ 2673.979925] dump_stack+0x107/0x167 [ 2673.980683] should_fail.cold+0x5/0xa [ 2673.981490] ? create_object.isra.0+0x3a/0xa20 [ 2673.982460] should_failslab+0x5/0x20 [ 2673.983261] kmem_cache_alloc+0x5b/0x310 [ 2673.984120] create_object.isra.0+0x3a/0xa20 [ 2673.985049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2673.986139] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2673.987204] ? netlink_ack+0x1ed/0xab0 [ 2673.988029] __alloc_skb+0xb1/0x5b0 [ 2673.988803] netlink_ack+0x1ed/0xab0 [ 2673.989587] ? ieee802154_llsec_add_dev+0x750/0x750 [ 2673.990647] ? netlink_sendmsg+0xe00/0xe00 [ 2673.991537] ? lock_release+0x680/0x680 [ 2673.992374] ? netlink_deliver_tap+0xf4/0xcc0 [ 2673.993319] netlink_rcv_skb+0x348/0x430 [ 2673.994189] ? genl_get_cmd+0x480/0x480 [ 2673.995029] ? netlink_ack+0xab0/0xab0 [ 2673.995851] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2673.996806] ? is_vmalloc_addr+0x7b/0xb0 [ 2673.997665] genl_rcv+0x24/0x40 [ 2673.998366] netlink_unicast+0x54e/0x800 [ 2673.999224] ? netlink_attachskb+0x870/0x870 [ 2674.000158] netlink_sendmsg+0x90f/0xe00 [ 2674.001052] ? netlink_unicast+0x800/0x800 [ 2674.001981] ? netlink_unicast+0x800/0x800 [ 2674.002896] __sock_sendmsg+0x154/0x190 [ 2674.003755] ____sys_sendmsg+0x70d/0x870 [ 2674.004636] ? sock_write_iter+0x3d0/0x3d0 [ 2674.005552] ? do_recvmmsg+0x6d0/0x6d0 [ 2674.006400] ? lock_downgrade+0x6d0/0x6d0 [ 2674.007296] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2674.008429] ___sys_sendmsg+0xf3/0x170 [ 2674.009271] ? sendmsg_copy_msghdr+0x160/0x160 [ 2674.010272] ? __fget_files+0x2cf/0x520 [ 2674.011136] ? lock_downgrade+0x6d0/0x6d0 [ 2674.012031] ? find_held_lock+0x2c/0x110 [ 2674.012915] ? __fget_files+0x2f8/0x520 [ 2674.013789] ? __fget_light+0xea/0x290 [ 2674.014637] __sys_sendmsg+0xe5/0x1b0 [ 2674.015456] ? __sys_sendmsg_sock+0x40/0x40 [ 2674.016387] ? rcu_read_lock_any_held+0x75/0xa0 [ 2674.017407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.018465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.019695] ? trace_hardirqs_on+0x5b/0x180 [ 2674.020796] do_syscall_64+0x33/0x40 [ 2674.021611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.022749] RIP: 0033:0x7f6a897f1b19 [ 2674.023570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.027582] RSP: 002b:00007f6a86d67188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2674.029219] RAX: ffffffffffffffda RBX: 00007f6a89904f60 RCX: 00007f6a897f1b19 [ 2674.030742] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 2674.032260] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2674.033787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2674.035299] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 09:11:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0xf, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:11:04 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:11:04 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x0, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:04 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x600000000000000) 09:11:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 9) 09:11:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) (fail_nth: 14) 09:11:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="0c0006000200000003000000050012000500006afc5714161bf715a8857a628e9b5525000c000600030000000300ca492b6b06000100000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="14001000", @ANYRES16=r5, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) [ 2686.712137] FAULT_INJECTION: forcing a failure. [ 2686.712137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2686.713881] CPU: 0 PID: 11334 Comm: syz-executor.4 Not tainted 5.10.235 #1 [ 2686.714877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2686.716054] Call Trace: [ 2686.716433] dump_stack+0x107/0x167 [ 2686.716962] should_fail.cold+0x5/0xa [ 2686.717512] _copy_to_user+0x2e/0x180 [ 2686.718067] simple_read_from_buffer+0xcc/0x160 [ 2686.718738] proc_fail_nth_read+0x198/0x230 [ 2686.719351] ? proc_sessionid_read+0x230/0x230 [ 2686.720007] ? security_file_permission+0xb1/0xe0 [ 2686.720693] ? proc_sessionid_read+0x230/0x230 [ 2686.721339] vfs_read+0x228/0x620 [ 2686.721831] ksys_read+0x12d/0x260 [ 2686.722337] ? vfs_write+0xb10/0xb10 [ 2686.722865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2686.723599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2686.724324] do_syscall_64+0x33/0x40 [ 2686.724861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2686.725580] RIP: 0033:0x7f6a897a469c [ 2686.726112] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2686.728703] RSP: 002b:00007f6a86d67170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2686.729764] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f6a897a469c [ 2686.730781] RDX: 000000000000000f RSI: 00007f6a86d671e0 RDI: 0000000000000003 [ 2686.731781] RBP: 00007f6a86d671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2686.732780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2686.733786] R13: 00007fff54f39c7f R14: 00007f6a86d67300 R15: 0000000000022000 09:11:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x700000000000000) [ 2686.792408] FAULT_INJECTION: forcing a failure. [ 2686.792408] name failslab, interval 1, probability 0, space 0, times 0 [ 2686.798175] CPU: 1 PID: 11331 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2686.799627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2686.801346] Call Trace: [ 2686.801897] dump_stack+0x107/0x167 [ 2686.802669] should_fail.cold+0x5/0xa [ 2686.803465] ? create_object.isra.0+0x3a/0xa20 [ 2686.804408] should_failslab+0x5/0x20 [ 2686.805193] kmem_cache_alloc+0x5b/0x310 [ 2686.806049] ? mark_held_locks+0x9e/0xe0 [ 2686.806892] create_object.isra.0+0x3a/0xa20 [ 2686.807813] kmemleak_alloc_percpu+0xa0/0x100 [ 2686.808747] pcpu_alloc+0x4e2/0x1240 [ 2686.809532] ? cset_cgroup_from_root+0x220/0x220 [ 2686.810506] percpu_ref_init+0x31/0x3d0 [ 2686.811332] cgroup_mkdir+0x288/0xf50 [ 2686.812110] ? cgroup_destroy_locked+0x710/0x710 [ 2686.813088] kernfs_iop_mkdir+0x14d/0x1e0 [ 2686.813950] vfs_mkdir+0x493/0x750 [ 2686.814687] do_mkdirat+0x150/0x2b0 [ 2686.815441] ? user_path_create+0xf0/0xf0 [ 2686.816291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2686.817369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2686.818425] do_syscall_64+0x33/0x40 [ 2686.819190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2686.820221] RIP: 0033:0x7fce19a4eb19 [ 2686.820979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2686.824704] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2686.826261] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2686.827725] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2686.829177] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2686.830649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2686.832105] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:11:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x100}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40815}, 0x40c4) 09:11:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:11:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:11:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x900000000000000) 09:11:04 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x900, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:11:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:11:04 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x0, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:04 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:11:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0xf00000000000000) 09:11:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 10) [ 2687.096329] FAULT_INJECTION: forcing a failure. [ 2687.096329] name failslab, interval 1, probability 0, space 0, times 0 [ 2687.098884] CPU: 0 PID: 11376 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2687.100318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2687.102033] Call Trace: [ 2687.102586] dump_stack+0x107/0x167 [ 2687.103337] should_fail.cold+0x5/0xa [ 2687.104125] ? percpu_ref_init+0xd8/0x3d0 [ 2687.104988] should_failslab+0x5/0x20 [ 2687.105769] kmem_cache_alloc_trace+0x55/0x320 [ 2687.106721] ? cset_cgroup_from_root+0x220/0x220 [ 2687.107697] percpu_ref_init+0xd8/0x3d0 [ 2687.108518] cgroup_mkdir+0x288/0xf50 [ 2687.109303] ? cgroup_destroy_locked+0x710/0x710 [ 2687.110288] kernfs_iop_mkdir+0x14d/0x1e0 [ 2687.111144] vfs_mkdir+0x493/0x750 [ 2687.111877] do_mkdirat+0x150/0x2b0 [ 2687.112622] ? user_path_create+0xf0/0xf0 [ 2687.113478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2687.114565] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2687.115627] do_syscall_64+0x33/0x40 [ 2687.116396] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2687.117446] RIP: 0033:0x7fce19a4eb19 [ 2687.118224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.121998] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2687.123565] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2687.125035] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2687.126533] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2687.128013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2687.129479] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:11:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x2, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:11:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x4, {0x30}}, 0x14}}, 0x4) 09:11:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 11) 09:11:19 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:11:19 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x0, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:19 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0xffffff7f00000000) 09:11:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0xf00, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:11:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) [ 2702.262263] FAULT_INJECTION: forcing a failure. [ 2702.262263] name failslab, interval 1, probability 0, space 0, times 0 [ 2702.265019] CPU: 1 PID: 11390 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2702.266501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2702.268256] Call Trace: [ 2702.268827] dump_stack+0x107/0x167 [ 2702.269609] should_fail.cold+0x5/0xa [ 2702.270449] ? create_object.isra.0+0x3a/0xa20 [ 2702.271438] should_failslab+0x5/0x20 [ 2702.272263] kmem_cache_alloc+0x5b/0x310 [ 2702.273148] create_object.isra.0+0x3a/0xa20 [ 2702.274090] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2702.275197] kmem_cache_alloc_trace+0x151/0x320 [ 2702.276204] ? cset_cgroup_from_root+0x220/0x220 [ 2702.277215] percpu_ref_init+0xd8/0x3d0 [ 2702.278081] cgroup_mkdir+0x288/0xf50 [ 2702.278905] ? cgroup_destroy_locked+0x710/0x710 [ 2702.279931] kernfs_iop_mkdir+0x14d/0x1e0 [ 2702.280830] vfs_mkdir+0x493/0x750 [ 2702.281599] do_mkdirat+0x150/0x2b0 [ 2702.282394] ? user_path_create+0xf0/0xf0 [ 2702.283289] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2702.284469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2702.285604] do_syscall_64+0x33/0x40 [ 2702.286445] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2702.287570] RIP: 0033:0x7fce19a4eb19 [ 2702.288390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2702.292463] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2702.294150] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2702.295727] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2702.297304] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2702.298887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2702.300456] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:11:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x3, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:11:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0xffffffff00000000) 09:11:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x30000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:11:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 12) 09:11:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x8, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:11:19 executing program 3: syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="24e0157ff20000000000000000000000000000002208b82ade57788755349c3f5bfaba904782caea02d42f7a8bfcc40781d855c69891325ac2e2fad2599c641043dbb1928914e560cf42066bfae50e9fa20907c3960f123c7e33af06d375c89da21f17145846c7d26168497809471e99f0a360c14932ade5539e1e30f29b9708107acf4b57", @ANYRES16=r0, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) 09:11:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x14, r3, 0x1, 0x2, 0x3}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 09:11:19 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2702.524037] FAULT_INJECTION: forcing a failure. [ 2702.524037] name failslab, interval 1, probability 0, space 0, times 0 [ 2702.526024] CPU: 0 PID: 11420 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2702.527154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2702.528505] Call Trace: [ 2702.528937] dump_stack+0x107/0x167 [ 2702.529519] should_fail.cold+0x5/0xa [ 2702.530130] ? create_object.isra.0+0x3a/0xa20 [ 2702.530853] should_failslab+0x5/0x20 [ 2702.531451] kmem_cache_alloc+0x5b/0x310 [ 2702.532098] create_object.isra.0+0x3a/0xa20 [ 2702.532798] kmemleak_alloc_percpu+0xa0/0x100 [ 2702.533492] pcpu_alloc+0x4e2/0x1240 [ 2702.534089] cgroup_rstat_init+0x14f/0x1f0 [ 2702.534773] cgroup_mkdir+0x706/0xf50 [ 2702.535368] ? cgroup_destroy_locked+0x710/0x710 [ 2702.536117] kernfs_iop_mkdir+0x14d/0x1e0 [ 2702.536762] vfs_mkdir+0x493/0x750 [ 2702.537327] do_mkdirat+0x150/0x2b0 [ 2702.537897] ? user_path_create+0xf0/0xf0 [ 2702.538566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2702.539400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2702.540226] do_syscall_64+0x33/0x40 [ 2702.540833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2702.541643] RIP: 0033:0x7fce19a4eb19 [ 2702.542278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2702.545138] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2702.546354] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2702.547472] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2702.548601] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2702.549731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2702.550863] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:11:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 13) 09:11:34 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:34 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x20}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x60}}, 0x0) 09:11:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x34000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:11:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x9, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:11:34 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:11:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000310000000a0001007770610000000500330000000000"], 0x28}}, 0x0) [ 2717.086087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2717.096404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2717.115907] FAULT_INJECTION: forcing a failure. [ 2717.115907] name failslab, interval 1, probability 0, space 0, times 0 [ 2717.118677] CPU: 1 PID: 11443 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2717.120139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2717.121886] Call Trace: [ 2717.122455] dump_stack+0x107/0x167 [ 2717.123238] should_fail.cold+0x5/0xa [ 2717.124081] ? create_object.isra.0+0x3a/0xa20 [ 2717.125125] should_failslab+0x5/0x20 [ 2717.126008] kmem_cache_alloc+0x5b/0x310 [ 2717.126916] ? mark_held_locks+0x9e/0xe0 [ 2717.127817] create_object.isra.0+0x3a/0xa20 [ 2717.128794] kmemleak_alloc_percpu+0xa0/0x100 [ 2717.129792] pcpu_alloc+0x4e2/0x1240 [ 2717.130643] cgroup_rstat_init+0x14f/0x1f0 [ 2717.131607] cgroup_mkdir+0x706/0xf50 [ 2717.132458] ? cgroup_destroy_locked+0x710/0x710 [ 2717.133527] kernfs_iop_mkdir+0x14d/0x1e0 [ 2717.134467] vfs_mkdir+0x493/0x750 [ 2717.135267] do_mkdirat+0x150/0x2b0 [ 2717.136073] ? user_path_create+0xf0/0xf0 [ 2717.137008] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2717.138172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2717.139334] do_syscall_64+0x33/0x40 [ 2717.140156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2717.141271] RIP: 0033:0x7fce19a4eb19 [ 2717.142076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2717.146094] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2717.147758] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2717.149315] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2717.150868] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2717.152420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2717.153968] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:11:49 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x80000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:11:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 14) 09:11:49 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0xf, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:11:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000190000d03943012e000a0001007770616e300000000500330000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) 09:11:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xe1, 0x7, 0xe6, 0xe1, 0x0, 0x8, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp={&(0x7f0000000200)}, 0x0, 0x5, 0x7ff, 0x4, 0x8, 0x80000}, 0x0, 0x6, r4, 0x3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000400)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000fedbdf250100000006000800a3aa000006000a000100000006000a000000000005001d000300000005001d001b000000050007001400000006000800a2aa000005001d001b000000", @ANYRESHEX=r4], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x4000004) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x700, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x840) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="6c020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0006000300000000000000"], 0x26c}, 0x1, 0x0, 0x0, 0x8054}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000004", @ANYRES16=r1, @ANYBLOB="00000000003000000000001e000043487ea3dc4a912385862ee140d516ca2bfac58751a8c70e3f"], 0x14}}, 0x0) 09:11:49 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280)}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) [ 2732.170061] FAULT_INJECTION: forcing a failure. [ 2732.170061] name failslab, interval 1, probability 0, space 0, times 0 [ 2732.171672] CPU: 0 PID: 11472 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2732.172494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2732.173494] Call Trace: [ 2732.173813] dump_stack+0x107/0x167 [ 2732.174246] should_fail.cold+0x5/0xa [ 2732.174720] should_failslab+0x5/0x20 [ 2732.175176] __kmalloc_track_caller+0x79/0x370 [ 2732.175712] ? kstrdup_const+0x53/0x80 [ 2732.176168] ? find_held_lock+0x2c/0x110 [ 2732.176659] kstrdup+0x36/0x70 [ 2732.177042] kstrdup_const+0x53/0x80 [ 2732.177490] __kernfs_new_node+0x9d/0x860 [ 2732.177984] ? mark_held_locks+0x9e/0xe0 [ 2732.178470] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2732.179074] ? cpumask_next+0x1f/0x30 [ 2732.179532] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2732.180091] ? pcpu_alloc+0x12a/0x1240 [ 2732.180561] kernfs_new_node+0x18d/0x250 [ 2732.181049] kernfs_create_dir_ns+0x49/0x160 [ 2732.181584] cgroup_mkdir+0x315/0xf50 [ 2732.182048] ? cgroup_destroy_locked+0x710/0x710 [ 2732.182630] kernfs_iop_mkdir+0x14d/0x1e0 [ 2732.183133] vfs_mkdir+0x493/0x750 [ 2732.183563] do_mkdirat+0x150/0x2b0 [ 2732.184003] ? user_path_create+0xf0/0xf0 [ 2732.184507] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2732.185138] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2732.185786] do_syscall_64+0x33/0x40 [ 2732.186241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2732.186859] RIP: 0033:0x7fce19a4eb19 [ 2732.187308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.189516] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2732.190437] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2732.191301] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2732.192153] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.193009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2732.193915] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:11:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 15) 09:11:49 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:11:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x400300, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:11:49 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280)}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:11:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x0, 0x3, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:11:49 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x96ba, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x357}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r3, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) [ 2732.289815] FAULT_INJECTION: forcing a failure. [ 2732.289815] name failslab, interval 1, probability 0, space 0, times 0 [ 2732.291264] CPU: 0 PID: 11486 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2732.292054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2732.293008] Call Trace: [ 2732.293317] dump_stack+0x107/0x167 [ 2732.293743] should_fail.cold+0x5/0xa [ 2732.294188] ? create_object.isra.0+0x3a/0xa20 [ 2732.294738] should_failslab+0x5/0x20 [ 2732.295183] kmem_cache_alloc+0x5b/0x310 [ 2732.295656] create_object.isra.0+0x3a/0xa20 [ 2732.296162] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2732.296744] __kmalloc_track_caller+0x177/0x370 [ 2732.297276] ? kstrdup_const+0x53/0x80 [ 2732.297727] ? find_held_lock+0x2c/0x110 [ 2732.298197] kstrdup+0x36/0x70 [ 2732.298577] kstrdup_const+0x53/0x80 [ 2732.299007] __kernfs_new_node+0x9d/0x860 [ 2732.299490] ? mark_held_locks+0x9e/0xe0 [ 2732.299954] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2732.300500] ? cpumask_next+0x1f/0x30 [ 2732.300931] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2732.301468] ? pcpu_alloc+0x12a/0x1240 [ 2732.301911] kernfs_new_node+0x18d/0x250 [ 2732.302375] kernfs_create_dir_ns+0x49/0x160 [ 2732.302896] cgroup_mkdir+0x315/0xf50 [ 2732.303334] ? cgroup_destroy_locked+0x710/0x710 [ 2732.303877] kernfs_iop_mkdir+0x14d/0x1e0 [ 2732.304348] vfs_mkdir+0x493/0x750 [ 2732.304753] do_mkdirat+0x150/0x2b0 [ 2732.305165] ? user_path_create+0xf0/0xf0 [ 2732.305636] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2732.306230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2732.306822] do_syscall_64+0x33/0x40 [ 2732.307243] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2732.307823] RIP: 0033:0x7fce19a4eb19 [ 2732.308253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.310334] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2732.311217] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2732.312037] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2732.312861] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.313681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2732.314501] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:11:49 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:11:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x4008004) 09:11:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x900, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:11:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x1000000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:11:49 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:04 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280)}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:12:04 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) r2 = fcntl$dupfd(r0, 0x406, r0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, r2, 0xb) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000000c) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0xc8, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x40080) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@loopback, 0x4e21, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x21, r6, r7}, {0x0, 0x100000000, 0x7, 0x3f, 0x1000, 0x9115, 0x9d, 0x4}, {0x9, 0x1, 0x3ff, 0x5}, 0x8000, 0x6e6bb0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0xff}, 0xa, @in6=@empty, 0x3505, 0x0, 0x1, 0x9, 0xffffffc1, 0xb7f, 0x5}}, 0xe8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:12:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 16) 09:12:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x2000000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) 09:12:04 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0xf00, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:12:04 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2746.890328] FAULT_INJECTION: forcing a failure. [ 2746.890328] name failslab, interval 1, probability 0, space 0, times 0 [ 2746.891983] CPU: 0 PID: 11524 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2746.892859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2746.893983] Call Trace: [ 2746.894422] dump_stack+0x107/0x167 [ 2746.895033] should_fail.cold+0x5/0xa [ 2746.895610] ? __kernfs_new_node+0xd4/0x860 [ 2746.896271] should_failslab+0x5/0x20 [ 2746.896867] kmem_cache_alloc+0x5b/0x310 [ 2746.897487] __kernfs_new_node+0xd4/0x860 [ 2746.898120] ? mark_held_locks+0x9e/0xe0 [ 2746.898764] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2746.899488] ? cpumask_next+0x1f/0x30 [ 2746.900059] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2746.900767] ? pcpu_alloc+0x12a/0x1240 [ 2746.901362] kernfs_new_node+0x18d/0x250 [ 2746.901977] kernfs_create_dir_ns+0x49/0x160 [ 2746.902635] cgroup_mkdir+0x315/0xf50 [ 2746.903298] ? cgroup_destroy_locked+0x710/0x710 [ 2746.904011] kernfs_iop_mkdir+0x14d/0x1e0 [ 2746.904649] vfs_mkdir+0x493/0x750 [ 2746.905181] do_mkdirat+0x150/0x2b0 [ 2746.905738] ? user_path_create+0xf0/0xf0 [ 2746.906357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2746.907154] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2746.907913] do_syscall_64+0x33/0x40 [ 2746.908443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2746.909078] RIP: 0033:0x7fce19a4eb19 [ 2746.909547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2746.911857] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2746.912818] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2746.913705] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2746.914586] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2746.915477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2746.916363] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:12:04 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x30000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:12:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x3000000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:12:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x9000000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:12:18 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:18 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x0, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:12:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 17) 09:12:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f770000000000000000fb0000000800010000000000d68403cd69bbde6087959a2c5bcbc2a38045b8cbfaab4205d89fbe4f2bb87a45bbcd0cc8829c22bb5d7bd3eeec60cec542be021cbbc3c419db1a6673626826f45a73e6ee5cbce16723a416eb5cb66fc1110a125fe6bc05b270ff6832ce5b2b83ff98eaaabe8e725a50aa66adb5d22143169f62d86425fde44b757e15e22c695d5ed02b847167a41028695a2e5a4dd2608c4e79de1cf8e5cdda74de6bf04703c27d"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0xb8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x171}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2e156bd}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3c3799eafdfb739ecbb82512489b11ae"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cb4c1d350643b74e047b2fd0632719eb"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) 09:12:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x34000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:12:18 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000025000000bba97bd67770616e30000000"], 0x20}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xb6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xc4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x40}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4840}, 0x240080e4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1}, 0x14}}, 0x20004840) 09:12:18 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x80000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:12:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0xf000000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) [ 2761.099296] FAULT_INJECTION: forcing a failure. [ 2761.099296] name failslab, interval 1, probability 0, space 0, times 0 [ 2761.101946] CPU: 0 PID: 11570 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2761.103418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2761.105154] Call Trace: [ 2761.105706] dump_stack+0x107/0x167 [ 2761.106468] should_fail.cold+0x5/0xa [ 2761.107317] ? __kernfs_new_node+0xd4/0x860 [ 2761.108233] should_failslab+0x5/0x20 [ 2761.109026] kmem_cache_alloc+0x5b/0x310 [ 2761.109881] __kernfs_new_node+0xd4/0x860 [ 2761.110750] ? mark_held_locks+0x9e/0xe0 [ 2761.111620] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2761.112617] ? cpumask_next+0x1f/0x30 [ 2761.113401] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2761.114378] ? pcpu_alloc+0x12a/0x1240 [ 2761.115229] kernfs_new_node+0x18d/0x250 [ 2761.116078] kernfs_create_dir_ns+0x49/0x160 [ 2761.116998] cgroup_mkdir+0x315/0xf50 [ 2761.117804] ? cgroup_destroy_locked+0x710/0x710 [ 2761.118796] kernfs_iop_mkdir+0x14d/0x1e0 [ 2761.119694] vfs_mkdir+0x493/0x750 [ 2761.120435] do_mkdirat+0x150/0x2b0 [ 2761.121193] ? user_path_create+0xf0/0xf0 [ 2761.122051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2761.123171] ? syscall_enter_from_user_mode+0x1d/0x50 09:12:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0xcd5b9dd39577f6c5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x90) [ 2761.124251] do_syscall_64+0x33/0x40 [ 2761.125111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2761.126172] RIP: 0033:0x7fce19a4eb19 [ 2761.127000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2761.130941] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2761.132558] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2761.134053] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2761.135585] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2761.137078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2761.138570] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:12:18 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x0, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:12:18 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x24, r1, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xc5}]}, 0x24}}, 0x0) 09:12:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0xffffff7f, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:12:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x400300, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:12:18 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 18) 09:12:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002261fca660ac323b86ef4fa07d0ad790f796b6402e794417a3baa36b360b99993df5b802df3af58698d258abdc3b2725520ca6606dbe3d8ad4d3a78eb2395725985d0472bf082af66133bf9704bd5198f492acb3db51e28b6275ed76ab834ac189c233687337ea1bb13759d2b63f599ac3c867b76230099e855dc5b13f5e49259b737dfd471760055e794d1cc184189b5144c5dea1d274a2b3408375ffd62d4b29b6e69dd50f72294b50d384952fe421f3ab4665ec0506cc40a90b2644a00c3fb2dac4652c817d21cb81e749abd86c3a52a12fd9c863d2ea", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) 09:12:18 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x0, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:12:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004880) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, r2, 0x1}, 0x14}}, 0x0) 09:12:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x1000000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) [ 2761.469620] FAULT_INJECTION: forcing a failure. [ 2761.469620] name failslab, interval 1, probability 0, space 0, times 0 [ 2761.473750] CPU: 1 PID: 11605 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2761.475576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2761.477756] Call Trace: [ 2761.478456] dump_stack+0x107/0x167 [ 2761.479438] should_fail.cold+0x5/0xa [ 2761.480451] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2761.481965] should_failslab+0x5/0x20 [ 2761.482984] kmem_cache_alloc+0x5b/0x310 [ 2761.484077] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2761.485552] radix_tree_extend+0x231/0x490 [ 2761.486682] idr_get_free+0x623/0x8f0 [ 2761.487711] idr_alloc_u32+0x170/0x2d0 [ 2761.488750] ? __fprop_inc_percpu_max+0x130/0x130 [ 2761.490038] ? lock_acquire+0x197/0x470 [ 2761.491113] ? __kernfs_new_node+0xff/0x860 [ 2761.492286] idr_alloc_cyclic+0x102/0x230 [ 2761.493390] ? idr_alloc+0x130/0x130 [ 2761.494382] ? rwlock_bug.part.0+0x90/0x90 [ 2761.495545] __kernfs_new_node+0x117/0x860 [ 2761.496654] ? mark_held_locks+0x9e/0xe0 [ 2761.497727] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2761.498994] ? cpumask_next+0x1f/0x30 [ 2761.499997] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2761.501230] ? pcpu_alloc+0x12a/0x1240 [ 2761.502270] kernfs_new_node+0x18d/0x250 [ 2761.503370] kernfs_create_dir_ns+0x49/0x160 [ 2761.504534] cgroup_mkdir+0x315/0xf50 [ 2761.505548] ? cgroup_destroy_locked+0x710/0x710 [ 2761.506794] kernfs_iop_mkdir+0x14d/0x1e0 [ 2761.507901] vfs_mkdir+0x493/0x750 [ 2761.508840] do_mkdirat+0x150/0x2b0 [ 2761.509805] ? user_path_create+0xf0/0xf0 [ 2761.510921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2761.512297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2761.513657] do_syscall_64+0x33/0x40 [ 2761.514643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2761.516005] RIP: 0033:0x7fce19a4eb19 [ 2761.516988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2761.521815] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2761.523833] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2761.525702] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2761.527585] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2761.529449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2761.531341] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:12:18 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0xf, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:12:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 19) 09:12:36 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:36 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x18, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:12:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x2000000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:12:36 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x0, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:12:36 executing program 0: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="a1430a7ff3ef04e76a71380954fcf254b23b6fea8b807b5597822196c2dc9c291668c487ae913d33f60628fdccf7a6bcdc0d7486fd89ac98caf423d775d1ff12acfc07ca60c3d7e0", @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000a0001007770616e30000000"], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000041) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x14, r9, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x22008041) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x48100) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) 09:12:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x25dfdbfb, {0x30}}, 0x14}}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x12240, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40090) [ 2778.888050] FAULT_INJECTION: forcing a failure. [ 2778.888050] name failslab, interval 1, probability 0, space 0, times 0 [ 2778.890549] CPU: 1 PID: 11642 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2778.892014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2778.893746] Call Trace: [ 2778.894309] dump_stack+0x107/0x167 [ 2778.895082] should_fail.cold+0x5/0xa [ 2778.895894] ? create_object.isra.0+0x3a/0xa20 [ 2778.896864] should_failslab+0x5/0x20 [ 2778.897668] kmem_cache_alloc+0x5b/0x310 [ 2778.898530] ? stack_trace_consume_entry+0x160/0x160 [ 2778.899615] create_object.isra.0+0x3a/0xa20 [ 2778.900543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2778.901625] kmem_cache_alloc+0x159/0x310 [ 2778.902513] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2778.903695] radix_tree_extend+0x231/0x490 [ 2778.904578] idr_get_free+0x623/0x8f0 [ 2778.905399] idr_alloc_u32+0x170/0x2d0 [ 2778.906230] ? __fprop_inc_percpu_max+0x130/0x130 [ 2778.907241] ? lock_acquire+0x197/0x470 [ 2778.908089] ? __kernfs_new_node+0xff/0x860 [ 2778.909005] idr_alloc_cyclic+0x102/0x230 [ 2778.909893] ? idr_alloc+0x130/0x130 [ 2778.910684] ? rwlock_bug.part.0+0x90/0x90 [ 2778.911596] __kernfs_new_node+0x117/0x860 [ 2778.912495] ? mark_held_locks+0x9e/0xe0 [ 2778.913355] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2778.914359] ? cpumask_next+0x1f/0x30 [ 2778.915175] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2778.916161] ? pcpu_alloc+0x12a/0x1240 [ 2778.917020] kernfs_new_node+0x18d/0x250 [ 2778.917885] kernfs_create_dir_ns+0x49/0x160 [ 2778.918816] cgroup_mkdir+0x315/0xf50 [ 2778.919634] ? cgroup_destroy_locked+0x710/0x710 [ 2778.920633] kernfs_iop_mkdir+0x14d/0x1e0 [ 2778.921506] vfs_mkdir+0x493/0x750 [ 2778.922257] do_mkdirat+0x150/0x2b0 [ 2778.923024] ? user_path_create+0xf0/0xf0 [ 2778.923907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2778.925008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2778.926092] do_syscall_64+0x33/0x40 [ 2778.926878] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2778.927933] RIP: 0033:0x7fce19a4eb19 [ 2778.928699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2778.932788] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2778.934690] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2778.936462] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2778.938156] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2778.939818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2778.941356] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:12:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 20) 09:12:52 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x3000000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:12:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="140027bd704029dbdf2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:12:52 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x0, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:12:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0xc0, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:12:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)={0x6c, r1, 0x1, 0x0, 0x0, {0x30}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}}, 0x0) 09:12:52 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:52 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2795.243965] FAULT_INJECTION: forcing a failure. [ 2795.243965] name failslab, interval 1, probability 0, space 0, times 0 [ 2795.246654] CPU: 1 PID: 11655 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2795.248151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2795.249941] Call Trace: [ 2795.250513] dump_stack+0x107/0x167 [ 2795.251298] should_fail.cold+0x5/0xa [ 2795.252142] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2795.253365] should_failslab+0x5/0x20 [ 2795.254190] kmem_cache_alloc+0x5b/0x310 [ 2795.255071] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2795.256295] idr_get_free+0x4b5/0x8f0 [ 2795.257124] idr_alloc_u32+0x170/0x2d0 [ 2795.257949] ? __fprop_inc_percpu_max+0x130/0x130 [ 2795.258975] ? lock_acquire+0x197/0x470 [ 2795.259822] ? __kernfs_new_node+0xff/0x860 [ 2795.260741] idr_alloc_cyclic+0x102/0x230 [ 2795.261624] ? idr_alloc+0x130/0x130 [ 2795.262412] ? rwlock_bug.part.0+0x90/0x90 [ 2795.263322] __kernfs_new_node+0x117/0x860 [ 2795.264249] ? mark_held_locks+0x9e/0xe0 [ 2795.265125] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2795.266135] ? cpumask_next+0x1f/0x30 [ 2795.266943] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2795.267945] ? pcpu_alloc+0x12a/0x1240 [ 2795.268796] kernfs_new_node+0x18d/0x250 [ 2795.269666] kernfs_create_dir_ns+0x49/0x160 [ 2795.270599] cgroup_mkdir+0x315/0xf50 [ 2795.271428] ? cgroup_destroy_locked+0x710/0x710 [ 2795.272439] kernfs_iop_mkdir+0x14d/0x1e0 [ 2795.273319] vfs_mkdir+0x493/0x750 [ 2795.274080] do_mkdirat+0x150/0x2b0 [ 2795.274850] ? user_path_create+0xf0/0xf0 [ 2795.275739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2795.276845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2795.277934] do_syscall_64+0x33/0x40 [ 2795.278721] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2795.279808] RIP: 0033:0x7fce19a4eb19 [ 2795.280595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2795.284522] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2795.286135] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2795.287661] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2795.289175] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.290696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2795.292213] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:12:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x9000000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:12:52 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x0, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:12:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="8b3239f3", @ANYRES16=r1, @ANYBLOB="01000000000000000000310000000a0001007770616e300000000500330000000000"], 0x28}}, 0x0) 09:12:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0xec0, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:12:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fdcadf2523000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000000000000300000000000"], 0x14}}, 0x0) 09:12:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 21) 09:12:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048804}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000031a9b58e3d00ff070000000500330000006e1b000000343c53a92323"], 0x28}}, 0x0) 09:12:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0xf000000, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:12:52 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:12:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="14f10000", @ANYRES16=r2, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) 09:12:52 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2795.605683] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2795.621750] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2795.640937] FAULT_INJECTION: forcing a failure. [ 2795.640937] name failslab, interval 1, probability 0, space 0, times 0 [ 2795.643714] CPU: 0 PID: 11699 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2795.645202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2795.646941] Call Trace: [ 2795.647517] dump_stack+0x107/0x167 [ 2795.648287] should_fail.cold+0x5/0xa [ 2795.649089] ? create_object.isra.0+0x3a/0xa20 [ 2795.650043] should_failslab+0x5/0x20 [ 2795.650835] kmem_cache_alloc+0x5b/0x310 [ 2795.651702] create_object.isra.0+0x3a/0xa20 [ 2795.652612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2795.653694] kmem_cache_alloc+0x159/0x310 [ 2795.654569] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2795.655751] idr_get_free+0x4b5/0x8f0 [ 2795.656572] idr_alloc_u32+0x170/0x2d0 [ 2795.657392] ? __fprop_inc_percpu_max+0x130/0x130 [ 2795.658403] ? lock_acquire+0x197/0x470 [ 2795.659238] ? __kernfs_new_node+0xff/0x860 [ 2795.660159] idr_alloc_cyclic+0x102/0x230 [ 2795.661047] ? idr_alloc+0x130/0x130 [ 2795.661825] ? rwlock_bug.part.0+0x90/0x90 [ 2795.662723] __kernfs_new_node+0x117/0x860 [ 2795.663625] ? mark_held_locks+0x9e/0xe0 [ 2795.664491] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2795.665487] ? cpumask_next+0x1f/0x30 [ 2795.666290] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2795.667263] ? pcpu_alloc+0x12a/0x1240 [ 2795.668102] kernfs_new_node+0x18d/0x250 [ 2795.668961] kernfs_create_dir_ns+0x49/0x160 [ 2795.669890] cgroup_mkdir+0x315/0xf50 [ 2795.670699] ? cgroup_destroy_locked+0x710/0x710 [ 2795.671701] kernfs_iop_mkdir+0x14d/0x1e0 [ 2795.672574] vfs_mkdir+0x493/0x750 [ 2795.673327] do_mkdirat+0x150/0x2b0 [ 2795.674111] ? user_path_create+0xf0/0xf0 [ 2795.674980] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2795.676092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2795.677180] do_syscall_64+0x33/0x40 [ 2795.677974] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2795.679054] RIP: 0033:0x7fce19a4eb19 [ 2795.679848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2795.683703] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2795.685314] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2795.686815] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2795.688325] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.689827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2795.691354] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:13:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x33fe0, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:13:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 22) 09:13:07 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0xc0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:13:07 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x0, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:13:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00\x00'], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:iptables_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}]}, 0x88}}, 0x4008000) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x59}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24004040) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 09:13:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0xffffff7f, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:13:07 executing program 6: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:07 executing program 6: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2810.444978] FAULT_INJECTION: forcing a failure. [ 2810.444978] name failslab, interval 1, probability 0, space 0, times 0 [ 2810.447722] CPU: 0 PID: 11725 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2810.449191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2810.450940] Call Trace: [ 2810.451502] dump_stack+0x107/0x167 [ 2810.452288] should_fail.cold+0x5/0xa [ 2810.453095] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2810.454309] should_failslab+0x5/0x20 [ 2810.455110] kmem_cache_alloc+0x5b/0x310 [ 2810.455994] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2810.457178] idr_get_free+0x4b5/0x8f0 [ 2810.457999] idr_alloc_u32+0x170/0x2d0 [ 2810.458824] ? __fprop_inc_percpu_max+0x130/0x130 [ 2810.459856] ? lock_acquire+0x197/0x470 [ 2810.460695] ? __kernfs_new_node+0xff/0x860 [ 2810.461612] idr_alloc_cyclic+0x102/0x230 [ 2810.462485] ? idr_alloc+0x130/0x130 [ 2810.463263] ? rwlock_bug.part.0+0x90/0x90 [ 2810.464179] __kernfs_new_node+0x117/0x860 [ 2810.465069] ? mark_held_locks+0x9e/0xe0 [ 2810.465931] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2810.466932] ? cpumask_next+0x1f/0x30 [ 2810.467743] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2810.468847] ? pcpu_alloc+0x12a/0x1240 [ 2810.469814] kernfs_new_node+0x18d/0x250 [ 2810.470820] kernfs_create_dir_ns+0x49/0x160 [ 2810.471950] cgroup_mkdir+0x315/0xf50 [ 2810.472903] ? cgroup_destroy_locked+0x710/0x710 [ 2810.474061] kernfs_iop_mkdir+0x14d/0x1e0 [ 2810.475151] vfs_mkdir+0x493/0x750 [ 2810.476097] do_mkdirat+0x150/0x2b0 [ 2810.477044] ? user_path_create+0xf0/0xf0 [ 2810.478125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2810.479485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2810.480842] do_syscall_64+0x33/0x40 [ 2810.481707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2810.482897] RIP: 0033:0x7fce19a4eb19 [ 2810.483872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2810.488574] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2810.490502] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2810.492313] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2810.494126] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2810.495942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2810.497752] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:13:07 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x0, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:13:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x20000894, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:13:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0xf, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:13:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="080000005b7d5f790041ba162d0cdc12d79c829f6d4668ac377bdc1bd5fa79eaa69561", @ANYRES16=r1, @ANYBLOB="020027bd7000ffdbdf25210000000c000500000000000000000009001f0070687932000000000c0005000201aaaaaaaaaaaa"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20004050) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x48}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x38}}, 0x0) 09:13:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) 09:13:08 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x7ffff000, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:13:24 executing program 6: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:24 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:13:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 23) 09:13:24 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x0, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:13:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x2, 0x0, 0x0, {0x30}}, 0x14}}, 0x2004c860) 09:13:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0xc0, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) [ 2827.508080] FAULT_INJECTION: forcing a failure. [ 2827.508080] name failslab, interval 1, probability 0, space 0, times 0 [ 2827.510810] CPU: 1 PID: 11760 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2827.512318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2827.514109] Call Trace: [ 2827.514681] dump_stack+0x107/0x167 [ 2827.515468] should_fail.cold+0x5/0xa [ 2827.516305] ? create_object.isra.0+0x3a/0xa20 [ 2827.517369] should_failslab+0x5/0x20 [ 2827.518193] kmem_cache_alloc+0x5b/0x310 [ 2827.519064] ? mark_held_locks+0x9e/0xe0 [ 2827.519950] create_object.isra.0+0x3a/0xa20 [ 2827.520919] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2827.522008] kmem_cache_alloc+0x159/0x310 09:13:24 executing program 6: mknod$loop(0x0, 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2827.522892] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2827.524069] idr_get_free+0x4b5/0x8f0 [ 2827.525269] idr_alloc_u32+0x170/0x2d0 [ 2827.526277] ? __fprop_inc_percpu_max+0x130/0x130 [ 2827.527405] ? lock_acquire+0x197/0x470 [ 2827.528378] ? __kernfs_new_node+0xff/0x860 [ 2827.529371] idr_alloc_cyclic+0x102/0x230 [ 2827.530354] ? idr_alloc+0x130/0x130 [ 2827.531211] ? rwlock_bug.part.0+0x90/0x90 [ 2827.532225] __kernfs_new_node+0x117/0x860 [ 2827.533199] ? mark_held_locks+0x9e/0xe0 [ 2827.534155] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2827.535240] ? cpumask_next+0x1f/0x30 09:13:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0xfffffdef, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) [ 2827.536082] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2827.537339] ? pcpu_alloc+0x12a/0x1240 [ 2827.538308] kernfs_new_node+0x18d/0x250 [ 2827.539257] kernfs_create_dir_ns+0x49/0x160 [ 2827.540228] cgroup_mkdir+0x315/0xf50 [ 2827.541023] ? cgroup_destroy_locked+0x710/0x710 [ 2827.542010] kernfs_iop_mkdir+0x14d/0x1e0 [ 2827.542877] vfs_mkdir+0x493/0x750 [ 2827.543634] do_mkdirat+0x150/0x2b0 [ 2827.544423] ? user_path_create+0xf0/0xf0 [ 2827.545373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2827.546568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2827.547649] do_syscall_64+0x33/0x40 09:13:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x228000, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) r3 = fcntl$dupfd(r1, 0x406, r1) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r2, 0x8, r3, 0xb) sendto(r3, &(0x7f0000000100)="d8dba25e59829ac240ea6f3e6b7a03aad330740a87dfca35973b8ba92868fb9b52d147d20291ec33bee8068b1c532d7a333193f917ba576a34250cbc55ef6e877ad9dc5171e6142d79f96065a84ca0b9926c237545ada6b436742476b9738a9b6140bc45b3e71eb226c8c15e708cbae91f01dea51e8162c4c5898faebb69e3dec854d3335a28732768073a86d72609da3afe53a7a5eb6d2f27deaa13eafedac565194b1b142f92ce", 0xa8, 0x20004000, &(0x7f00000001c0)=@isdn={0x22, 0x3f, 0x80, 0x0, 0x7f}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '[}:H]}/\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc04c084}, 0x4008010) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf2530000000"], 0x14}}, 0x0) [ 2827.548434] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2827.549684] RIP: 0033:0x7fce19a4eb19 [ 2827.550515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2827.555280] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2827.557260] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2827.559113] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2827.560968] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2827.562819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2827.564713] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:13:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0xec0, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:13:24 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) r2 = fcntl$dupfd(r0, 0x406, r0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, r2, 0xb) fsetxattr$security_capability(r2, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0xe2, 0xc2}, {0x400, 0x3}], 0xffffffffffffffff}, 0x18, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:13:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x33fe0, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:13:25 executing program 6: mknod$loop(0x0, 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:25 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x0, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:13:25 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x8, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:13:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 24) 09:13:42 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:42 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x0, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:13:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="16000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000031000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) 09:13:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x20000894, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:13:42 executing program 6: mknod$loop(0x0, 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="14ceecd74ccf24aea4d2803cbf6d000000", @ANYRES16=r1, @ANYBLOB="5207f3ffffffffff2f00800098775b02955abc4783def495878c00f5e856fd14f6b514726c6bdc6a09f36976908c6cf80e436a1c4a58ba74623f46c1ac7e8ee232fbde955968871c40dc125d4828dd1200"/93], 0x14}}, 0x0) 09:13:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 09:13:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x7ffff000, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) [ 2845.259275] FAULT_INJECTION: forcing a failure. [ 2845.259275] name failslab, interval 1, probability 0, space 0, times 0 [ 2845.262212] CPU: 0 PID: 11811 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2845.263699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2845.265543] Call Trace: [ 2845.266123] dump_stack+0x107/0x167 [ 2845.266922] should_fail.cold+0x5/0xa [ 2845.267763] ? selinux_kernfs_init_security+0x137/0x4c0 [ 2845.268956] should_failslab+0x5/0x20 [ 2845.269783] __kmalloc+0x72/0x390 [ 2845.270547] selinux_kernfs_init_security+0x137/0x4c0 [ 2845.271676] ? selinux_file_mprotect+0x610/0x610 [ 2845.272742] ? find_held_lock+0x2c/0x110 [ 2845.273636] ? __kernfs_new_node+0x2ad/0x860 [ 2845.274595] ? lock_downgrade+0x6d0/0x6d0 [ 2845.275502] ? rwlock_bug.part.0+0x90/0x90 [ 2845.276460] security_kernfs_init_security+0x4e/0xb0 [ 2845.277571] __kernfs_new_node+0x531/0x860 09:13:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x49}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xe2}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}]}, 0x4c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x28, r1, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) [ 2845.278501] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2845.279589] ? cpumask_next+0x1f/0x30 [ 2845.280455] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2845.281475] ? pcpu_alloc+0x12a/0x1240 [ 2845.282331] kernfs_new_node+0x18d/0x250 [ 2845.283227] kernfs_create_dir_ns+0x49/0x160 [ 2845.284228] cgroup_mkdir+0x315/0xf50 [ 2845.285066] ? cgroup_destroy_locked+0x710/0x710 [ 2845.286102] kernfs_iop_mkdir+0x14d/0x1e0 [ 2845.287013] vfs_mkdir+0x493/0x750 [ 2845.287792] do_mkdirat+0x150/0x2b0 [ 2845.288621] ? user_path_create+0xf0/0xf0 [ 2845.289532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2845.290676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2845.291806] do_syscall_64+0x33/0x40 [ 2845.292654] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2845.293774] RIP: 0033:0x7fce19a4eb19 [ 2845.294585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2845.298630] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2845.300324] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2845.301879] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2845.303437] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2845.305027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2845.306585] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:13:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x18, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:13:42 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:42 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0xfffffdef, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:13:57 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="08000000e7d63d8a5269e74479c09c72c6e0f41ecd4387fc95f884eb", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) 09:13:57 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 25) 09:13:57 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x0, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:13:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x2e, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:13:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x8, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:13:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f770000000000000000fb000000fd00010000000000d68403cd69bbc86087959a2c5bcbc2a38045b8cbfaab4205d89fbe4f2bb87a45bbcd0cc8829c22bb5d7bd3eeec60cec542be021cbbc3c419db1a6673626826f45a73e6ee5cbce16723a416eb5cb66fc1110a125fe6bc05b270ff6832ce5b2b83ff98eaaabe8e725a50aa66adb5d22143169f62d86425fde44b757e15e22c695d5ed02b847167a41028695a2e5a4dd2608c4e79de1cf8e5cdda74de6bf04703c27d"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r11, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fddbdf252000000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="2248698fe52d4fb8a0df305447098708000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="0c000600030000000300000024002280080002000000000005000400010000000500010001000000050004000000000008000300", @ANYRES32=r13, @ANYBLOB], 0x6c}}, 0x24000080) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000840}, 0x80) 09:13:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) 09:13:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 09:13:58 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:13:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x18, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) [ 2860.758999] FAULT_INJECTION: forcing a failure. [ 2860.758999] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.761670] CPU: 0 PID: 11865 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2860.763136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.764889] Call Trace: [ 2860.765447] dump_stack+0x107/0x167 [ 2860.766213] should_fail.cold+0x5/0xa [ 2860.767015] ? create_object.isra.0+0x3a/0xa20 [ 2860.767971] should_failslab+0x5/0x20 [ 2860.768777] kmem_cache_alloc+0x5b/0x310 [ 2860.769616] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2860.770632] create_object.isra.0+0x3a/0xa20 [ 2860.771541] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2860.772621] __kmalloc+0x16e/0x390 [ 2860.773381] selinux_kernfs_init_security+0x137/0x4c0 [ 2860.774479] ? selinux_file_mprotect+0x610/0x610 [ 2860.775465] ? find_held_lock+0x2c/0x110 [ 2860.776325] ? __kernfs_new_node+0x2ad/0x860 [ 2860.777236] ? lock_downgrade+0x6d0/0x6d0 [ 2860.778093] ? rwlock_bug.part.0+0x90/0x90 [ 2860.778984] security_kernfs_init_security+0x4e/0xb0 [ 2860.780048] __kernfs_new_node+0x531/0x860 [ 2860.780946] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2860.781941] ? cpumask_next+0x1f/0x30 [ 2860.782734] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2860.783723] ? pcpu_alloc+0x12a/0x1240 [ 2860.784550] kernfs_new_node+0x18d/0x250 [ 2860.785412] kernfs_create_dir_ns+0x49/0x160 [ 2860.786346] cgroup_mkdir+0x315/0xf50 [ 2860.787149] ? cgroup_destroy_locked+0x710/0x710 [ 2860.788138] kernfs_iop_mkdir+0x14d/0x1e0 [ 2860.789017] vfs_mkdir+0x493/0x750 [ 2860.789766] do_mkdirat+0x150/0x2b0 [ 2860.790525] ? user_path_create+0xf0/0xf0 [ 2860.791407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2860.792545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2860.793641] do_syscall_64+0x33/0x40 [ 2860.794422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2860.795508] RIP: 0033:0x7fce19a4eb19 [ 2860.796299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.800203] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2860.801824] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2860.803337] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2860.804862] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2860.806382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2860.807909] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:14:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 26) 09:14:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x2, 0x0, {0x2e}}, 0x14}}, 0x0) 09:14:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r2, r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r3, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000fbdbdf2523000000050022000100000005002800ff00000005002300ff00220a"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404d001}, 0x400c090) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008081}, 0x10010) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x48, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) 09:14:13 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:14:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x2b, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:14:13 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x0, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:14:13 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:14:13 executing program 0: ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000980)={{}, "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"}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 09:14:13 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) [ 2876.629374] FAULT_INJECTION: forcing a failure. [ 2876.629374] name failslab, interval 1, probability 0, space 0, times 0 [ 2876.632076] CPU: 0 PID: 11917 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2876.633558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2876.635330] Call Trace: [ 2876.635899] dump_stack+0x107/0x167 [ 2876.636697] should_fail.cold+0x5/0xa [ 2876.637523] should_failslab+0x5/0x20 [ 2876.638347] __kmalloc_track_caller+0x79/0x370 [ 2876.639331] ? security_context_to_sid_core+0xb4/0x890 [ 2876.640472] kmemdup_nul+0x2d/0xa0 [ 2876.641236] security_context_to_sid_core+0xb4/0x890 [ 2876.642342] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2876.643497] ? do_raw_spin_lock+0x121/0x260 [ 2876.644425] ? rwlock_bug.part.0+0x90/0x90 [ 2876.645329] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2876.646353] ? do_raw_spin_unlock+0x4f/0x220 [ 2876.647302] ? _raw_spin_unlock+0x1a/0x30 [ 2876.648181] security_context_to_sid+0x35/0x50 [ 2876.649167] selinux_kernfs_init_security+0x19d/0x4c0 [ 2876.650247] ? selinux_file_mprotect+0x610/0x610 [ 2876.651226] ? find_held_lock+0x2c/0x110 [ 2876.652091] ? __kernfs_new_node+0x2ad/0x860 [ 2876.653029] ? lock_downgrade+0x6d0/0x6d0 [ 2876.653900] ? rwlock_bug.part.0+0x90/0x90 [ 2876.654791] security_kernfs_init_security+0x4e/0xb0 [ 2876.655862] __kernfs_new_node+0x531/0x860 [ 2876.656763] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2876.657768] ? cpumask_next+0x1f/0x30 [ 2876.658566] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2876.659563] ? pcpu_alloc+0x12a/0x1240 [ 2876.660390] kernfs_new_node+0x18d/0x250 [ 2876.661253] kernfs_create_dir_ns+0x49/0x160 [ 2876.662196] cgroup_mkdir+0x315/0xf50 [ 2876.663023] ? cgroup_destroy_locked+0x710/0x710 [ 2876.664019] kernfs_iop_mkdir+0x14d/0x1e0 [ 2876.664909] vfs_mkdir+0x493/0x750 [ 2876.665665] do_mkdirat+0x150/0x2b0 [ 2876.666441] ? user_path_create+0xf0/0xf0 [ 2876.667325] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2876.668457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2876.669543] do_syscall_64+0x33/0x40 [ 2876.670330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2876.671420] RIP: 0033:0x7fce19a4eb19 [ 2876.672211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2876.676115] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2876.677742] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2876.679249] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2876.680767] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2876.682566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2876.684361] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:14:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x3, 0x0, {0x2e}}, 0x14}}, 0x0) 09:14:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 09:14:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=ANY=[@ANYBLOB="080000001ce2404d9e8959d6669f0ea7ba09014a415c6cbf25b8c5f58325c4caebdf06b3ab", @ANYRES16=r1, @ANYBLOB="01000000000000000000310000000a0001007770616e300000000500330000000000"], 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004800}, 0x24040081) 09:14:14 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) r2 = fcntl$dupfd(r0, 0x406, r0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, r1, 0x8, r2, 0xb) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={r3, r4/1000+10000}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r6, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) 09:14:14 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:14:14 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, 0x0) 09:14:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x2, 0x0, {0x2b}}, 0x14}}, 0x0) 09:14:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x8, 0x0, {0x2e}}, 0x14}}, 0x0) 09:14:32 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, 0x0) 09:14:32 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:14:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x3, 0x0, {0x2b}}, 0x14}}, 0x0) 09:14:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r2, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) 09:14:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 27) 09:14:32 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x0, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:14:32 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x38}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:14:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x8, 0x0, {0x2b}}, 0x14}}, 0x0) [ 2895.158305] FAULT_INJECTION: forcing a failure. [ 2895.158305] name failslab, interval 1, probability 0, space 0, times 0 [ 2895.161085] CPU: 0 PID: 11964 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2895.162683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2895.164881] Call Trace: [ 2895.165595] dump_stack+0x107/0x167 [ 2895.166544] should_fail.cold+0x5/0xa [ 2895.167532] ? create_object.isra.0+0x3a/0xa20 [ 2895.168742] should_failslab+0x5/0x20 [ 2895.169742] kmem_cache_alloc+0x5b/0x310 [ 2895.170808] create_object.isra.0+0x3a/0xa20 [ 2895.171946] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2895.173288] __kmalloc_track_caller+0x177/0x370 [ 2895.174490] ? security_context_to_sid_core+0xb4/0x890 [ 2895.175873] kmemdup_nul+0x2d/0xa0 [ 2895.176818] security_context_to_sid_core+0xb4/0x890 [ 2895.178156] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2895.179561] ? do_raw_spin_lock+0x121/0x260 [ 2895.180688] ? rwlock_bug.part.0+0x90/0x90 [ 2895.181858] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2895.183212] ? do_raw_spin_unlock+0x4f/0x220 [ 2895.184354] ? _raw_spin_unlock+0x1a/0x30 [ 2895.185459] security_context_to_sid+0x35/0x50 [ 2895.186661] selinux_kernfs_init_security+0x19d/0x4c0 [ 2895.188003] ? selinux_file_mprotect+0x610/0x610 [ 2895.189240] ? find_held_lock+0x2c/0x110 [ 2895.190301] ? __kernfs_new_node+0x2ad/0x860 [ 2895.191440] ? lock_downgrade+0x6d0/0x6d0 [ 2895.192519] ? rwlock_bug.part.0+0x90/0x90 [ 2895.193644] security_kernfs_init_security+0x4e/0xb0 [ 2895.194979] __kernfs_new_node+0x531/0x860 [ 2895.196086] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2895.197332] ? cpumask_next+0x1f/0x30 [ 2895.198226] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2895.199321] ? pcpu_alloc+0x12a/0x1240 [ 2895.200238] kernfs_new_node+0x18d/0x250 [ 2895.201867] kernfs_create_dir_ns+0x49/0x160 [ 2895.202830] cgroup_mkdir+0x315/0xf50 [ 2895.203646] ? cgroup_destroy_locked+0x710/0x710 [ 2895.204669] kernfs_iop_mkdir+0x14d/0x1e0 [ 2895.205559] vfs_mkdir+0x493/0x750 [ 2895.206332] do_mkdirat+0x150/0x2b0 [ 2895.207104] ? user_path_create+0xf0/0xf0 [ 2895.207990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2895.209123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2895.210245] do_syscall_64+0x33/0x40 [ 2895.211034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2895.212142] RIP: 0033:0x7fce19a4eb19 [ 2895.212947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2895.216939] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2895.218570] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2895.220090] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2895.221612] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2895.223128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2895.224633] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:14:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x9, 0x0, {0x2e}}, 0x14}}, 0x0) 09:14:32 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x0, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:14:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000de", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) 09:14:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x49}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x44}}, 0x8001) 09:14:32 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, 0x0) 09:14:32 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:14:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x9, 0x0, {0x2b}}, 0x14}}, 0x0) 09:14:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0xf, 0x0, {0x2e}}, 0x14}}, 0x0) 09:14:32 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:14:46 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:14:46 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:14:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x300, 0x0, {0x2e}}, 0x14}}, 0x0) 09:14:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0xf, 0x0, {0x2b}}, 0x14}}, 0x0) 09:14:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000980)=ANY=[@ANYBLOB="0080000000000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00228005000400010000000c00060002000000000000000c0006000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008008}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004048}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r10, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0xc011}, 0x26004805) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xc7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000810}, 0x40881) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000014000600766574683100000000000000000000001400020000000000000000000000ffffac141400"], 0x3c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xac}, 0x1, 0x0, 0x0, 0x44005}, 0x4040004) 09:14:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 28) 09:14:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x4}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0d4}, 0x40810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2f, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x4c, r1, 0x10, 0x70bd2d, 0x0, {0x30}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x80}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1d}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x200000c4) 09:14:46 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:14:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x300, 0x0, {0x2b}}, 0x14}}, 0x0) [ 2908.953054] FAULT_INJECTION: forcing a failure. [ 2908.953054] name failslab, interval 1, probability 0, space 0, times 0 [ 2908.956344] CPU: 1 PID: 12015 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2908.958014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2908.959998] Call Trace: [ 2908.960638] dump_stack+0x107/0x167 [ 2908.961535] should_fail.cold+0x5/0xa [ 2908.962462] should_failslab+0x5/0x20 [ 2908.963523] __kmalloc_track_caller+0x79/0x370 [ 2908.964645] ? sidtab_sid2str_get+0x17e/0x720 [ 2908.965783] kmemdup+0x23/0x50 [ 2908.966579] sidtab_sid2str_get+0x17e/0x720 [ 2908.967657] sidtab_entry_to_string+0x33/0x110 [ 2908.968806] security_sid_to_context_core+0x33c/0x5d0 [ 2908.970093] selinux_kernfs_init_security+0x239/0x4c0 [ 2908.971390] ? selinux_file_mprotect+0x610/0x610 [ 2908.972570] ? find_held_lock+0x2c/0x110 [ 2908.973588] ? __kernfs_new_node+0x2ad/0x860 [ 2908.974631] ? rwlock_bug.part.0+0x90/0x90 [ 2908.975640] security_kernfs_init_security+0x4e/0xb0 [ 2908.976937] __kernfs_new_node+0x531/0x860 09:14:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x900, 0x0, {0x2e}}, 0x14}}, 0x0) [ 2908.978243] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2908.979627] ? cpumask_next+0x1f/0x30 [ 2908.980480] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2908.981658] ? pcpu_alloc+0x12a/0x1240 [ 2908.982604] kernfs_new_node+0x18d/0x250 [ 2908.983487] kernfs_create_dir_ns+0x49/0x160 [ 2908.984476] cgroup_mkdir+0x315/0xf50 [ 2908.985427] ? cgroup_destroy_locked+0x710/0x710 [ 2908.986436] kernfs_iop_mkdir+0x14d/0x1e0 [ 2908.987347] vfs_mkdir+0x493/0x750 [ 2908.988120] do_mkdirat+0x150/0x2b0 [ 2908.988930] ? user_path_create+0xf0/0xf0 [ 2908.989852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2908.991015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2908.992130] do_syscall_64+0x33/0x40 [ 2908.992955] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2908.994205] RIP: 0033:0x7fce19a4eb19 [ 2908.995030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2908.999085] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2909.000873] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2909.002491] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2909.003919] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2909.005462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2909.007080] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:14:46 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:14:46 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:14:46 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="a1430a7ff3ef04e76a71380954fcf254b23b6fea8b807b5597822196c2dc9c291668c487ae913d33f60628fdccf7a6bcdc0d7486fd89ac98caf423d775d1ff12acfc07ca60c3d7e0", @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000a0001007770616e30000000"], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000041) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x14, r9, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x22008041) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x48100) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) 09:14:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x900, 0x0, {0x2b}}, 0x14}}, 0x0) 09:14:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0xf00, 0x0, {0x2e}}, 0x14}}, 0x0) 09:14:46 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:14:46 executing program 3: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x1ff, &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) 09:14:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 29) 09:14:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0xf00, 0x0, {0x2b}}, 0x14}}, 0x0) 09:14:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd}]}, 0x28}}, 0xc801) [ 2909.449816] FAULT_INJECTION: forcing a failure. [ 2909.449816] name failslab, interval 1, probability 0, space 0, times 0 [ 2909.452765] CPU: 1 PID: 12069 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2909.454496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2909.456302] Call Trace: [ 2909.457027] dump_stack+0x107/0x167 [ 2909.457820] should_fail.cold+0x5/0xa [ 2909.458642] ? create_object.isra.0+0x3a/0xa20 [ 2909.459628] should_failslab+0x5/0x20 [ 2909.460466] kmem_cache_alloc+0x5b/0x310 [ 2909.461480] create_object.isra.0+0x3a/0xa20 [ 2909.462432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2909.463545] __kmalloc_track_caller+0x177/0x370 [ 2909.464577] ? simple_xattr_set+0x93/0x610 [ 2909.465513] kstrdup+0x36/0x70 [ 2909.466178] simple_xattr_set+0x93/0x610 [ 2909.467042] kernfs_xattr_set+0x50/0x80 [ 2909.468005] selinux_kernfs_init_security+0x26d/0x4c0 [ 2909.469200] ? selinux_file_mprotect+0x610/0x610 [ 2909.470296] ? find_held_lock+0x2c/0x110 [ 2909.471266] ? __kernfs_new_node+0x2ad/0x860 [ 2909.472193] ? rwlock_bug.part.0+0x90/0x90 [ 2909.473207] security_kernfs_init_security+0x4e/0xb0 [ 2909.474391] __kernfs_new_node+0x531/0x860 [ 2909.475374] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2909.476508] ? cpumask_next+0x1f/0x30 [ 2909.477432] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2909.478531] ? pcpu_alloc+0x12a/0x1240 [ 2909.479485] kernfs_new_node+0x18d/0x250 [ 2909.480516] kernfs_create_dir_ns+0x49/0x160 [ 2909.481627] cgroup_mkdir+0x315/0xf50 [ 2909.482579] ? cgroup_destroy_locked+0x710/0x710 [ 2909.483788] kernfs_iop_mkdir+0x14d/0x1e0 [ 2909.484877] vfs_mkdir+0x493/0x750 [ 2909.485765] do_mkdirat+0x150/0x2b0 [ 2909.486720] ? user_path_create+0xf0/0xf0 [ 2909.487793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2909.489155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2909.490475] do_syscall_64+0x33/0x40 [ 2909.491445] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2909.492772] RIP: 0033:0x7fce19a4eb19 [ 2909.493748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2909.498508] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2909.500497] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2909.502114] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2909.503585] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2909.505074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2909.506542] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:15:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 30) 09:15:01 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:15:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x30000, 0x0, {0x2b}}, 0x14}}, 0x0) 09:15:01 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="a1430a7ff3ef04e76a71380954fcf254b23b6fea8b807b5597822196c2dc9c291668c487ae913d33f60628fdccf7a6bcdc0d7486fd89ac98caf423d775d1ff12acfc07ca60c3d7e0", @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000a0001007770616e30000000"], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000041) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x14, r9, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x22008041) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x48100) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) 09:15:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x30000, 0x0, {0x2e}}, 0x14}}, 0x0) 09:15:01 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:15:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2747dc13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24ebaba8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7244}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e6ffdb9}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x671c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x545958c2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe449}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x470c8950}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4a8}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10800}, 0x44041) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="00042cbd7000fcdbdf25010000000800020002000000c00008800c00078008000600af004f00140007800800060032000000080006006c0000005400078008000600a300000008001400149a946c080006007a00000008000500bffba6000800060038000000080005007310b960080006002c0000000800050022eb9d0b080006003700000008000600bc0000001400078008000500fd4da2070800060033000000340007800800050084c52b1108000500b3eae96708000500adb82e7308000500f6bb4d1208000600f800000008000600f10000000800020000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 09:15:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1f6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xd16f}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x78}, 0x1, 0x0, 0x0, 0x24044880}, 0x40) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r2, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) [ 2924.529773] FAULT_INJECTION: forcing a failure. [ 2924.529773] name failslab, interval 1, probability 0, space 0, times 0 [ 2924.531442] CPU: 1 PID: 12085 Comm: syz-executor.5 Not tainted 5.10.235 #1 09:15:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="2800ffc2", @ANYRES16=r1, @ANYBLOB="01000000000000000000310000000a0001007770616e300000000500330000000000"], 0x28}}, 0x0) [ 2924.532301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2924.533448] Call Trace: [ 2924.533807] dump_stack+0x107/0x167 [ 2924.534270] should_fail.cold+0x5/0xa [ 2924.534754] should_failslab+0x5/0x20 [ 2924.535231] __kmalloc_track_caller+0x79/0x370 [ 2924.535842] ? kstrdup_const+0x53/0x80 [ 2924.536307] kstrdup+0x36/0x70 [ 2924.536704] kstrdup_const+0x53/0x80 [ 2924.537173] __kernfs_new_node+0x9d/0x860 [ 2924.537692] ? lock_acquire+0x197/0x470 [ 2924.538194] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2924.538771] ? __kernfs_iattrs+0x63/0x470 [ 2924.539287] ? find_held_lock+0x2c/0x110 [ 2924.539797] kernfs_new_node+0x18d/0x250 [ 2924.540303] __kernfs_create_file+0x51/0x350 [ 2924.540863] cgroup_addrm_files+0x3c8/0x9b0 [ 2924.541412] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2924.541976] ? kernfs_setattr+0x36/0x50 [ 2924.542448] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2924.542965] ? cgroup_file_name+0x220/0x220 [ 2924.545427] ? cgroup_propagate_control+0x3b9/0x520 [ 2924.546040] css_populate_dir+0x304/0x460 [ 2924.546516] cgroup_mkdir+0xa10/0xf50 [ 2924.546956] ? cgroup_destroy_locked+0x710/0x710 [ 2924.547488] kernfs_iop_mkdir+0x14d/0x1e0 [ 2924.547963] vfs_mkdir+0x493/0x750 [ 2924.548366] do_mkdirat+0x150/0x2b0 [ 2924.548785] ? user_path_create+0xf0/0xf0 [ 2924.549282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2924.549954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2924.550616] do_syscall_64+0x33/0x40 [ 2924.551101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2924.551751] RIP: 0033:0x7fce19a4eb19 [ 2924.552224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2924.554685] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2924.555719] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2924.556682] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2924.557672] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2924.558640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2924.559608] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 [ 2924.560873] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 09:15:01 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:15:18 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:15:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf2530000000050034000400000005003300060000000a0001007770616e3100000094996958d4cc042d9bf808005d292b1726e85402"], 0x30}}, 0x2) 09:15:18 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:15:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 31) 09:15:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x34000, 0x0, {0x2b}}, 0x14}}, 0x0) 09:15:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x34000, 0x0, {0x2e}}, 0x14}}, 0x0) 09:15:18 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="a1430a7ff3ef04e76a71380954fcf254b23b6fea8b807b5597822196c2dc9c291668c487ae913d33f60628fdccf7a6bcdc0d7486fd89ac98caf423d775d1ff12acfc07ca60c3d7e0", @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000a0001007770616e30000000"], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000041) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x14, r9, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x22008041) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x48100) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) 09:15:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r5) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r7, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x2c000) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7f, 0x9, 0x95, 0xde, 0x0, 0x3f, 0x28021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xff, 0x4}, 0x1821, 0xc9d, 0x40, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc40, 0x0, 0xfff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r10, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="2869000080", @ANYRES16=r1, @ANYBLOB="01000000000000000000310000000a0001007770616e300000000500330000000000"], 0x28}}, 0x0) 09:15:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x80000, 0x0, {0x2e}}, 0x14}}, 0x0) [ 2941.698260] FAULT_INJECTION: forcing a failure. [ 2941.698260] name failslab, interval 1, probability 0, space 0, times 0 [ 2941.701274] CPU: 1 PID: 12116 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2941.702792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2941.704588] Call Trace: [ 2941.705170] dump_stack+0x107/0x167 [ 2941.705981] should_fail.cold+0x5/0xa [ 2941.706817] ? create_object.isra.0+0x3a/0xa20 [ 2941.707800] should_failslab+0x5/0x20 [ 2941.708619] kmem_cache_alloc+0x5b/0x310 [ 2941.709501] ? find_held_lock+0x2c/0x110 [ 2941.710378] create_object.isra.0+0x3a/0xa20 [ 2941.711315] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2941.712446] kmem_cache_alloc+0x159/0x310 [ 2941.713365] __kernfs_iattrs+0xbc/0x470 [ 2941.714218] kernfs_xattr_set+0x2b/0x80 [ 2941.715083] selinux_kernfs_init_security+0x26d/0x4c0 [ 2941.716189] ? selinux_file_mprotect+0x610/0x610 [ 2941.717198] ? find_held_lock+0x2c/0x110 [ 2941.718084] ? __kernfs_new_node+0x2ad/0x860 [ 2941.719034] ? rwlock_bug.part.0+0x90/0x90 [ 2941.719942] security_kernfs_init_security+0x4e/0xb0 [ 2941.721030] __kernfs_new_node+0x531/0x860 [ 2941.721950] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2941.722972] ? cpumask_next+0x1f/0x30 [ 2941.723790] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2941.724790] ? pcpu_alloc+0x12a/0x1240 [ 2941.725639] kernfs_new_node+0x18d/0x250 [ 2941.726514] kernfs_create_dir_ns+0x49/0x160 [ 2941.727461] cgroup_mkdir+0x315/0xf50 [ 2941.728285] ? cgroup_destroy_locked+0x710/0x710 [ 2941.729312] kernfs_iop_mkdir+0x14d/0x1e0 [ 2941.730201] vfs_mkdir+0x493/0x750 [ 2941.730964] do_mkdirat+0x150/0x2b0 [ 2941.731747] ? user_path_create+0xf0/0xf0 [ 2941.732637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2941.733767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2941.734874] do_syscall_64+0x33/0x40 [ 2941.735673] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2941.736768] RIP: 0033:0x7fce19a4eb19 [ 2941.737574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2941.741561] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2941.743194] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2941.744712] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2941.746266] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2941.747786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2941.749313] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:15:19 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:15:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f4ffffffffff010000003d0000000f8e100e6d6a0faa444c3444361cd9251d8b51f84824e7de490c6ce007106cc8402b0e81c2d06ee2da9098385276dda73dbd485512e6d5272dd90af66112b7bfb4818b96c5e0b56cb70924267ad311e799535bb7ee64648e011dd22e766f2d630c5a3b0c8bd5229d5eae174eb85da3344205e1b28e0a23b5c04fee618a1c7070099d53f31feb5b9cbf6e00"/162], 0x14}}, 0x0) 09:15:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x80000, 0x0, {0x2b}}, 0x14}}, 0x0) 09:15:19 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="a1430a7ff3ef04e76a71380954fcf254b23b6fea8b807b5597822196c2dc9c291668c487ae913d33f60628fdccf7a6bcdc0d7486fd89ac98caf423d775d1ff12acfc07ca60c3d7e0", @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000a0001007770616e30000000"], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000041) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x14, r9, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x22008041) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x48100) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) 09:15:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x400300, 0x0, {0x2e}}, 0x14}}, 0x0) 09:15:19 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:15:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x1000000, 0x0, {0x2e}}, 0x14}}, 0x0) 09:15:34 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:15:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2f770000000000000000fb0000000800010000000000d68403cd69bbde6087959a2c5bcbc2a38045b8cbfaab4205d89fbe4f2bb87a45bbcd0cc8829c22bb5d7bd3eeec60cec542be021cbbc3c419db1a6673626826f45a73e6ee5cbce16723a416eb5cb66fc1110a125fe6bc05b270ff6832ce5b2b83ff98eaaabe8e725a50aa66adb5d22143169f62d86425fde44b757e15e22c695d5ed02b847167a41028695a2e5a4dd2608c4e79de1cf8e5cdda74de6bf04703c27d"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0080}, 0x100) 09:15:34 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="a1430a7ff3ef04e76a71380954fcf254b23b6fea8b807b5597822196c2dc9c291668c487ae913d33f60628fdccf7a6bcdc0d7486fd89ac98caf423d775d1ff12acfc07ca60c3d7e0", @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000a0001007770616e30000000"], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000041) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x14, r9, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x22008041) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) 09:15:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 32) 09:15:34 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:15:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x400300, 0x0, {0x2b}}, 0x14}}, 0x0) 09:15:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0xfffffffc, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) [ 2957.633080] FAULT_INJECTION: forcing a failure. [ 2957.633080] name failslab, interval 1, probability 0, space 0, times 0 [ 2957.636110] CPU: 1 PID: 12158 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2957.637754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2957.639666] Call Trace: [ 2957.640307] dump_stack+0x107/0x167 [ 2957.641357] should_fail.cold+0x5/0xa [ 2957.642275] ? kvmalloc_node+0x119/0x170 [ 2957.643190] should_failslab+0x5/0x20 [ 2957.644148] __kmalloc_node+0x76/0x420 [ 2957.645180] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2957.646476] kvmalloc_node+0x119/0x170 [ 2957.647512] simple_xattr_alloc+0x43/0xa0 [ 2957.648612] simple_xattr_set+0x75/0x610 [ 2957.649789] kernfs_xattr_set+0x50/0x80 [ 2957.650857] selinux_kernfs_init_security+0x26d/0x4c0 [ 2957.652043] ? selinux_file_mprotect+0x610/0x610 [ 2957.653048] ? find_held_lock+0x2c/0x110 [ 2957.653952] ? __kernfs_new_node+0x2ad/0x860 [ 2957.654884] ? rwlock_bug.part.0+0x90/0x90 [ 2957.655810] security_kernfs_init_security+0x4e/0xb0 [ 2957.656885] __kernfs_new_node+0x531/0x860 [ 2957.657825] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2957.658829] ? cpumask_next+0x1f/0x30 [ 2957.659664] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2957.660649] ? pcpu_alloc+0x12a/0x1240 [ 2957.661518] kernfs_new_node+0x18d/0x250 [ 2957.662379] kernfs_create_dir_ns+0x49/0x160 [ 2957.663384] cgroup_mkdir+0x315/0xf50 [ 2957.664200] ? cgroup_destroy_locked+0x710/0x710 [ 2957.665231] kernfs_iop_mkdir+0x14d/0x1e0 [ 2957.666124] vfs_mkdir+0x493/0x750 [ 2957.666900] do_mkdirat+0x150/0x2b0 [ 2957.667667] ? user_path_create+0xf0/0xf0 [ 2957.668574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2957.669669] do_syscall_64+0x33/0x40 [ 2957.670483] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2957.671563] RIP: 0033:0x7fce19a4eb19 [ 2957.672380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2957.676267] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2957.677951] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2957.679507] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2957.681072] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2957.682637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2957.684208] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:15:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x2000000, 0x0, {0x2e}}, 0x14}}, 0x0) 09:15:35 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:15:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x1000000, 0x0, {0x2b}}, 0x14}}, 0x0) 09:15:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x0) 09:15:35 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="a1430a7ff3ef04e76a71380954fcf254b23b6fea8b807b5597822196c2dc9c291668c487ae913d33f60628fdccf7a6bcdc0d7486fd89ac98caf423d775d1ff12acfc07ca60c3d7e0", @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000a0001007770616e30000000"], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000041) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) 09:15:35 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:15:35 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) dup2(r2, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x40, 0xb8, 0x3, 0x80, 0x0, 0x6, 0x4b01, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x40300, 0x5, 0x7ff, 0x7, 0x4, 0xff, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x1, 0xffffffffffffffff, 0x1b) 09:15:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x2000000, 0x0, {0x2b}}, 0x14}}, 0x0) 09:15:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x3000000, 0x0, {0x2e}}, 0x14}}, 0x0) 09:15:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000031000000678fd8640a0001007770616e300000000500330023a33cfd275a3e69453a80ac4059e41c2e88b605cfe9a5a72f2b552c2ca2d40fa42532ae3eb9d73b657b9e396fb6b7fabcbb61458bed20ba44761bfe02ad5caba3c5bef1bda9663a7ab156"], 0x28}}, 0x0) 09:15:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 33) [ 2957.940213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2957.955215] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:15:35 executing program 3: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000143", @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf2d30000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040059}, 0x40084) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 09:15:35 executing program 6: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) fsopen(0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002f66696c653000004df81f017cadff9b4dfd2f7e4c41"]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) 09:15:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x3000000, 0x0, {0x2b}}, 0x14}}, 0x0) 09:15:35 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="a1430a7ff3ef04e76a71380954fcf254b23b6fea8b807b5597822196c2dc9c291668c487ae913d33f60628fdccf7a6bcdc0d7486fd89ac98caf423d775d1ff12acfc07ca60c3d7e0", @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000a0001007770616e30000000"], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) [ 2958.018022] FAULT_INJECTION: forcing a failure. [ 2958.018022] name failslab, interval 1, probability 0, space 0, times 0 [ 2958.019973] CPU: 0 PID: 12205 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2958.020991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2958.022241] Call Trace: [ 2958.022637] dump_stack+0x107/0x167 [ 2958.023173] should_fail.cold+0x5/0xa [ 2958.023770] ? create_object.isra.0+0x3a/0xa20 [ 2958.024446] should_failslab+0x5/0x20 [ 2958.024995] kmem_cache_alloc+0x5b/0x310 [ 2958.025600] ? lock_downgrade+0x6d0/0x6d0 [ 2958.026229] create_object.isra.0+0x3a/0xa20 [ 2958.026874] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2958.027613] __kmalloc_node+0x1ae/0x420 [ 2958.028264] kvmalloc_node+0x119/0x170 [ 2958.028837] simple_xattr_alloc+0x43/0xa0 [ 2958.029440] simple_xattr_set+0x75/0x610 [ 2958.030049] kernfs_xattr_set+0x50/0x80 [ 2958.030694] selinux_kernfs_init_security+0x26d/0x4c0 [ 2958.031457] ? selinux_file_mprotect+0x610/0x610 [ 2958.032141] ? find_held_lock+0x2c/0x110 [ 2958.032733] ? __kernfs_new_node+0x2ad/0x860 [ 2958.033372] ? rwlock_bug.part.0+0x90/0x90 [ 2958.034007] security_kernfs_init_security+0x4e/0xb0 [ 2958.034780] __kernfs_new_node+0x531/0x860 [ 2958.035428] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2958.036110] ? cpumask_next+0x1f/0x30 [ 2958.036676] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2958.037349] ? pcpu_alloc+0x12a/0x1240 [ 2958.037925] kernfs_new_node+0x18d/0x250 [ 2958.038512] kernfs_create_dir_ns+0x49/0x160 [ 2958.039150] cgroup_mkdir+0x315/0xf50 [ 2958.039711] ? cgroup_destroy_locked+0x710/0x710 [ 2958.040391] kernfs_iop_mkdir+0x14d/0x1e0 [ 2958.040988] vfs_mkdir+0x493/0x750 [ 2958.041511] do_mkdirat+0x150/0x2b0 [ 2958.042035] ? user_path_create+0xf0/0xf0 [ 2958.042640] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.043390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2958.044137] do_syscall_64+0x33/0x40 [ 2958.044671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2958.045406] RIP: 0033:0x7fce19a4eb19 [ 2958.045946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2958.048585] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2958.049715] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2958.050741] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2958.051766] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2958.052790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2958.053847] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 09:15:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x9000000, 0x0, {0x2e}}, 0x14}}, 0x0) 09:15:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0x9000000, 0x0, {0x2b}}, 0x14}}, 0x0) 09:15:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYBLOB="618ee1ff672f45ef24c550b4d8dd5fbffe32d293f9c1689b74d0944af9ae2fa011aa00bb454fd1950d617266c49c21bd3eb19a416951eda739c1fd760843fff72e258f0d57d9d4f6b869421ef68452df1a054e6cae4c5d5e955865ee19e8ad9ba42d828b83eafdc6ab671189a32b13a40a8e8c571a1545ff4b59cad77ba99bf2248439672b68e3063b07a2ff098d7985b2a57e8f0d6dccb9741af5a4", @ANYBLOB="010002072c010000800000000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000002764e8f40ca01600000000000400000014000600766574683100000000000000000000001400020000000000000000000000ffffac141400da11041c57699ea7c23b3a68b57ba7efc3066a4dc0f98290ca0c10ef9540fa2f1990d7f37af8bf8415e31d331a4b41f5ab3847a77d3e8a5590bfe69892478067b6523e66be4f6a09272af0498e"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) 09:15:35 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="a1430a7ff3ef04e76a71380954fcf254b23b6fea8b807b5597822196c2dc9c291668c487ae913d33f60628fdccf7a6bcdc0d7486fd89ac98caf423d775d1ff12acfc07ca60c3d7e0", @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000a0001007770616e30000000"], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r8) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) 09:15:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0xf000000, 0x0, {0x2b}}, 0x14}}, 0x0) 09:15:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1, 0xf000000, 0x0, {0x2e}}, 0x14}}, 0x0) 09:15:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x280008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x4f, 0x0, 0x7ff, 0x7}, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 34) [ 2958.262418] FAULT_INJECTION: forcing a failure. [ 2958.262418] name failslab, interval 1, probability 0, space 0, times 0 [ 2958.264119] CPU: 0 PID: 12238 Comm: syz-executor.5 Not tainted 5.10.235 #1 [ 2958.265035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2958.266128] Call Trace: [ 2958.266539] dump_stack+0x107/0x167 [ 2958.267028] should_fail.cold+0x5/0xa [ 2958.267532] ? create_object.isra.0+0x3a/0xa20 [ 2958.268136] should_failslab+0x5/0x20 [ 2958.268626] kmem_cache_alloc+0x5b/0x310 [ 2958.269156] ? find_held_lock+0x2c/0x110 [ 2958.269699] create_object.isra.0+0x3a/0xa20 [ 2958.270268] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2958.270964] kmem_cache_alloc+0x159/0x310 [ 2958.271510] __kernfs_iattrs+0xbc/0x470 [ 2958.272037] kernfs_xattr_set+0x2b/0x80 [ 2958.272563] selinux_kernfs_init_security+0x26d/0x4c0 [ 2958.273239] ? selinux_file_mprotect+0x610/0x610 [ 2958.273886] ? find_held_lock+0x2c/0x110 [ 2958.274418] ? __kernfs_new_node+0x2ad/0x860 [ 2958.275007] ? rwlock_bug.part.0+0x90/0x90 [ 2958.275569] security_kernfs_init_security+0x4e/0xb0 [ 2958.276242] __kernfs_new_node+0x531/0x860 [ 2958.276810] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2958.277438] ? cpumask_next+0x1f/0x30 [ 2958.277951] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2958.278554] ? pcpu_alloc+0x12a/0x1240 [ 2958.279089] kernfs_new_node+0x18d/0x250 [ 2958.279629] kernfs_create_dir_ns+0x49/0x160 [ 2958.280220] cgroup_mkdir+0x315/0xf50 [ 2958.280728] ? cgroup_destroy_locked+0x710/0x710 [ 2958.281348] kernfs_iop_mkdir+0x14d/0x1e0 [ 2958.281913] vfs_mkdir+0x493/0x750 [ 2958.282378] do_mkdirat+0x150/0x2b0 [ 2958.282852] ? user_path_create+0xf0/0xf0 [ 2958.283393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.284069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2958.284736] do_syscall_64+0x33/0x40 [ 2958.285220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2958.285895] RIP: 0033:0x7fce19a4eb19 [ 2958.286372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2958.288756] RSP: 002b:00007fce16fc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2958.289760] RAX: ffffffffffffffda RBX: 00007fce19b61f60 RCX: 00007fce19a4eb19 [ 2958.290674] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000006 [ 2958.291599] RBP: 00007fce16fc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2958.292537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2958.293451] R13: 00007ffec97e078f R14: 00007fce16fc4300 R15: 0000000000022000 [ 2973.680857] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888046cbb680 (size 144): comm "syz-executor.5", pid 12158, jiffies 4297624594 (age 23.257s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 36 5d ea 67 00 00 00 00 ........6].g.... 74 f0 5a 3a 00 00 00 00 36 5d ea 67 00 00 00 00 t.Z:....6].g.... backtrace: [<00000000d05205fe>] __kernfs_iattrs+0xbc/0x470 [<0000000070eff3bd>] kernfs_xattr_set+0x2b/0x80 [<00000000afe283b1>] selinux_kernfs_init_security+0x26d/0x4c0 [<00000000bcc0bbe4>] security_kernfs_init_security+0x4e/0xb0 [<000000004aa00650>] __kernfs_new_node+0x531/0x860 [<0000000011c58b9b>] kernfs_new_node+0x18d/0x250 [<00000000b756f474>] kernfs_create_dir_ns+0x49/0x160 [<000000000f0761e6>] cgroup_mkdir+0x315/0xf50 [<000000005cc9f0ba>] kernfs_iop_mkdir+0x14d/0x1e0 [<00000000990e1add>] vfs_mkdir+0x493/0x750 [<000000005247429a>] do_mkdirat+0x150/0x2b0 [<00000000c8e9a436>] do_syscall_64+0x33/0x40 [<0000000062d3ce3d>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: leak checking failed VM DIAGNOSIS: 09:15:58 Registers: info registers vcpu 0 RAX=ffffffff83e8ce00 RBX=0000000000000000 RCX=ffffffff83e749ac RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8d408 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85678e48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ce0e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd4309cb60 CR3=000000001953c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934343120657a697328203038366262 XMM03=3120646970202c22352e726f74756365 XMM04=2e2e2e2e2e2e2e202030302030302030 XMM05=20303020303020303020303020303020 XMM06=65747962203233207473726966282070 XMM07=33322065676128203439353432363739 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e8ce00 RBX=0000000000000001 RCX=ffffffff83e749ac RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8d408 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85678e48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ce0e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558b5d387678 CR3=000000000f03a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000414b7df000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000