t_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:35:35 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:35:35 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 1229.668184] loop2: detected capacity change from 0 to 41948160 13:35:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 13:35:35 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 13:35:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:35:35 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 13:35:35 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:35:35 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:35:35 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 13:35:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:35:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 13:35:35 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 13:35:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 13:35:48 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:35:48 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 13:35:48 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:35:48 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:35:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:35:48 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 13:35:48 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f0008000000000000000000ff0250831958000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205f06a498ecce8c2e2bac055023a5c6a60048ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd28ccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f6365815fbaeed820000161d17c3a8446ef221d39d3504136905c2a587000000000000224cab6b3426f7aca5dcf032ec434c3ad68f54a9206946735225076eee7fd7cb35c0b06b2b8f925971d75e9889d3ea0a9d6959c090419ce3f6b1b4eb35ef1cb65122537fb5a794f71da1e6fae5c881bc83d458f97e6eb70cc5b3ca6dd4ec51524272620363fe56522b82c0ca9b89f564ddc64d8ca8b2b803207b72ee280f837d6f2be1f7f6c37c28fb0067d56e7574afdcc35c47645ffa74c26e91df9ace7b773459b987ad777043d71e12df0700d72483ab6489bffb00000000000000000000000000000000003e521370adeffb5357d5d6eef885594d33addb3fa1f821561d84cd342060fd4ebfbb98e3c635945a519da82404168ccd1112edf4e85bc47af3d1077ebffd59b691dd6131dc270c06515083d1489a3b713c97c197c6cb90b17b04dad833de21d66041ce1360cfa0e2552e28bda10744c5550e308c53e4e6cff9456be143f162ccc658a49f2c1ccc7d30e7800085dba28bfee6d705000d131a0a1dac4dac4535cfde1eee17aff22f4d009cb71305d239a21898882d1bdd607ba69ded308d9c7f05cae2c3b2cbc8ca82"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) [ 1242.493459] loop2: detected capacity change from 0 to 41948160 13:35:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:35:48 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 13:35:48 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 13:35:48 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:35:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:35:48 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 13:36:04 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:36:04 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 13:36:04 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:36:04 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:04 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:36:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) [ 1258.641474] loop2: detected capacity change from 0 to 41948160 13:36:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) 13:36:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:04 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 13:36:04 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:04 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:36:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) 13:36:04 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:36:04 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:36:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:18 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:18 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:36:18 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:18 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:18 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) 13:36:18 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:36:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f0008000000000000000000ff0250831958000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205f06a498ecce8c2e2bac055023a5c6a60048ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd28ccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f6365815fbaeed820000161d17c3a8446ef221d39d3504136905c2a587000000000000224cab6b3426f7aca5dcf032ec434c3ad68f54a9206946735225076eee7fd7cb35c0b06b2b8f925971d75e9889d3ea0a9d6959c090419ce3f6b1b4eb35ef1cb65122537fb5a794f71da1e6fae5c881bc83d458f97e6eb70cc5b3ca6dd4ec51524272620363fe56522b82c0ca9b89f564ddc64d8ca8b2b803207b72ee280f837d6f2be1f7f6c37c28fb0067d56e7574afdcc35c47645ffa74c26e91df9ace7b773459b987ad777043d71e12df0700d72483ab6489bffb00000000000000000000000000000000003e521370adeffb5357d5d6eef885594d33addb3fa1f821561d84cd342060fd4ebfbb98e3c635945a519da82404168ccd1112edf4e85bc47af3d1077ebffd59b691dd6131dc270c06515083d1489a3b713c97c197c6cb90b17b04dad833de21d66041ce1360cfa0e2552e28bda10744c5550e308c53e4e6cff9456be143f162ccc658a49f2c1ccc7d30e7800085dba28bfee6d705000d131a0a1dac4dac4535cfde1eee17aff22f4d009cb71305d239a21898882d1bdd607ba69ded308d9c7f05cae2c3b2cbc8ca82"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:36:19 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1272.981652] loop2: detected capacity change from 0 to 41948160 13:36:19 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:19 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:36:19 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 13:36:19 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:36:19 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:19 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1273.241292] perf: interrupt took too long (16069 > 16052), lowering kernel.perf_event_max_sample_rate to 12000 13:36:19 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:34 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:34 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:34 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:34 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:36:34 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 13:36:34 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:36:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) [ 1288.805989] loop2: detected capacity change from 0 to 41948160 13:36:34 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:34 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 13:36:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 13:36:34 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:34 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:35 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:36:35 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:36:50 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:36:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 13:36:50 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:36:50 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:50 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = fsmount(r3, 0x1, 0x1) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 13:36:50 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:50 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="20b33b8deae695818aadca1bd8b9d600"/29]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 13:36:50 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 1) 13:36:50 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:50 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:36:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 1304.339053] FAULT_INJECTION: forcing a failure. [ 1304.339053] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1304.341669] CPU: 1 PID: 14777 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1304.343130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.345062] Call Trace: [ 1304.345748] dump_stack+0x107/0x167 [ 1304.346569] should_fail.cold+0x5/0xa [ 1304.347477] _copy_from_user+0x2e/0x1b0 [ 1304.348535] __copy_msghdr_from_user+0x91/0x4b0 [ 1304.349641] ? __ia32_sys_shutdown+0x80/0x80 [ 1304.350669] ? perf_trace_lock+0xac/0x490 [ 1304.351636] ? __lock_acquire+0x1657/0x5b00 [ 1304.352658] ? __lock_acquire+0xbb1/0x5b00 [ 1304.353670] sendmsg_copy_msghdr+0xa1/0x160 [ 1304.354682] ? do_recvmmsg+0x6d0/0x6d0 [ 1304.355598] ? perf_trace_lock+0xac/0x490 [ 1304.356579] ? lock_downgrade+0x6d0/0x6d0 [ 1304.357572] ? __lockdep_reset_lock+0x180/0x180 [ 1304.358671] ___sys_sendmsg+0xc6/0x170 [ 1304.359601] ? sendmsg_copy_msghdr+0x160/0x160 [ 1304.360684] ? __fget_files+0x2cf/0x520 [ 1304.361628] ? lock_downgrade+0x6d0/0x6d0 [ 1304.362602] ? find_held_lock+0x2c/0x110 [ 1304.363580] ? __fget_files+0x2f8/0x520 [ 1304.364516] ? __fget_light+0xea/0x290 13:36:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 13:36:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 1) [ 1304.365444] __sys_sendmsg+0xe5/0x1b0 [ 1304.366523] ? __sys_sendmsg_sock+0x40/0x40 [ 1304.367536] ? rcu_read_lock_any_held+0x75/0xa0 [ 1304.368630] ? fput_many+0x2f/0x1a0 [ 1304.369501] ? ksys_write+0x1a9/0x260 [ 1304.370394] ? __ia32_sys_read+0xb0/0xb0 [ 1304.371354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1304.372574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.373799] ? trace_hardirqs_on+0x5b/0x180 [ 1304.374838] do_syscall_64+0x33/0x40 [ 1304.375736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.376972] RIP: 0033:0x7f23527dab19 [ 1304.377873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.382279] RSP: 002b:00007f234fd50188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.384103] RAX: ffffffffffffffda RBX: 00007f23528edf60 RCX: 00007f23527dab19 [ 1304.385828] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 1304.387540] RBP: 00007f234fd501d0 R08: 0000000000000000 R09: 0000000000000000 13:36:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1304.389263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.391090] R13: 00007ffc434bcf5f R14: 00007f234fd50300 R15: 0000000000022000 13:37:11 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = fsmount(r3, 0x1, 0x1) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 13:37:11 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:37:11 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:37:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 13:37:11 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 2) 13:37:11 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) [ 1325.943416] FAULT_INJECTION: forcing a failure. [ 1325.943416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.944964] CPU: 0 PID: 14819 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1325.945840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1325.946866] Call Trace: [ 1325.947196] dump_stack+0x107/0x167 [ 1325.947651] should_fail.cold+0x5/0xa [ 1325.948122] _copy_from_user+0x2e/0x1b0 [ 1325.948616] iovec_from_user+0x141/0x400 [ 1325.949115] __import_iovec+0x67/0x590 [ 1325.949606] ? __ia32_sys_shutdown+0x80/0x80 [ 1325.950143] ? perf_trace_lock+0xac/0x490 [ 1325.950659] import_iovec+0x83/0xb0 [ 1325.951107] sendmsg_copy_msghdr+0x131/0x160 [ 1325.951642] ? do_recvmmsg+0x6d0/0x6d0 [ 1325.952119] ? lock_downgrade+0x6d0/0x6d0 [ 1325.952625] ? __lockdep_reset_lock+0x180/0x180 [ 1325.953196] ___sys_sendmsg+0xc6/0x170 [ 1325.953679] ? sendmsg_copy_msghdr+0x160/0x160 [ 1325.954244] ? __fget_files+0x2cf/0x520 [ 1325.954731] ? lock_downgrade+0x6d0/0x6d0 [ 1325.955238] ? find_held_lock+0x2c/0x110 [ 1325.955741] ? __fget_files+0x2f8/0x520 [ 1325.956231] ? __fget_light+0xea/0x290 [ 1325.956714] __sys_sendmsg+0xe5/0x1b0 [ 1325.957178] ? __sys_sendmsg_sock+0x40/0x40 [ 1325.957716] ? rcu_read_lock_any_held+0x75/0xa0 [ 1325.958288] ? fput_many+0x2f/0x1a0 [ 1325.958736] ? ksys_write+0x1a9/0x260 [ 1325.959207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1325.959854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1325.960490] ? trace_hardirqs_on+0x5b/0x180 [ 1325.961017] do_syscall_64+0x33/0x40 [ 1325.961477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1325.962104] RIP: 0033:0x7f23527dab19 [ 1325.962561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.964824] RSP: 002b:00007f234fd50188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.965760] RAX: ffffffffffffffda RBX: 00007f23528edf60 RCX: 00007f23527dab19 [ 1325.966800] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 1325.967703] RBP: 00007f234fd501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.968585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.969475] R13: 00007ffc434bcf5f R14: 00007f234fd50300 R15: 0000000000022000 13:37:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:12 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 13:37:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 13:37:12 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:37:12 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 13:37:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 13:37:12 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 3) 13:37:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1326.259507] FAULT_INJECTION: forcing a failure. [ 1326.259507] name failslab, interval 1, probability 0, space 0, times 1 [ 1326.260997] CPU: 0 PID: 14912 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1326.261867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1326.262797] Call Trace: [ 1326.263101] dump_stack+0x107/0x167 [ 1326.263514] should_fail.cold+0x5/0xa [ 1326.263946] ? __alloc_skb+0x6d/0x5b0 [ 1326.264374] should_failslab+0x5/0x20 [ 1326.264806] kmem_cache_alloc_node+0x55/0x330 [ 1326.265319] __alloc_skb+0x6d/0x5b0 [ 1326.265749] netlink_sendmsg+0x998/0xe00 [ 1326.266210] ? netlink_unicast+0xa00/0xa00 [ 1326.266694] ? netlink_unicast+0xa00/0xa00 [ 1326.267174] __sock_sendmsg+0x154/0x190 [ 1326.267625] ____sys_sendmsg+0x70d/0x870 [ 1326.268084] ? sock_write_iter+0x3d0/0x3d0 [ 1326.268562] ? do_recvmmsg+0x6d0/0x6d0 [ 1326.269004] ? lock_downgrade+0x6d0/0x6d0 [ 1326.269476] ? __lockdep_reset_lock+0x180/0x180 [ 1326.270003] ___sys_sendmsg+0xf3/0x170 [ 1326.270443] ? sendmsg_copy_msghdr+0x160/0x160 [ 1326.270961] ? __fget_files+0x2cf/0x520 [ 1326.271409] ? lock_downgrade+0x6d0/0x6d0 [ 1326.271877] ? find_held_lock+0x2c/0x110 [ 1326.272340] ? __fget_files+0x2f8/0x520 [ 1326.272793] ? __fget_light+0xea/0x290 [ 1326.273236] __sys_sendmsg+0xe5/0x1b0 [ 1326.273672] ? __sys_sendmsg_sock+0x40/0x40 [ 1326.274157] ? rcu_read_lock_any_held+0x75/0xa0 [ 1326.274689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1326.275282] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1326.275861] ? trace_hardirqs_on+0x5b/0x180 [ 1326.276355] do_syscall_64+0x33/0x40 [ 1326.276775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1326.277354] RIP: 0033:0x7f23527dab19 [ 1326.277782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1326.279855] RSP: 002b:00007f234fd50188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1326.280713] RAX: ffffffffffffffda RBX: 00007f23528edf60 RCX: 00007f23527dab19 [ 1326.281521] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 1326.282324] RBP: 00007f234fd501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1326.283126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.283933] R13: 00007ffc434bcf5f R14: 00007f234fd50300 R15: 0000000000022000 13:37:28 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 13:37:28 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:37:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:37:28 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = fsmount(r3, 0x1, 0x1) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 13:37:28 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:37:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:28 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 4) 13:37:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) [ 1342.809693] FAULT_INJECTION: forcing a failure. [ 1342.809693] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.812008] CPU: 1 PID: 14949 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1342.813429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1342.815148] Call Trace: [ 1342.815691] dump_stack+0x107/0x167 [ 1342.816427] should_fail.cold+0x5/0xa [ 1342.817204] ? create_object.isra.0+0x3a/0xa20 [ 1342.818141] should_failslab+0x5/0x20 [ 1342.818920] kmem_cache_alloc+0x5b/0x310 [ 1342.819755] create_object.isra.0+0x3a/0xa20 [ 1342.820656] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1342.821712] kmem_cache_alloc_node+0x169/0x330 [ 1342.822661] __alloc_skb+0x6d/0x5b0 [ 1342.823407] netlink_sendmsg+0x998/0xe00 [ 1342.824251] ? netlink_unicast+0xa00/0xa00 [ 1342.825118] ? netlink_unicast+0xa00/0xa00 [ 1342.825982] __sock_sendmsg+0x154/0x190 [ 1342.826798] ____sys_sendmsg+0x70d/0x870 [ 1342.827641] ? sock_write_iter+0x3d0/0x3d0 [ 1342.828488] ? do_recvmmsg+0x6d0/0x6d0 [ 1342.829293] ? lock_downgrade+0x6d0/0x6d0 [ 1342.830169] ? __lockdep_reset_lock+0x180/0x180 [ 1342.831130] ___sys_sendmsg+0xf3/0x170 [ 1342.831924] ? sendmsg_copy_msghdr+0x160/0x160 [ 1342.832874] ? __fget_files+0x2cf/0x520 [ 1342.833695] ? lock_downgrade+0x6d0/0x6d0 [ 1342.834533] ? find_held_lock+0x2c/0x110 [ 1342.835369] ? __fget_files+0x2f8/0x520 [ 1342.836188] ? __fget_light+0xea/0x290 [ 1342.836989] __sys_sendmsg+0xe5/0x1b0 [ 1342.837777] ? __sys_sendmsg_sock+0x40/0x40 [ 1342.838660] ? rcu_read_lock_any_held+0x75/0xa0 [ 1342.839629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1342.840702] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1342.841762] ? trace_hardirqs_on+0x5b/0x180 [ 1342.842637] do_syscall_64+0x33/0x40 [ 1342.843408] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1342.844452] RIP: 0033:0x7f23527dab19 [ 1342.845209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1342.848999] RSP: 002b:00007f234fd50188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1342.850672] RAX: ffffffffffffffda RBX: 00007f23528edf60 RCX: 00007f23527dab19 [ 1342.852336] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 1342.853829] RBP: 00007f234fd501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1342.855437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.857282] R13: 00007ffc434bcf5f R14: 00007f234fd50300 R15: 0000000000022000 13:37:28 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 13:37:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:29 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 13:37:29 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:37:29 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 5) 13:37:29 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:37:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1343.252331] FAULT_INJECTION: forcing a failure. [ 1343.252331] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.254950] CPU: 1 PID: 15080 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1343.256461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1343.258293] Call Trace: [ 1343.258895] dump_stack+0x107/0x167 [ 1343.259719] should_fail.cold+0x5/0xa [ 1343.260592] should_failslab+0x5/0x20 [ 1343.261457] __kmalloc_node_track_caller+0x74/0x3b0 [ 1343.262545] ? netlink_sendmsg+0x998/0xe00 [ 1343.263469] __alloc_skb+0xb1/0x5b0 [ 1343.264268] netlink_sendmsg+0x998/0xe00 [ 1343.265173] ? netlink_unicast+0xa00/0xa00 [ 1343.266122] ? netlink_unicast+0xa00/0xa00 [ 1343.267050] __sock_sendmsg+0x154/0x190 [ 1343.267952] ____sys_sendmsg+0x70d/0x870 [ 1343.268850] ? sock_write_iter+0x3d0/0x3d0 [ 1343.269809] ? do_recvmmsg+0x6d0/0x6d0 [ 1343.270698] ? lock_downgrade+0x6d0/0x6d0 [ 1343.271631] ? __lockdep_reset_lock+0x180/0x180 [ 1343.272659] ___sys_sendmsg+0xf3/0x170 [ 1343.273524] ? sendmsg_copy_msghdr+0x160/0x160 [ 1343.274544] ? __fget_files+0x2cf/0x520 [ 1343.275459] ? lock_downgrade+0x6d0/0x6d0 [ 1343.276396] ? find_held_lock+0x2c/0x110 [ 1343.277318] ? __fget_files+0x2f8/0x520 [ 1343.278216] ? __fget_light+0xea/0x290 [ 1343.279104] __sys_sendmsg+0xe5/0x1b0 [ 1343.279965] ? __sys_sendmsg_sock+0x40/0x40 [ 1343.280947] ? rcu_read_lock_any_held+0x75/0xa0 [ 1343.282014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1343.283164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1343.284314] ? trace_hardirqs_on+0x5b/0x180 [ 1343.285276] do_syscall_64+0x33/0x40 [ 1343.286118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1343.287265] RIP: 0033:0x7f23527dab19 [ 1343.288097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1343.292138] RSP: 002b:00007f234fd50188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1343.294091] RAX: ffffffffffffffda RBX: 00007f23528edf60 RCX: 00007f23527dab19 [ 1343.295689] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 1343.297683] RBP: 00007f234fd501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1343.299477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.301104] R13: 00007ffc434bcf5f R14: 00007f234fd50300 R15: 0000000000022000 13:37:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1361.627826] FAT-fs (loop2): bogus number of reserved sectors [ 1361.628745] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1361.640321] FAULT_INJECTION: forcing a failure. [ 1361.640321] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.642917] CPU: 0 PID: 15204 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1361.644638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.646458] Call Trace: [ 1361.647069] dump_stack+0x107/0x167 [ 1361.647901] should_fail.cold+0x5/0xa [ 1361.648772] ? create_object.isra.0+0x3a/0xa20 [ 1361.649832] should_failslab+0x5/0x20 [ 1361.650683] kmem_cache_alloc+0x5b/0x310 [ 1361.651578] create_object.isra.0+0x3a/0xa20 [ 1361.652558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1361.653706] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1361.654846] ? netlink_sendmsg+0x998/0xe00 [ 1361.655794] __alloc_skb+0xb1/0x5b0 [ 1361.656625] netlink_sendmsg+0x998/0xe00 [ 1361.657535] ? netlink_unicast+0xa00/0xa00 [ 1361.658495] ? netlink_unicast+0xa00/0xa00 [ 1361.659430] __sock_sendmsg+0x154/0x190 [ 1361.660303] ____sys_sendmsg+0x70d/0x870 [ 1361.661195] ? sock_write_iter+0x3d0/0x3d0 [ 1361.662108] ? do_recvmmsg+0x6d0/0x6d0 [ 1361.662951] ? lock_downgrade+0x6d0/0x6d0 [ 1361.663844] ? __lockdep_reset_lock+0x180/0x180 [ 1361.664841] ___sys_sendmsg+0xf3/0x170 [ 1361.665673] ? sendmsg_copy_msghdr+0x160/0x160 [ 1361.666685] ? __fget_files+0x2cf/0x520 [ 1361.667545] ? lock_downgrade+0x6d0/0x6d0 [ 1361.668482] ? find_held_lock+0x2c/0x110 [ 1361.669599] ? __fget_files+0x2f8/0x520 [ 1361.670696] ? __fget_light+0xea/0x290 [ 1361.671769] __sys_sendmsg+0xe5/0x1b0 [ 1361.672790] ? __sys_sendmsg_sock+0x40/0x40 [ 1361.673975] ? rcu_read_lock_any_held+0x75/0xa0 [ 1361.675209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1361.676606] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1361.678001] ? trace_hardirqs_on+0x5b/0x180 [ 1361.679076] do_syscall_64+0x33/0x40 [ 1361.679902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.681238] RIP: 0033:0x7f23527dab19 [ 1361.682072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.686067] RSP: 002b:00007f234fd50188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.687691] RAX: ffffffffffffffda RBX: 00007f23528edf60 RCX: 00007f23527dab19 [ 1361.689213] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 1361.690733] RBP: 00007f234fd501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.692235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.693750] R13: 00007ffc434bcf5f R14: 00007f234fd50300 R15: 0000000000022000 13:37:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6d7cf708bc06516e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x865}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) sendmmsg$inet6(r1, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x417, @private0, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000140)="9c149b7fef18544af333d47b6e9b82df0327779dfecd19cd107d70a2a0675692277fbf3a3172cec151e5c6de9222cb1256fd541662d681543bf6f48b232682345711c3620b3e8656bf2925379a23c98c8f532fb65d68c7d409b26765efeb5a4933385345cefa5b80d3f68db096bc2cfaa319609bab4309e83bd65bcce6826c2b301ce9d95157d2b8c985072b869886b33cacb356e7ed65e2d6f065b1b12625277403a295fa947e8c701efda70f128f4416578b4e809c9b2323e09c", 0xbb}, {&(0x7f0000000200)="d1ae0a23a8b77e295137041d17b86d9c74cd125a2625f398324253e0d697440518e649ed5c32f7525725c6e09767be56e6c5a5766d8c87998ec6cdb4a9b77ad63c192e0d805bea74293fe1fa5afaab71ace37bf50c4227b8843cf9441a5f3c18b620963e171b11c81ed58c757bb5920263e79beb02e9db3ced8b4801bdaa4f9cdce660d8ad4eba9648db0a0593ee14004c4208f714bac2a273b088a54d96e37e7d176626265f51eb66d8fe5b8df1153d3708d8b17df6024597", 0xb9}, {&(0x7f00000002c0)="29c589de2758f71b91b61ae3cad08175baa2ce7fba38378a11c9ab7c4730f99db535c43b449799b023bde8a376baadffb3bc91065b5c4d69cbeda9c40ef29662c3067a06f17aefa15bfb31d890981721dc48a6ea1cc833d72ff6bf032bf966da2d2a59b06e255c615dc972841c958c8ab0e861b63397835bf71bb62abd98209e0fe47e1a458ed219d2f975d4bc29dd332d1a0f23ca0039fb9c72", 0x9a}, {&(0x7f0000000380)="b624b25f74e169c3ccd7c2c1b88474e264ddafc1750d41d1aa77867ac43f37c817a53c510f9c649a8e22860e574c859407fd3c7c966788cea0088272cc93993a6d3f2fea61c4c6bbe956a37603d317ec67e45c20bb31655e803eddc4242c6ab876556ffd2e596ccf5f8798ecae68d107e8ae6a79bce755f07d564c32f38c9c3706c77601ddc950b31249faed1c0831d307591fd550588ec8d3ebc8678026af777f6d1565a2a8ec4f8f94a0af9ae80445e1e9231259c2a60095934f3d073e3bc1cb6e72edc3ca13164de51cb0804d", 0xce}, {&(0x7f0000000480)="7e6e06b4c2e064aad20fb844b7d866f386f13c620f87dea89b26f1f1b034b62eb61d451ff60e5e5ce65e67539610f7e00a79e8d1d4e0d1d423e1b21a9bafb8d3d33c6acc115537d626fee8b451b6b63644b347057b26281a97d3b87116975c8ff83da30f66832a3f058f1395f1db4c61bca7f4f66ca4a2fdad88dd5d41bdd81c67992a95d270aa37de63e69ebc5753e5abffbb5dd4e786f4bf56f9d6ed4b4044ecd1249030bc546a4a8a81c8eb565c4fe96c15c958c43c5156039aed8ad477420b5b6516de1692bb095eb5afbe7ce15baca7b5b8cfd5a62ffa1127b86c8c8776dbfb077be0dff427401197b2df7fcde97c13e99c", 0xf4}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000680)="2dc00083e7677c54f5cfd1f128675644e31991f3220fd3b94206de0cf6979549c413ee8cd09c1cd56784fb59b8db63c5c277f4505fae002958dc56b9b8fa77cbc200fb9ffba01070a3d3e667277d1c9d3b4998d3ecf21782efaa8ca2d23e8e215bd32604dabc278db3b529a4e12a4ea2f0c87f339f61d234fc58ac2f9a5758d267809fa35302e69b732718308807f85bc02b1f99618e0ea27ebb96e4ea0bc8bdab6496e997e3463939932062366c6480e2546d21cad400e5dc72f0efc7c029d1", 0xc0}, {&(0x7f00000000c0)="d06b465b22244d46441f0b500504efd3a99ae11a01805c6f21f42413cdb02711eb5fe2a9509c8b8f9a86d0dd4c451e1ee0", 0x31}], 0x8}}, {{&(0x7f00000007c0)={0xa, 0x4e20, 0xffffff80, @remote, 0xb41}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000800)="ab57df3651e969bf27962e7abe5adfd1a4666b651b2e1e58e5f59fb2a1f4fe74d16a6e2c48c38b1f53d1ffe8d674ed7ae381d8d589fc31d3bc36aee03a886374e07b6de51d245a3f0bd0671f2e41a39234a1df2f334098abed12ee21168507b6d1bbc6904e5a317ea5301cde85447090b0adc6b3540be3cac11713c56abfe501375ecaa0935fbf334e01b8d6053ab459564543718ff5640d78878defb71b951d825e91b69148a0fe10a0ddc9a4e8483d8ddb6d0d95f681852f9fad7336b8c0a34706ffe87463444777f2571c64288e8d5981aec37704c38475a6c6cf1d5dc8eb06215e5cb1705fa88a26d708ca7d68b032bd9c4b25", 0xf5}, {&(0x7f0000000900)="c8dc60a29d505540a3da0249ea2c8fcb5f2668b20be3e90f432bb53ac3b7ebe6114efb734d882b0d5869a821d710eb48357ef489112156873b7c4e34e4", 0x3d}], 0x2, &(0x7f0000000980)=[@tclass={{0x14, 0x29, 0x43, 0x206e0}}, @hopopts={{0x68, 0x29, 0x36, {0x21, 0x9, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x9, 0xffff, [0x6, 0x100000001, 0x8, 0x100, 0x4, 0x100, 0x9, 0x4]}}]}}}, @dstopts_2292={{0x1c8, 0x29, 0x4, {0x33, 0x35, '\x00', [@generic={0xd5, 0xa1, "32ffdb113733a69a757fd57440834d2d43385af47fa0f1af4bc51c1012eebb215c1bb84445fdc9a2f2cb2b6c94b1c7702c3c4042924e2db5c9f706459d385f469b08e584e78b5d7700fa4f772554ad27bb10bc66f5bf596860b18f8cc9c15fd49d05a596ea037f0ac1923b89acd2d6d2fc929d31026e2b2d909d8973d1fb86100e205d6b0e7ad6107f31b9b80fd2bcb8dd0dd03b43135b0805730e40feb03cf9b8"}, @jumbo={0xc2, 0x4, 0x101}, @ra={0x5, 0x2, 0x2}, @generic={0x3, 0xfb, "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"}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}], 0x278}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000c00)="3205a233d83696083aa1843f8e743dcda9e44b5aa1f3912ca717ab91e21bf1a0207111c1ecbe89e36abed3fc8042503d68441394ddcd5003ab61e1a76ccef18be6afe6b3b7cc6313b226bb3d779ed361a66a6ea047ea9f3c10e55efab35c59986740f8512ff397a873b0bff9c0714c590ea1", 0x72}, {&(0x7f0000000c80)="e303e371ac21d6b6390f0d61cfca521ff2a29c02063e75982b420672d0fdbe3d345fe1895652218e850d41a3bdeb4cd379ebb64fdd054b3f0c7aacef2cc5211e52bcb283a512607b99de08a1d81f98dbebff8b06eb14f7cbd5995a8cee7f4bbae2e03d66c2e049717b93bade95f67c7c4c0dcdf1c2b714ba36f5c4e74e23077a945830e9b25e625a2d67bd5464feabe8c65028e733f64dc72215d96ec5a3d3354661c398d72bf8108afb4edcca41b6691bcaa2abd9d064a1b5d8aa7d2d414d05001a91e8decc13fa307f4af5b4968508794834bffb34b7feac4359e1f48ce10bf62a", 0xe2}, {&(0x7f0000000d80)="65da3aa16eb56317dfd366136c4e3497e491db105115706675cbf3020e5a0822a8d73ca570e74bca6da165b010703b08f7994005a371be30716f43f425a17449e832075bca28c057b5c1ccbed8cf14e3a266163025", 0x55}, {&(0x7f0000000e00)="daebb84ab962b7e48b1c6213c469b9629860ad49e0bf50ef81b379455955f08e42330e9f8efa4ad83c84d4f1370e906d7fcb7017f22506f624a67410eb52ca19323cc097266bfec8c2404039e1e92f14eed6d27dcc3826381b098441712524a8faebe1d1da7110726b1a1fb182c61978ed3786bee32c9e9bab6d2b85ce875fd35f0366bf0c920a476eb2ab3ee117111eb2164ccd891b61be6f381be3e6dea20ab25957269fe9ee841684f5051f765f84276518a2fe64467b95f44e", 0xbb}, {&(0x7f0000000ec0)="99ae7180c6f7401365e028c7acccb171868228618a7ce5", 0x17}, {&(0x7f0000000f00)="1e281a8ce2d92c5f5f4b6eb6b4bcd11caf636731908a20a5e3283ba608d8c830865fd1dbbc70932ff8fdac6cfae9b572dd56c270c98daa480c09de4ff32d1377dd4c8dae6cd20a79bf7a43b12c526c71c637ed8852ba25bae06125b03c9000884ed5b016f8a9df8e2bbdffd0f87c7c5917b32b81528e0fb66605b6ab4d76490413024dbbe5d015f4350d288e2f4fde399996a2624912fd4341d6d7e15de15c256937f0b80b0eb599c3a71967fc4aee7ee41ce8bf3fac1d564fdc50738cfe55c15b29e9a103c96535252caaa4fd72cdc020c96582a13a42a0b59a1f", 0xdb}], 0x6, &(0x7f0000001e00)=[@dstopts={{0x118, 0x29, 0x37, {0xc, 0x1f, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x2, 0xa99, [0x1, 0x921, 0x5e9, 0x4, 0xffff]}}, @generic={0x3f, 0xc4, "b7ea73b706d3ae0fab8b727ead87ef1e654bfe2d2d0ac0003f901f8772025f1118bb2f809903b967138539f31f14000bedaafc4fbb4e19f1fe95b89c781a252a5321675a630b063d91f911eb972a24564b51b0dae8bb55317a3eb8019550f87bd89f0c601ebf2ee351eba249e9a11e506f0e055ad420761511249f33ad54e357094e803f60ed12dbfbb83aa04076507666dba7b999aa3e2827c69c7b356534bf0c8d02411325592dd4110ac64f92107476df8bc718029c62cb8a32dd540bf8a977dd24ab"}, @pad1]}}}, @dstopts={{0x188, 0x29, 0x37, {0x1d, 0x2d, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0xea, 0x5, [0xaba1, 0x5, 0x8, 0x5]}}, @generic={0x4, 0xf0, "085d9c874d50de1bfaecc06f8cc71d0afc3f7979e1401c3c8e63a0d9f8ce8bc9b42f22eaf7a5139f911dca927ac2225938705629cdf9f2c956512c210fa960b08618840bbb1c819f7cf166c2d86ee369a6d3d8c217fbc389dbdf0ff3830ac67237ce1b1ab6cebf66ca5e231ae060488c30edebd2e7fa92fd6475c2547f3e75819eacde96eb55f3806e439c227d3820ae2482e32f18f3279894835bbaf20597da9b2db6def581a29c00b2f7dc30076e5a5421d0a52ba7f26504b788095b58c650da7f6221c12c5548bcc1ec288fdb1a4f57489c9f2613613486d9c7bc5d447f6c0854eaa50825146378c8db758462bff0"}, @pad1, @ra={0x5, 0x2, 0x200}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x6, [0x3, 0x7, 0x6, 0x2, 0x4]}}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x56, 0x11a5, [0x7]}}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x1, 0x2, 0x0, 0x7f, 0x0, [@local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x20}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2c, 0x6, 0x0, 0x1f, 0x0, [@private2={0xfc, 0x2, '\x00', 0x74}, @private0, @dev={0xfe, 0x80, '\x00', 0x2f}]}}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x1d, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x8, 0xad, "ba3a80a8331852ebb6ebb51dfd0bd46b953ea1751fa5f8e75262d1c4eb5d9fd593d9d23b7c9f6d3ea3c4e8281a86a9a2c622ab0b624aa6b7cbc747fcaf512f607ce7cf4c7bf6b83dd45a061c4b575a67c18f8be67f758ac95470950f2ea1e8177038b4bcf7fd905fd3191ba8a871329d6f75c03f0e7f92a51eb26e91672ce79e1c3e0457c86b26009d1c0a77f9539b5b35625df9a62e4737fd3ce446bebb3c5ca68dc288272d1e4fbffce7efe4"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe69}}, @dstopts_2292={{0x10e0, 0x29, 0x4, {0x2e, 0x219, '\x00', [@generic={0x5, 0x95, "73b1a644d005fb4c85c5d1837b7cf78ca7a238f2ece19f4b9685206c0540ad3740dbdd4ffb96a8d7136a4559b922eadb6d36b3b0f54241b4ec4f347df5192ea1ee379fd2f1d4da1859c135f8e5857c527c6bbcf431fbaa6fbfe47043a287aff570358570570a6c43320d788e8dc165c1cccd7904e300f843279d9c2455815d0d01fee3b8ea53ed457f1d5e75b244acffc374138b3c"}, @generic={0x9, 0x1000, "881ea0840c881b763cc030a19d7d89f609e816645bae5d0148e8dc75746ff94cb2ff9036ed95563c5492464249abb783303abb6517b9fcf200c759794ff6655bf045db6b830d0aa7101372c04706af64d7942d1f8b597a73352a5580fff4aeebfee9649f4b99123d97ddf7fafff913d68762d54108f13a663c2f932bfa16495f20f638112483df1dced79f5d1542b7f400c29f9a86439bf748b09dadc57c0ce857755bf00d42c50da1325b9809602c6a7a3c3d022d381be45eb19282dfe0fd397690ec024fe0f4fdba85c3a4c677bb8e06e32278342e135186b45bb42e5356434f9b34aaab25718f248844e6c71e7a31483b53130d57fe50d12a3fcb11d12f0b2fedc45433dbc6ff42284dac4917889188c7c016a3b28003c89f92f58cfa1d5e89e2ba51e0fa1c9ba50dd1058ffa189b13d4ab9b99373b0e071cd943f19adb1700180a08e00e7239c75acd75c4a751cd1c7fd1c1eaf898d4fc80a881efe8eec6d40f48e91789eada464f45fe2870274b5a73aaa4adcb2cb85b4a4b88622be1b1f2c6662d0a74173b03583a0a244db2a594835332b853ca161a0bbbe61cd07e149a8d8527c2b461eab744978d92510ffb5d7b51d7d30bb2fb8b36a3d0d94ddc673dffd1b1b3d37debe959fd1848b16379b56e1c94a488d2e0df59d05929e7e4c1cfb31b6254117e0fe72f8c6f1f73ac0f663a76a2e05ed567d2653d3135fb9c6f4b77dd424aac2aef24ab42998d46ca1490ab3f41c0efcff8fbec970d91ba5a2b1938bc304b2922d80e35e2c4030588ab20efa4871f5afeff9b9d51f8a32c1f6e1d70e2ad9a7cf02562f5615961500f8d5cac18cd7df39aaed156a6d929ea9adaebbd03dd4a066ed5952d2146ff79def7afea74a398748a33c223c4ba6d22bcda4beba997390407804aa28c943419af12ecad2b7ee6066718025dd289018aa8a2eb70eed63fc2fbda298dcc02eccb3556a8c8ad11813c2796140cc49681403d0de5c21b9c71e6494ad98231a3caed2363ca1341daa2ee3ab91a7c85f72f9211846fee7f411784a5a1b77eb7e69ce1dbe4846f4ea2a5ef09c6bf85dc51eb2b5c0484c22a84e5a66c769a2efe4691626517ac88790a7b659088a0b72e227a8b7f41a47dae8e22b4ed8a7dbe915e854d49600f3bb0f05e5f7aa98c6aea11175948d84654994fac90ea2388e08318171d5d68aa7083ef0499ccc14fa2c1722b905b3e7b21004ba944f3dcd61f03f0f0b17c22a1abd3a790cb0a37742723ae411dd768da693c549eb4102f40932854b585becfaff78742cf74130f9c24e67e2f1031b02af7b60b8d58402e72d0d297315357c522bc32d9cfd896f85bd20ebbebda920a66f1b2c49a6c176ee55a0aed07a98b97818f66c9679d9ea594250b93ceac9f152a30404b4fb9293e125487a944e138a607c3203894e29abfac7265d3b61af576710997105606d9c00a57126ea3fb27b980d599fe9097a2f7ad3dfed8946dcaa3167e392ddef8517ae29ed077d3dd0435b0c1115317f494cde34e18bb45690f19132a9e0402dd6e62d818d90984c468af12bdf77aae82f8bc88c511b913b38da8df87b3cd9b2f89f16d923b4eb9f6a5eceaba62c03b793ceec96e2c94ab4bdd965a5edc1ed1b2a3196d57eb26b3cac9f7587ef05baf9db4accd918bcb80d4f4db3f91a421bebf9a7505fe7e47ce3e9e8d5d43c433ff2806118419aafc82cb2d4282269a7ce03dad2b257d190e34c9d141f5da954a39259fd991aa14780fc383d7832a27a0cd6e1ee94820b940ad7ebf8cc355af2751b6d22c9be4de8933ed842316f59a60fa8fbdc44c7875519fec719e3e1f1b194d7e9deecccfee94aee0080c7c9c710ae4d9e27b7adee0c9c6b7d194b75758db1c18b26bf66796000ae4627424300229d7bc964b4c9a34b49d214d938862cc43f30ba32ee7b569c435e0c9ed713c42dc211af992eb870ca21c79ca393158922f332cb72aa99cb4b5d939384969994984752803baac5bccb1e2f4abecd10a4e3b7e4b5b2f835768037ffca2104cf1cd9dec99c03c8c51a9a2e9de3c9e4cc280a9bb8b81ea17c670a9d82a7d19af5d8e6e77f204dd31880a9badfeedceee55cd2a47eb742252492c5a2c0c31abaa312e33ff4a55e06dbafec9fdce9332ce0a6df615e17ebb0e2e9fe950de2fea837a613d7f91e445fd6e7c0fdc8ab3a6df48cf6938908718975b34602b31f6d78ff1e4b58564ec8248d7bcf53d3a778a9ce365d9a8837e76a08672af7665cdfbc5f8a2a7954556c4c07e11dbe1428a69384568960b727b42beb16eebcf9397bf9d2072234acdccad85fa240cbf5c9a4ac20a3ad274c312a6d0ea60a010e61de0b76a86702884a69ac87a148793de6fe80a7bec607909f5e708c517111bf10dbf166f0f5118edae34485c61edc8e8abb4cd446c7c1fe45648029d0abd5676871c2500901cd8447dee7c531429a07d1668d4111ec9e7b4e1ce4b5d1db5e68b94482dca749edcea04e17a3e70e024f504892a9b8cded0b4f62271f9867f9ef1a9d3c3732c2bb6af5683b98c766d27ee6c8c2d47ad606586a3695ea76afedb0acd35cc7ac4afa7e6bcad95b06a692afd73ecb1243b1eda253e7e2d5d4fccb9c012fbb4c3833348c66dc6975ac71f2e35f19050751ff45e6772f2a99f0744c86665a05fd2a66226c837c7bb33020ed74031d6dfb839bfa1e7bb997d738ed3ecc86817e634151eac563e8d85b0b32658e17bd4381046a289daf09d015e7a1e6cf55393180da4c31c0f5541813c79b43268859621e3b3025dbb1b95eab12196cd91d51cf00f208d96197741d00f3f273621afb875b82fc349906e268b3109ee62d8c780011e9694f2eb6e8e2a180fffaa927766537c06f2ea381a8739e242efdcc705517bf839787890f182731b9c6f5ddb90f595441ce7b7379a6e4a29364f97a5081be9bcb625536a64d4f1694218fcc9d9bc8b9aa40c9b1b080ef7c20a96755ca81e1de0583b682f05ab382b274d9a4cf2e00522b99914c6817bf5364317fe5d1f740ab2b29e8642ac6f6025afe4cf7c0d45e92e3cdef3aee1ce23f0942d40ce17c0c7c36ebf248d6a04713a69cb0e645204fa4c0ebda22bccdf14f760298b25dd40ccdbb8dbe8df9fb01c123a5c61f75f8bd880a4b035985213f3f0274847ca2822b79406fdcf2969a18f0ebee1f268dc98272be29551a9c0472b30af4f0e53016723fb285747f02a36a19fb89dccd1c0d1fbed7e109de8d2775341292af0b7518dd662cd1edf986d63e49bd00bd8887bd395e874585dced9f31f7ed8f2e5e4f7b6f52660f52c342617c25e53d6ccae0ddc2d08859eda3539b0320e1e29a391110687003981f79ffd824d67a22f8b7ae5d2b9a9be28ef5e5277a5beaac53f441fb653324d6f486b4a3a076ca46b066be94dbcb81218252aac0b17cb238aee9db1d9c0aedee3c5af5c777e8d59be2ab3bac9e503e148e4620c9761c006228b205f07c77e8056840ff2643adb168e5f7db62eb6ebd016435ad24850235702c2c798be5e7ee2ca796d600e47f5feff8878a107dbf054a7e48bc3e6151ee1abaa5b7fc2cd3d498eeb8f3645f8df56073189283a77699db231388e2b951bbe25931f65d8dfa0b09b1ff32a53b3ccf55c93764e737089642bd9fb2e571506319e9dada56ce2b5760b72d410aa035ea50f13959d6c6e25e9aa859a5bb248cc4db6ae942e0efac49c788948c363c8410ec9bb1bf864828df323ba1227376590577ef690cb61cbf22236b9e1e0c592412d08a1cf39b5fa701a05a7e3da94643dbb3b100e87d30973de668289fe9e745ae42053c8593d7464ba79ffcebe53398923ce1ad3d1d7aa3d3f4978ea0e44c2880ea16e7e0065298117941d058ae79a7ef215eb7ef2c1e0698a5759f0ca336eff08267fcf0c81ed9a5dd5795a3b83fedc223ecda03969cb49b078354e8f34207ee9f010fd607a0fdbfaecbab86f4a3c5809e22d0ecaf41530458692d0e9aa3ecf781f1cf2ab3e588350e63472071d44db153d26bc98050876873455439dbe66d3e824067945cc97c54bc7b4321c3cdab2aeb46315fcc168977c319ab0d1fc5101691a876e6529fc79d43a615bc016a4f26cfe810da8cec650abd2bc28750cd2359b2f077263604a3f4b7f0593d5ff446b3413ed98852fdb5b664639cefa9df3b71488e91deab5db8e11b99bbc3931ac938388b264cfe03dade6b119fd510bbadbb8ae4800a68b8168662fa7cb61b3036d4e4ee58e34549877f16000674092543eeaf880d5cbaf7af381af8106fbe2ff9289f7c431a9cc2fcc7e2384d5d2ba10579a4df2886a1f6cac9294db41e6f1f527a07410700428f88f317ffbac1caa2553e76860e33d80e0e64688e1641939cd95d23ae7b4b109bc3a4eca5394804f1242db9eb6c7c473f65c1e6cc0182ab2dc487f9280853c120ae1543657eb77141c31bae03d8b50742a0549ae6a28dc67181026fc3aec4745c9ad15f42e8baf74e39a4eff74cf8019582b7b85ceeb7f8a1204d438dcacdf4616c04abe54163dd85eea7b48a88a05f454c506ece095804269406dc21c182ce57978079a015f1f0173ba5c3ea3aac9516e30d1a1c44034b69c115aaf3f1362717ea39f1f108891f4f53175ef1d1f432fc5b27d9843dbfca5d00f7afa0708a8d4225959043880a4703ce3b2dcbf1e6e1d31ea457df142280b433326b421c35f145cacf50b7fe986a97a03c80ff311d62ea90f244f848693b7281869d2e752a51dea6a3da079ab978738d5bc520af4369ea31a10c7258f177f2b3581a93ef0308fbca6d453bb4f4c4b31c5388f8fe0ff4bed04cd0eefc735b46d2514e8ef088066a4708cdb7e53d21a37903043eee52b9fc81a93496635a9f34ff8d875bb0dd58990e060d1c86ba9e65efa29dab22279760c6188fef07053188b0d9ede5da44b6d8bd1f7a09cb291d243d25bf5318241285f4eb368f6c275c4f3dfb9dd4b4c7990a219038dc9394c07ec37416121a374acb0ca23a5b3e587d56029446288a34e1f8b2bf8b6663d78f05ce4986418f2bd84633312f5c072b15104bf6c65418effaccb189b5f7a424ee3e6fce26fb5c74fe17dc2db9dd6e09d8916c851ad9d28666ea69a6f24b6c518e7f51211e9a7b3021f106b1abea6748d9619c1cc8083b4c0666a213e959cf74928d6c5837331a90f9d3b4e3baf94a1404272d13a48009408f8da1f83c9ba0c715b07548e74cc2c89614ceaf96d40988ca0b00acb17f89feee8da16e4e7dee784bc362b978f3d7f81cce5ae4c20e9f21d862edd8caa60ee3483586098dfea67856f4a46eddc6aae187673d57f61c97919a9e26acf95e278c70bd57442e1f4a536595f42df2eadcc65d2bc1d9fd27848c35f0cc0701d0e00ea8a6dfb8877bbf1bee6bfdb72eced8d97a3e59217d94be680e131caa6b57c44d736fd6bce1454df74240c60fe0f0f0be06ddd9cb9609faff9eaf540ab22821739cd851ce2ec2567d593bb8cb86fcce1582b202333b3ffb36ae8f7700d18f1508824786a6f533e4ae5c97acc9e8c9ef1d2f250b09f2fd7c5028c5bfc7aa43791bd6c4a3159ba991b4abb453ae12e5ad6c2b107fe6e084f4ec39a74702776c6714973cc898a7218d71fc4766c5cd50b2e3e9202ebdd0a77f566b0f2b8d4d67f6e0e3d72b9020770363e4f4c676d1c8a60392288266f87a6201bf2955e2edce4eb14bce6ffb0feb49c93503913adbd7a0d17902669bea9179d99865237b89b3c8255f6b21dee683d222f2159369b23408777f6ebf5fa78e80e0a49f35dbacf9139fb23"}, @jumbo={0xc2, 0x4, 0x10001}, @ra={0x5, 0x2, 0xffff}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0xfffffffd}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @ra={0x5, 0x2, 0x6f}]}}}], 0x1510}}, {{&(0x7f0000001080)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0xb5f}, 0x1c, &(0x7f0000001200)=[{&(0x7f00000010c0)}, {&(0x7f0000001100)="da99f178a3c7cc90d4250aafd4ec588a5f30c5f09ce989e631", 0x19}, {&(0x7f0000001140)="9e9d0bec0f197226a9e9883e6b2f6c86723a2e26ce309b36a4618497e87e56c044694c772325ce6836b9ad855acf29c9915adee64731e6a66e398643eddf8acc95a8b441807a01c01d3d75762b057f8e0c4a8cad6997a9b178b02087af6db0935814410cf02a94187b234623d2fa096d4c60a7df6cf096413c435b042ba55d69f5f2a60b519c919c5ad0b1e9c6f51bbd4e3ba5ff3dd85b5ba85dffe6e0", 0x9d}], 0x3, &(0x7f0000001240)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x2f, 0x6, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x1, 0x1ff, [0x6, 0x3]}}, @ra={0x5, 0x2, 0x9}]}}}, @hopopts_2292={{0x170, 0x29, 0x36, {0x2b, 0x2a, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @generic={0x5, 0xfc, "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"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x8, [0x78c5, 0x0, 0x200000000000000]}}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x20, {0x2, 0x6, 0xff, 0x0, [0x5, 0x1ff, 0x8]}}, @ra={0x5, 0x2, 0x6}]}}}], 0x1e8}}, {{&(0x7f0000001440)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xdde5}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001480)="18b5f9cf3706ea2a6ff9cad1676de27ee9ecd6b7a61f87ea0977297c491604395754f056d4800cca88db91d836d6e3a8ae116075ee3dc362fdacbfff3163392b37ef8df69d9665036944af395dff1688b035c2c2b38b3ed56f74886f5e3eaf5f8749cb7c74dab3fdb45fd99fe6f19f948020a63685b8c7", 0x77}, {&(0x7f0000001500)="0e76da998934d50551c5da809f05a65a36fbfd060247bfd4435f025899eebda75d0db267e94c6e587e8bd93ec8094215fef0fdc47a7509e5696994f17d28c538c62801a551228ad5629182f59b7cd81bc53115f25681a3b84cfd6373e71326df1db80f071342e543f8c72a7ccfd5673c750ec0962f7535d0b8b64bb94dc6904609b2708c9a8df5519291034e4b8be1c5f66d34d88f3a8cc0ff81c578f1e635ea338f1d16364e8f88160a1895662e3f01ce3b8f3dae7503b7422d5d89e0bbb5ed68110359af1bf9dc3b1a133b5c765008710e3ab8df059c1ff5b2c62967c1c34f9d02aab53f19d6296fb2de17227bd0c6ef6e", 0xf2}], 0x2, &(0x7f0000001640)=[@dontfrag={{0x14}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x3c, 0x10, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @local, @loopback, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @empty]}}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000003340)="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", 0x1000}, {&(0x7f0000001700)="da80d9f666053cb976bbb9a7920517d428c245ba72", 0x15}], 0x2, &(0x7f0000001780)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7f}}], 0x18}}], 0x6, 0x20040004) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) 13:37:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:37:47 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:37:47 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:37:47 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 6) 13:37:47 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 13:37:47 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) 13:37:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) [ 1361.837016] FAT-fs (loop2): bogus number of reserved sectors [ 1361.837927] FAT-fs (loop2): Can't find a valid FAT filesystem 13:37:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:37:47 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) 13:38:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = mq_open(&(0x7f00000007c0)='\xc4fdn/\xda\x1ag\x92\x05\xdb\xe7\xf2\xaa5T\xb5\x0e@\xa5\x15M\x1b\xec\xbf\x97\x05\x00\x00\x00\x00\x00\xec\xa6t\xd7\x01\x81\xa7\x81\xc9\x8dNK\x02K\x89\xcc\xfd\xd4n\x06\x8e\xd3{\t\x1d\xf5f\x9e_\xb5sF\x90\xe0\xf4\xfc\xa7\x9a\x16{\x87K<\"\xb9\xea\xb3\xefh\xfd\v$\xda\xe8x\x1e\xe1\x97S)0q\xd3\xa0|\xe5\xd1\xd88\xfcZK.t\xe9\x831\xc9\xd9K\x9a\xfe\x14\x14yu\x86\xb2O\xffOO\xe4/\xb0\xc9\xbbB\x99\v\x19\x06\x95\xb5\xd3r\r\x91d0\x9b\xb8-\xbbx\xaf\x051*\x01\xa7\xfb\\\xc4\x1f\x1f\x81\x98\x9b\x1dz\xbc\xd2\xcdc\xa3\xda\xa0\x85\xccb\xe2\'\x04\xf3>\xc1f\xf0\xc5R\x04C\xbb\x9a\x94\xb6Si\x80\xf9\x02\xcans\xee(\x8f\xf8\xfb\xcf$YhQ\b\xa1:.\xc1O\xc8\x885\xf6V\xb8\xb3\x00}\xe4\x11`[\xda(\x94\xd7\r\x1eJ\xeb\x1f\xa4\xde\xd0\x9bo\x94y\x0e&\x01\x90#\xe2\xb3\b\xb0-\n\x90\xb8\x8a\xca\x95\xd2\xf7f\xbf\xdb\xcb~i\"\x98\xa24\xb4*;\xbb\x9f\xea\xf0}^\x16|5\x7fi\xc8\xb4t\xfbv:R\xec\x8b\x8d\xa6\a\x8e,\x96\x8f|W@{\x99w\x1fD\x90\xc3k\x925\r\xa4T\x91\x1a}\x14\x87Q\xdd\xac@6XOC5\xa5\xdcj\xddG\x16w\xbc\xe1\xb7\x19\xd6n1\x84m\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x83, &(0x7f0000000200)={0x6, 0x4, 0x4, 0x1}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/658], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2d, 0x4, 0x1, 0x7ff, 0x0, @mcast1, @private1, 0x700, 0x20, 0x1f}}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x2001}}, 0x398) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) syz_io_uring_setup(0x3619, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, 0x80000, 0x1}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x810, r1, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x105) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001e00)=ANY=[]) dup2(0xffffffffffffffff, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 13:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:03 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:38:03 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:38:03 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) 13:38:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:03 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 7) 13:38:03 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) [ 1377.142430] FAULT_INJECTION: forcing a failure. [ 1377.142430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.144111] CPU: 0 PID: 15352 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1377.145059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.146233] Call Trace: [ 1377.146611] dump_stack+0x107/0x167 [ 1377.147132] should_fail.cold+0x5/0xa [ 1377.147675] _copy_from_iter_full+0x201/0xa60 [ 1377.148295] ? __virt_addr_valid+0x170/0x5d0 [ 1377.148910] ? __check_object_size+0x319/0x440 [ 1377.149538] netlink_sendmsg+0x879/0xe00 [ 1377.150101] ? netlink_unicast+0xa00/0xa00 [ 1377.150688] ? netlink_unicast+0xa00/0xa00 [ 1377.151272] __sock_sendmsg+0x154/0x190 [ 1377.151817] ____sys_sendmsg+0x70d/0x870 [ 1377.152375] ? sock_write_iter+0x3d0/0x3d0 [ 1377.152955] ? do_recvmmsg+0x6d0/0x6d0 [ 1377.153488] ? lock_downgrade+0x6d0/0x6d0 [ 1377.154058] ? __lockdep_reset_lock+0x180/0x180 [ 1377.154693] ___sys_sendmsg+0xf3/0x170 [ 1377.155230] ? sendmsg_copy_msghdr+0x160/0x160 [ 1377.155860] ? __fget_files+0x2cf/0x520 [ 1377.156398] ? lock_downgrade+0x6d0/0x6d0 [ 1377.156955] ? find_held_lock+0x2c/0x110 [ 1377.157508] ? __fget_files+0x2f8/0x520 [ 1377.158060] ? __fget_light+0xea/0x290 [ 1377.158604] __sys_sendmsg+0xe5/0x1b0 [ 1377.159118] ? __sys_sendmsg_sock+0x40/0x40 [ 1377.159699] ? rcu_read_lock_any_held+0x75/0xa0 [ 1377.160340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1377.161077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.161800] ? trace_hardirqs_on+0x5b/0x180 [ 1377.162395] do_syscall_64+0x33/0x40 [ 1377.162919] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.163642] RIP: 0033:0x7f23527dab19 [ 1377.164154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.166707] RSP: 002b:00007f234fd50188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1377.167772] RAX: ffffffffffffffda RBX: 00007f23528edf60 RCX: 00007f23527dab19 [ 1377.168747] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 1377.169746] RBP: 00007f234fd501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.170758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.171732] R13: 00007ffc434bcf5f R14: 00007f234fd50300 R15: 0000000000022000 [ 1377.177715] FAT-fs (loop2): bogus number of reserved sectors 13:38:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:03 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) [ 1377.179133] FAT-fs (loop2): Can't find a valid FAT filesystem 13:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:03 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:38:03 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 8) 13:38:03 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 13:38:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1377.357378] FAULT_INJECTION: forcing a failure. [ 1377.357378] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.360020] CPU: 1 PID: 15435 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1377.361620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.363523] Call Trace: [ 1377.364148] dump_stack+0x107/0x167 [ 1377.364980] should_fail.cold+0x5/0xa [ 1377.365878] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1377.367395] should_failslab+0x5/0x20 [ 1377.368268] __kmalloc+0x72/0x390 [ 1377.369090] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1377.370578] genl_family_rcv_msg_doit+0xda/0x330 [ 1377.371690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1377.373206] ? cap_capable+0x1cd/0x230 [ 1377.374124] ? security_capable+0x95/0xc0 [ 1377.375088] ? ns_capable+0xe2/0x110 [ 1377.375955] genl_rcv_msg+0x36a/0x5a0 [ 1377.376839] ? genl_get_cmd+0x480/0x480 [ 1377.377767] ? nl80211_vendor_cmd_dump+0x1640/0x1640 [ 1377.378953] ? lock_release+0x680/0x680 [ 1377.379877] netlink_rcv_skb+0x14b/0x430 [ 1377.380815] ? genl_get_cmd+0x480/0x480 [ 1377.381732] ? netlink_ack+0xab0/0xab0 [ 1377.382649] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1377.383698] ? is_vmalloc_addr+0x7b/0xb0 [ 1377.384638] genl_rcv+0x24/0x40 [ 1377.385394] netlink_unicast+0x6ce/0xa00 [ 1377.386357] ? netlink_attachskb+0xab0/0xab0 [ 1377.387376] ? __sanitizer_cov_trace_const_cmp1+0x4/0x20 [ 1377.388835] netlink_sendmsg+0x90f/0xe00 [ 1377.389784] ? netlink_unicast+0xa00/0xa00 [ 1377.390773] ? netlink_unicast+0xa00/0xa00 [ 1377.391741] __sock_sendmsg+0x154/0x190 [ 1377.392647] ____sys_sendmsg+0x70d/0x870 [ 1377.393577] ? sock_write_iter+0x3d0/0x3d0 [ 1377.394548] ? do_recvmmsg+0x6d0/0x6d0 [ 1377.395433] ? lock_downgrade+0x6d0/0x6d0 [ 1377.396377] ? __lockdep_reset_lock+0x180/0x180 [ 1377.397444] ___sys_sendmsg+0xf3/0x170 [ 1377.398337] ? sendmsg_copy_msghdr+0x160/0x160 [ 1377.399378] ? __fget_files+0x2cf/0x520 [ 1377.400284] ? lock_downgrade+0x6d0/0x6d0 [ 1377.401214] ? find_held_lock+0x2c/0x110 [ 1377.402156] ? __fget_files+0x2f8/0x520 [ 1377.403077] ? __fget_light+0xea/0x290 [ 1377.403975] __sys_sendmsg+0xe5/0x1b0 [ 1377.404844] ? __sys_sendmsg_sock+0x40/0x40 [ 1377.405826] ? rcu_read_lock_any_held+0x75/0xa0 [ 1377.406915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1377.408109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.409279] ? trace_hardirqs_on+0x5b/0x180 [ 1377.410263] do_syscall_64+0x33/0x40 [ 1377.411118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.412285] RIP: 0033:0x7f23527dab19 [ 1377.413132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.417339] RSP: 002b:00007f234fd50188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1377.419088] RAX: ffffffffffffffda RBX: 00007f23528edf60 RCX: 00007f23527dab19 [ 1377.420724] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 1377.422351] RBP: 00007f234fd501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.423981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.425608] R13: 00007ffc434bcf5f R14: 00007f234fd50300 R15: 0000000000022000 13:38:18 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 9) 13:38:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:18 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:38:18 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 13:38:18 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:38:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:38:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c", 0x33}, {&(0x7f0000000540)}], 0x3) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xd4, "544d056968f26f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054a80)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "043ba9ba70070b"}) lseek(0xffffffffffffffff, 0x6, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r8, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) fallocate(r2, 0x0, 0x0, 0x8000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f330cc12df1208d256e9a9f6cd5f43bf1591f0d381e95640f419016f2a608193c45c9e8120eb18140aabad0cbc3fd99a3d5188ff6f51ed96babea355d97784d0b0a96b0d260925a645adc6462c208ecdfae2be3a781", @ANYRES16=0x0, @ANYBLOB="000025bd7000ffdbdf251f0000000c00060001000000010000000c00060000000000000000000c0006000100000001000000"], 0x38}}, 0x1) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x4000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) dup2(r0, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 13:38:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1392.398956] FAULT_INJECTION: forcing a failure. [ 1392.398956] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.401913] CPU: 1 PID: 15481 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1392.403524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.405424] Call Trace: [ 1392.406034] dump_stack+0x107/0x167 [ 1392.406884] should_fail.cold+0x5/0xa [ 1392.407759] ? create_object.isra.0+0x3a/0xa20 [ 1392.408802] should_failslab+0x5/0x20 [ 1392.409679] kmem_cache_alloc+0x5b/0x310 [ 1392.410624] create_object.isra.0+0x3a/0xa20 [ 1392.411629] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1392.412787] __kmalloc+0x16e/0x390 [ 1392.413614] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1392.415075] genl_family_rcv_msg_doit+0xda/0x330 [ 1392.416163] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1392.417664] ? cap_capable+0x1cd/0x230 [ 1392.418569] ? security_capable+0x95/0xc0 [ 1392.419516] ? ns_capable+0xe2/0x110 [ 1392.420368] genl_rcv_msg+0x36a/0x5a0 [ 1392.421245] ? genl_get_cmd+0x480/0x480 [ 1392.422150] ? nl80211_vendor_cmd_dump+0x1640/0x1640 [ 1392.423322] ? lock_release+0x680/0x680 [ 1392.424230] ? __lockdep_reset_lock+0x180/0x180 [ 1392.425294] netlink_rcv_skb+0x14b/0x430 [ 1392.426226] ? genl_get_cmd+0x480/0x480 [ 1392.427133] ? netlink_ack+0xab0/0xab0 [ 1392.428031] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1392.429069] ? is_vmalloc_addr+0x7b/0xb0 [ 1392.429994] genl_rcv+0x24/0x40 [ 1392.430744] netlink_unicast+0x6ce/0xa00 [ 1392.431669] ? netlink_attachskb+0xab0/0xab0 [ 1392.432673] netlink_sendmsg+0x90f/0xe00 [ 1392.433596] ? netlink_unicast+0xa00/0xa00 [ 1392.434575] ? netlink_unicast+0xa00/0xa00 [ 1392.435529] __sock_sendmsg+0x154/0x190 13:38:18 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) [ 1392.436427] ____sys_sendmsg+0x70d/0x870 [ 1392.437497] ? sock_write_iter+0x3d0/0x3d0 [ 1392.438454] ? do_recvmmsg+0x6d0/0x6d0 [ 1392.439337] ? lock_downgrade+0x6d0/0x6d0 [ 1392.440291] ? __lockdep_reset_lock+0x180/0x180 [ 1392.441341] ___sys_sendmsg+0xf3/0x170 [ 1392.442233] ? sendmsg_copy_msghdr+0x160/0x160 [ 1392.443265] ? __fget_files+0x2cf/0x520 [ 1392.444159] ? lock_downgrade+0x6d0/0x6d0 [ 1392.445094] ? find_held_lock+0x2c/0x110 [ 1392.446017] ? __fget_files+0x2f8/0x520 [ 1392.446926] ? __fget_light+0xea/0x290 [ 1392.447812] __sys_sendmsg+0xe5/0x1b0 [ 1392.448673] ? __sys_sendmsg_sock+0x40/0x40 [ 1392.449646] ? rcu_read_lock_any_held+0x75/0xa0 [ 1392.450718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.451886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.453037] ? trace_hardirqs_on+0x5b/0x180 [ 1392.453999] do_syscall_64+0x33/0x40 [ 1392.454835] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.455069] FAT-fs (loop2): bogus number of reserved sectors [ 1392.455979] RIP: 0033:0x7f23527dab19 [ 1392.456017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.456032] RSP: 002b:00007f234fd50188 EFLAGS: 00000246 [ 1392.456807] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1392.457599] ORIG_RAX: 000000000000002e [ 1392.457611] RAX: ffffffffffffffda RBX: 00007f23528edf60 RCX: 00007f23527dab19 [ 1392.457622] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 1392.457636] RBP: 00007f234fd501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.468059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1392.469650] R13: 00007ffc434bcf5f R14: 00007f234fd50300 R15: 0000000000022000 13:38:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x20d, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:18 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 10) 13:38:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 13:38:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:38:18 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 1) [ 1392.664430] FAULT_INJECTION: forcing a failure. [ 1392.664430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1392.667379] CPU: 1 PID: 15616 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1392.669068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.671067] Call Trace: [ 1392.671834] dump_stack+0x107/0x167 [ 1392.672705] should_fail.cold+0x5/0xa [ 1392.673677] _copy_from_user+0x2e/0x1b0 [ 1392.674675] __copy_msghdr_from_user+0x91/0x4b0 [ 1392.675758] ? __ia32_sys_shutdown+0x80/0x80 [ 1392.676818] ? perf_trace_lock+0xac/0x490 [ 1392.677815] ? __lock_acquire+0x1657/0x5b00 [ 1392.678765] ? __lock_acquire+0xbb1/0x5b00 [ 1392.679864] sendmsg_copy_msghdr+0xa1/0x160 [ 1392.681009] ? do_recvmmsg+0x6d0/0x6d0 [ 1392.681830] ? perf_trace_lock+0xac/0x490 [ 1392.682715] ? lock_downgrade+0x6d0/0x6d0 [ 1392.683580] ? __lockdep_reset_lock+0x180/0x180 [ 1392.684547] ___sys_sendmsg+0xc6/0x170 [ 1392.685366] ? sendmsg_copy_msghdr+0x160/0x160 [ 1392.686322] ? __fget_files+0x2cf/0x520 [ 1392.687145] ? lock_downgrade+0x6d0/0x6d0 [ 1392.688214] ? find_held_lock+0x2c/0x110 [ 1392.689072] ? __fget_files+0x2f8/0x520 [ 1392.689907] ? __fget_light+0xea/0x290 [ 1392.690742] __sys_sendmsg+0xe5/0x1b0 [ 1392.691534] ? __sys_sendmsg_sock+0x40/0x40 [ 1392.692421] ? rcu_read_lock_any_held+0x75/0xa0 [ 1392.693387] ? fput_many+0x2f/0x1a0 [ 1392.694142] ? ksys_write+0x1a9/0x260 [ 1392.694938] ? __ia32_sys_read+0xb0/0xb0 [ 1392.695790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.697099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.698202] ? trace_hardirqs_on+0x5b/0x180 [ 1392.699298] do_syscall_64+0x33/0x40 [ 1392.700265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.701585] RIP: 0033:0x7fd20e781b19 [ 1392.702561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.707265] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1392.709217] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1392.711072] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1392.712894] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.714724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1392.716552] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 13:38:18 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:38:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 13:38:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:38:32 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 2) 13:38:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x500, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 13:38:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r0, 0x2) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write(r1, &(0x7f0000000240)='e', 0x1) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x8010, r3, 0x7029c000) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000080)=""/94, 0x5e}, {&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000280)=""/107, 0x6b}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x5, 0x81, 0xff) fdatasync(r2) ioctl$FIONCLEX(r3, 0x5450) 13:38:32 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:32 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:38:32 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) [ 1406.922726] FAULT_INJECTION: forcing a failure. [ 1406.922726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.925493] CPU: 1 PID: 15734 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1406.927121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.929068] Call Trace: [ 1406.929680] dump_stack+0x107/0x167 [ 1406.930536] should_fail.cold+0x5/0xa [ 1406.931415] _copy_from_user+0x2e/0x1b0 [ 1406.932335] iovec_from_user+0x141/0x400 [ 1406.933279] __import_iovec+0x67/0x590 [ 1406.934180] ? __ia32_sys_shutdown+0x80/0x80 [ 1406.935201] ? perf_trace_lock+0xac/0x490 [ 1406.936163] import_iovec+0x83/0xb0 [ 1406.937011] sendmsg_copy_msghdr+0x131/0x160 [ 1406.938021] ? do_recvmmsg+0x6d0/0x6d0 [ 1406.938932] ? lock_downgrade+0x6d0/0x6d0 [ 1406.939885] ? __lockdep_reset_lock+0x180/0x180 [ 1406.940972] ___sys_sendmsg+0xc6/0x170 [ 1406.941874] ? sendmsg_copy_msghdr+0x160/0x160 [ 1406.942937] ? __fget_files+0x2cf/0x520 [ 1406.943853] ? lock_downgrade+0x6d0/0x6d0 [ 1406.944805] ? find_held_lock+0x2c/0x110 [ 1406.945749] ? __fget_files+0x2f8/0x520 [ 1406.946808] ? __fget_light+0xea/0x290 [ 1406.947709] __sys_sendmsg+0xe5/0x1b0 [ 1406.948580] ? __sys_sendmsg_sock+0x40/0x40 [ 1406.949567] ? rcu_read_lock_any_held+0x75/0xa0 [ 1406.950644] ? fput_many+0x2f/0x1a0 [ 1406.951487] ? ksys_write+0x1a9/0x260 [ 1406.952361] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.953553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.954737] ? trace_hardirqs_on+0x5b/0x180 [ 1406.955726] do_syscall_64+0x33/0x40 [ 1406.956573] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.957736] RIP: 0033:0x7fd20e781b19 [ 1406.958604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.962795] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1406.964522] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1406.966153] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1406.967787] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1406.969406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.971039] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 [ 1406.976828] FAT-fs (loop2): bogus number of reserved sectors [ 1406.977733] FAT-fs (loop2): Can't find a valid FAT filesystem 13:38:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 13:38:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:33 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:33 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 3) 13:38:33 executing program 0: semget$private(0x0, 0x4, 0x100) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd4(r0, &(0x7f0000000100)={[0xb10a]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100e92918000000", @ANYRES32=r1, @ANYBLOB="01800000000000002e2f66696c653000"]) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000001c0)) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r3 = semget$private(0x0, 0x4000, 0x0) semtimedop(r3, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r3, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(r3, &(0x7f0000000200)=[{0x2}], 0x1, &(0x7f0000000240)={0x77359400}) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r4, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) 13:38:33 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) [ 1407.117828] FAULT_INJECTION: forcing a failure. [ 1407.117828] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.120436] CPU: 1 PID: 15824 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1407.121944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1407.123860] Call Trace: [ 1407.124441] dump_stack+0x107/0x167 [ 1407.125239] should_fail.cold+0x5/0xa [ 1407.126071] ? __alloc_skb+0x6d/0x5b0 [ 1407.126903] should_failslab+0x5/0x20 [ 1407.127740] kmem_cache_alloc_node+0x55/0x330 [ 1407.128735] __alloc_skb+0x6d/0x5b0 [ 1407.129543] netlink_sendmsg+0x998/0xe00 [ 1407.130460] ? netlink_unicast+0xa00/0xa00 [ 1407.131402] ? netlink_unicast+0xa00/0xa00 [ 1407.132330] __sock_sendmsg+0x154/0x190 [ 1407.133199] ____sys_sendmsg+0x70d/0x870 [ 1407.134089] ? sock_write_iter+0x3d0/0x3d0 [ 1407.135019] ? do_recvmmsg+0x6d0/0x6d0 [ 1407.135873] ? lock_downgrade+0x6d0/0x6d0 [ 1407.136778] ? __lockdep_reset_lock+0x180/0x180 [ 1407.137796] ___sys_sendmsg+0xf3/0x170 [ 1407.138660] ? sendmsg_copy_msghdr+0x160/0x160 [ 1407.139668] ? __fget_files+0x2cf/0x520 [ 1407.140541] ? lock_downgrade+0x6d0/0x6d0 [ 1407.141454] ? find_held_lock+0x2c/0x110 [ 1407.142373] ? __fget_files+0x2f8/0x520 [ 1407.143274] ? __fget_light+0xea/0x290 [ 1407.144135] __sys_sendmsg+0xe5/0x1b0 [ 1407.144975] ? __sys_sendmsg_sock+0x40/0x40 [ 1407.145930] ? rcu_read_lock_any_held+0x75/0xa0 [ 1407.146960] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1407.148115] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1407.149254] ? trace_hardirqs_on+0x5b/0x180 [ 1407.150213] do_syscall_64+0x33/0x40 [ 1407.151050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1407.152182] RIP: 0033:0x7fd20e781b19 [ 1407.153005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1407.157073] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1407.158799] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1407.160399] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1407.161956] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1407.163556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.165109] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 13:38:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 13:38:33 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:49 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 4) 13:38:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:49 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:38:49 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:38:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 13:38:49 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:38:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) [ 1423.624718] FAULT_INJECTION: forcing a failure. [ 1423.624718] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.626049] CPU: 0 PID: 15891 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1423.626844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1423.627811] Call Trace: [ 1423.628132] dump_stack+0x107/0x167 [ 1423.628573] should_fail.cold+0x5/0xa [ 1423.629041] ? create_object.isra.0+0x3a/0xa20 [ 1423.629585] should_failslab+0x5/0x20 [ 1423.630023] kmem_cache_alloc+0x5b/0x310 [ 1423.630489] create_object.isra.0+0x3a/0xa20 [ 1423.631000] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1423.631588] kmem_cache_alloc_node+0x169/0x330 [ 1423.632120] __alloc_skb+0x6d/0x5b0 [ 1423.632542] netlink_sendmsg+0x998/0xe00 [ 1423.633014] ? netlink_unicast+0xa00/0xa00 [ 1423.633505] ? netlink_unicast+0xa00/0xa00 [ 1423.633989] __sock_sendmsg+0x154/0x190 [ 1423.634446] ____sys_sendmsg+0x70d/0x870 [ 1423.634920] ? sock_write_iter+0x3d0/0x3d0 [ 1423.635398] ? do_recvmmsg+0x6d0/0x6d0 [ 1423.635846] ? lock_downgrade+0x6d0/0x6d0 [ 1423.636317] ? __lockdep_reset_lock+0x180/0x180 [ 1423.636846] ___sys_sendmsg+0xf3/0x170 [ 1423.637291] ? sendmsg_copy_msghdr+0x160/0x160 [ 1423.637818] ? __fget_files+0x2cf/0x520 [ 1423.638265] ? lock_downgrade+0x6d0/0x6d0 [ 1423.638749] ? find_held_lock+0x2c/0x110 [ 1423.639214] ? __fget_files+0x2f8/0x520 [ 1423.639675] ? __fget_light+0xea/0x290 [ 1423.640126] __sys_sendmsg+0xe5/0x1b0 [ 1423.640566] ? __sys_sendmsg_sock+0x40/0x40 [ 1423.641060] ? rcu_read_lock_any_held+0x75/0xa0 [ 1423.641602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1423.642196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1423.642794] ? trace_hardirqs_on+0x5b/0x180 [ 1423.643287] do_syscall_64+0x33/0x40 [ 1423.643718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1423.644302] RIP: 0033:0x7fd20e781b19 [ 1423.644723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1423.646854] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1423.647731] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1423.648546] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1423.649358] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1423.650168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1423.650989] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 [ 1423.663798] FAT-fs (loop2): bogus number of reserved sectors [ 1423.665341] FAT-fs (loop2): Can't find a valid FAT filesystem 13:38:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) 13:38:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x900, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:49 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 5) [ 1423.721269] FAULT_INJECTION: forcing a failure. [ 1423.721269] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.722673] CPU: 0 PID: 15935 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1423.723471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1423.724411] Call Trace: [ 1423.724715] dump_stack+0x107/0x167 [ 1423.725126] should_fail.cold+0x5/0xa [ 1423.725558] should_failslab+0x5/0x20 [ 1423.725999] __kmalloc_node_track_caller+0x74/0x3b0 [ 1423.726573] ? netlink_sendmsg+0x998/0xe00 [ 1423.727055] __alloc_skb+0xb1/0x5b0 [ 1423.727468] netlink_sendmsg+0x998/0xe00 [ 1423.727936] ? netlink_unicast+0xa00/0xa00 [ 1423.728424] ? netlink_unicast+0xa00/0xa00 [ 1423.728905] __sock_sendmsg+0x154/0x190 [ 1423.729356] ____sys_sendmsg+0x70d/0x870 [ 1423.729823] ? sock_write_iter+0x3d0/0x3d0 [ 1423.730702] ? do_recvmmsg+0x6d0/0x6d0 [ 1423.731144] ? lock_downgrade+0x6d0/0x6d0 [ 1423.731616] ? __lockdep_reset_lock+0x180/0x180 [ 1423.732148] ___sys_sendmsg+0xf3/0x170 [ 1423.732591] ? sendmsg_copy_msghdr+0x160/0x160 [ 1423.733110] ? __fget_files+0x2cf/0x520 [ 1423.733565] ? lock_downgrade+0x6d0/0x6d0 [ 1423.734039] ? find_held_lock+0x2c/0x110 [ 1423.734504] ? __fget_files+0x2f8/0x520 [ 1423.734973] ? __fget_light+0xea/0x290 [ 1423.735416] __sys_sendmsg+0xe5/0x1b0 [ 1423.735850] ? __sys_sendmsg_sock+0x40/0x40 [ 1423.736342] ? rcu_read_lock_any_held+0x75/0xa0 [ 1423.736884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1423.737478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1423.738066] ? trace_hardirqs_on+0x5b/0x180 [ 1423.738562] do_syscall_64+0x33/0x40 [ 1423.738991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1423.739574] RIP: 0033:0x7fd20e781b19 [ 1423.739995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1423.742090] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1423.742971] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1423.743782] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1423.744593] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1423.745398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1423.746204] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 13:38:49 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xd02, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:38:49 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:38:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf00, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1438.302427] FAULT_INJECTION: forcing a failure. [ 1438.302427] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1438.305178] CPU: 1 PID: 16026 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1438.306780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1438.308699] Call Trace: [ 1438.309307] dump_stack+0x107/0x167 [ 1438.310154] should_fail.cold+0x5/0xa [ 1438.311056] __alloc_pages_nodemask+0x182/0x600 [ 1438.312144] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1438.313568] ? __kmalloc_node_track_caller+0x393/0x3b0 [ 1438.314798] alloc_pages_current+0x187/0x280 [ 1438.315823] allocate_slab+0x26f/0x380 [ 1438.316743] ___slab_alloc+0x470/0x700 [ 1438.317642] ? netlink_sendmsg+0x998/0xe00 [ 1438.318643] ? __kmalloc_node_track_caller+0x393/0x3b0 [ 1438.319867] __kmalloc_node_track_caller+0x393/0x3b0 [ 1438.321045] ? netlink_sendmsg+0x998/0xe00 [ 1438.322033] __alloc_skb+0xb1/0x5b0 [ 1438.322888] netlink_sendmsg+0x998/0xe00 [ 1438.323828] ? netlink_unicast+0xa00/0xa00 [ 1438.324809] ? netlink_unicast+0xa00/0xa00 [ 1438.325777] __sock_sendmsg+0x154/0x190 [ 1438.326733] ____sys_sendmsg+0x70d/0x870 [ 1438.327660] ? sock_write_iter+0x3d0/0x3d0 [ 1438.328627] ? do_recvmmsg+0x6d0/0x6d0 [ 1438.329523] ? lock_downgrade+0x6d0/0x6d0 [ 1438.330490] ? __lockdep_reset_lock+0x180/0x180 [ 1438.331516] ___sys_sendmsg+0xf3/0x170 [ 1438.332458] ? sendmsg_copy_msghdr+0x160/0x160 [ 1438.333569] ? __fget_files+0x2cf/0x520 [ 1438.334522] ? lock_downgrade+0x6d0/0x6d0 [ 1438.335444] ? find_held_lock+0x2c/0x110 [ 1438.336438] ? __fget_files+0x2f8/0x520 [ 1438.337399] ? __fget_light+0xea/0x290 [ 1438.338591] __sys_sendmsg+0xe5/0x1b0 [ 1438.339530] ? __sys_sendmsg_sock+0x40/0x40 [ 1438.340576] ? rcu_read_lock_any_held+0x75/0xa0 [ 1438.341724] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1438.343001] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1438.344448] ? trace_hardirqs_on+0x5b/0x180 [ 1438.345722] do_syscall_64+0x33/0x40 [ 1438.346902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1438.348144] RIP: 0033:0x7fd20e781b19 [ 1438.349031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1438.353452] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.355337] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1438.357112] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1438.358901] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1438.360666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.362341] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 13:39:04 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 6) 13:39:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) 13:39:04 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:39:04 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:39:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:04 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(r0, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) openat(r2, &(0x7f0000000100)='./file1\x00', 0x200000, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) faccessat2(r1, &(0x7f0000000280)='./file0\x00', 0x20, 0x300) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x200, 0x11) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file1\x00', 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 13:39:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) [ 1438.402720] loop2: detected capacity change from 0 to 41948160 [ 1438.431929] FAT-fs (loop2): bogus number of reserved sectors [ 1438.433282] FAT-fs (loop2): Can't find a valid FAT filesystem 13:39:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x149e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffd, 0x3af, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$inet(0x2, 0xa, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25", 0x17}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_open_dev$rtc(&(0x7f0000000380), 0x12e, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r5, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) 13:39:04 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:39:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x30000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) 13:39:04 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 7) 13:39:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1438.706958] FAULT_INJECTION: forcing a failure. [ 1438.706958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1438.709477] CPU: 0 PID: 16154 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1438.711148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1438.712914] Call Trace: [ 1438.713481] dump_stack+0x107/0x167 [ 1438.714255] should_fail.cold+0x5/0xa [ 1438.715076] _copy_from_iter_full+0x201/0xa60 [ 1438.716030] ? __virt_addr_valid+0x170/0x5d0 [ 1438.716964] ? __check_object_size+0x319/0x440 [ 1438.717936] netlink_sendmsg+0x879/0xe00 [ 1438.718822] ? netlink_unicast+0xa00/0xa00 [ 1438.719729] ? netlink_unicast+0xa00/0xa00 [ 1438.720624] __sock_sendmsg+0x154/0x190 [ 1438.721466] ____sys_sendmsg+0x70d/0x870 [ 1438.722332] ? sock_write_iter+0x3d0/0x3d0 [ 1438.723234] ? do_recvmmsg+0x6d0/0x6d0 [ 1438.724065] ? lock_downgrade+0x6d0/0x6d0 [ 1438.724953] ? __lockdep_reset_lock+0x180/0x180 [ 1438.725939] ___sys_sendmsg+0xf3/0x170 [ 1438.726780] ? sendmsg_copy_msghdr+0x160/0x160 [ 1438.727749] ? __fget_files+0x2cf/0x520 [ 1438.728597] ? lock_downgrade+0x6d0/0x6d0 [ 1438.729478] ? find_held_lock+0x2c/0x110 [ 1438.730348] ? __fget_files+0x2f8/0x520 [ 1438.731209] ? __fget_light+0xea/0x290 [ 1438.732040] __sys_sendmsg+0xe5/0x1b0 [ 1438.732852] ? __sys_sendmsg_sock+0x40/0x40 [ 1438.733765] ? rcu_read_lock_any_held+0x75/0xa0 [ 1438.734777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1438.735892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1438.736976] ? trace_hardirqs_on+0x5b/0x180 [ 1438.737896] do_syscall_64+0x33/0x40 [ 1438.738692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1438.739776] RIP: 0033:0x7fd20e781b19 [ 1438.740559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1438.744436] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.746057] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1438.747565] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1438.749069] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1438.750609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.752142] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 13:39:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x80000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 13:39:20 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007c"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:39:20 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:20 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:39:20 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 8) 13:39:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7, 0x7fffffff}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, 0x0) dup2(r2, r0) r3 = creat(0x0, 0x114) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000080)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r5, 0x1000003) write$binfmt_elf32(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x5, 0x1f, 0x20, 0x9, 0x3, 0x3e, 0x80, 0x207, 0x38, 0x357, 0x20, 0x7fff, 0x20, 0x1, 0xeb42, 0x0, 0xbf}, [{0x2, 0x4, 0x8, 0x7b3, 0x2, 0xfffffddc, 0xffff, 0x1}, {0x5, 0xfffffff8, 0x200, 0x1, 0x100, 0xfffffffa, 0x1ff, 0x80000001}], "1529fff153894624b5f043b5c1205a1d144a9a854b3f149535cb455e18ca925016e9974d36c7e5cc126cb5a050d5807c327a36e22b2426872b91c5c54e457e1543e060d2944ad6a8c0bdd1e738a63d67", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9c8) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)={0x100}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1, 0x4f, 0x8, 0x5, 0x0, 0x100, 0x880, 0x12, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x10029, 0x100000001, 0xfffffe00, 0x1, 0x100, 0x9, 0x1, 0x0, 0x7, 0x0, 0x56a44eea}, r4, 0xe, r5, 0x19) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13:39:20 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) [ 1454.906684] FAULT_INJECTION: forcing a failure. [ 1454.906684] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.908435] CPU: 1 PID: 16175 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1454.909454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1454.910673] Call Trace: [ 1454.911064] dump_stack+0x107/0x167 [ 1454.911590] should_fail.cold+0x5/0xa [ 1454.912139] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1454.913077] should_failslab+0x5/0x20 [ 1454.913622] __kmalloc+0x72/0x390 [ 1454.914124] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1454.915186] genl_family_rcv_msg_doit+0xda/0x330 [ 1454.915893] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1454.916836] ? cap_capable+0x1cd/0x230 [ 1454.917394] ? security_capable+0x95/0xc0 [ 1454.917991] ? ns_capable+0xe2/0x110 [ 1454.918525] genl_rcv_msg+0x36a/0x5a0 [ 1454.919084] ? genl_get_cmd+0x480/0x480 [ 1454.919653] ? nl80211_vendor_cmd_dump+0x1640/0x1640 [ 1454.920380] ? lock_release+0x680/0x680 [ 1454.920950] ? __lockdep_reset_lock+0x180/0x180 [ 1454.921631] netlink_rcv_skb+0x14b/0x430 [ 1454.922210] ? genl_get_cmd+0x480/0x480 [ 1454.922780] ? netlink_ack+0xab0/0xab0 [ 1454.923351] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1454.924003] ? is_vmalloc_addr+0x7b/0xb0 [ 1454.924583] genl_rcv+0x24/0x40 [ 1454.925078] netlink_unicast+0x6ce/0xa00 [ 1454.925681] ? netlink_attachskb+0xab0/0xab0 [ 1454.926336] netlink_sendmsg+0x90f/0xe00 [ 1454.926928] ? netlink_unicast+0xa00/0xa00 [ 1454.927544] ? netlink_unicast+0xa00/0xa00 [ 1454.928178] __sock_sendmsg+0x154/0x190 [ 1454.928749] ____sys_sendmsg+0x70d/0x870 [ 1454.929338] ? sock_write_iter+0x3d0/0x3d0 [ 1454.929956] ? do_recvmmsg+0x6d0/0x6d0 [ 1454.930524] ? lock_downgrade+0x6d0/0x6d0 [ 1454.931122] ? __lockdep_reset_lock+0x180/0x180 [ 1454.931813] ___sys_sendmsg+0xf3/0x170 [ 1454.932368] ? sendmsg_copy_msghdr+0x160/0x160 [ 1454.933041] ? __fget_files+0x2cf/0x520 [ 1454.933620] ? lock_downgrade+0x6d0/0x6d0 [ 1454.934223] ? find_held_lock+0x2c/0x110 [ 1454.934815] ? __fget_files+0x2f8/0x520 [ 1454.935397] ? __fget_light+0xea/0x290 [ 1454.935977] __sys_sendmsg+0xe5/0x1b0 [ 1454.936543] ? __sys_sendmsg_sock+0x40/0x40 [ 1454.937182] ? rcu_read_lock_any_held+0x75/0xa0 [ 1454.937867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1454.938646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1454.939390] ? trace_hardirqs_on+0x5b/0x180 [ 1454.940003] do_syscall_64+0x33/0x40 [ 1454.940545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1454.941307] RIP: 0033:0x7fd20e781b19 [ 1454.941838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1454.944524] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1454.945606] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1454.946618] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1454.947685] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1454.948736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.949746] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 [ 1454.955926] loop2: detected capacity change from 0 to 41948160 13:39:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) [ 1454.998263] FAT-fs (loop2): bogus number of reserved sectors [ 1455.000194] FAT-fs (loop2): Can't find a valid FAT filesystem 13:39:21 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007c"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:39:21 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:21 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 9) [ 1455.047415] FAULT_INJECTION: forcing a failure. [ 1455.047415] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.049032] CPU: 1 PID: 16209 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1455.049990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1455.051137] Call Trace: [ 1455.051498] dump_stack+0x107/0x167 [ 1455.052009] should_fail.cold+0x5/0xa [ 1455.052547] ? create_object.isra.0+0x3a/0xa20 [ 1455.053189] should_failslab+0x5/0x20 [ 1455.053715] kmem_cache_alloc+0x5b/0x310 [ 1455.054279] create_object.isra.0+0x3a/0xa20 [ 1455.054883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1455.055582] __kmalloc+0x16e/0x390 [ 1455.056095] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1455.056959] genl_family_rcv_msg_doit+0xda/0x330 [ 1455.057610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1455.058523] ? cap_capable+0x1cd/0x230 [ 1455.059076] ? security_capable+0x95/0xc0 [ 1455.059652] ? ns_capable+0xe2/0x110 [ 1455.060162] genl_rcv_msg+0x36a/0x5a0 [ 1455.060749] ? genl_get_cmd+0x480/0x480 [ 1455.061487] ? nl80211_vendor_cmd_dump+0x1640/0x1640 [ 1455.062177] ? lock_release+0x680/0x680 [ 1455.062718] ? __lockdep_reset_lock+0x180/0x180 [ 1455.063366] netlink_rcv_skb+0x14b/0x430 [ 1455.063915] ? genl_get_cmd+0x480/0x480 [ 1455.064451] ? netlink_ack+0xab0/0xab0 [ 1455.065003] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1455.065640] ? is_vmalloc_addr+0x7b/0xb0 [ 1455.066194] genl_rcv+0x24/0x40 [ 1455.066644] netlink_unicast+0x6ce/0xa00 [ 1455.067209] ? netlink_attachskb+0xab0/0xab0 [ 1455.067816] netlink_sendmsg+0x90f/0xe00 [ 1455.068377] ? netlink_unicast+0xa00/0xa00 [ 1455.068960] ? netlink_unicast+0xa00/0xa00 [ 1455.069536] __sock_sendmsg+0x154/0x190 [ 1455.070079] ____sys_sendmsg+0x70d/0x870 [ 1455.070653] ? sock_write_iter+0x3d0/0x3d0 [ 1455.071242] ? do_recvmmsg+0x6d0/0x6d0 [ 1455.071768] ? lock_downgrade+0x6d0/0x6d0 [ 1455.072337] ? __lockdep_reset_lock+0x180/0x180 [ 1455.072994] ___sys_sendmsg+0xf3/0x170 [ 1455.073530] ? sendmsg_copy_msghdr+0x160/0x160 [ 1455.074154] ? __fget_files+0x2cf/0x520 [ 1455.074689] ? lock_downgrade+0x6d0/0x6d0 [ 1455.075254] ? find_held_lock+0x2c/0x110 [ 1455.075803] ? __fget_files+0x2f8/0x520 [ 1455.076340] ? __fget_light+0xea/0x290 [ 1455.076870] __sys_sendmsg+0xe5/0x1b0 [ 1455.077387] ? __sys_sendmsg_sock+0x40/0x40 [ 1455.077962] ? rcu_read_lock_any_held+0x75/0xa0 [ 1455.078616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1455.079337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1455.080043] ? trace_hardirqs_on+0x5b/0x180 [ 1455.080635] do_syscall_64+0x33/0x40 [ 1455.081137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1455.081842] RIP: 0033:0x7fd20e781b19 [ 1455.082343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1455.084872] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.085910] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1455.086891] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1455.087844] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.088805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.089761] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 13:39:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x100000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:21 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 10) 13:39:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 13:39:21 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1455.176790] FAULT_INJECTION: forcing a failure. [ 1455.176790] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.178303] CPU: 1 PID: 16254 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1455.179237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1455.180306] Call Trace: [ 1455.180661] dump_stack+0x107/0x167 [ 1455.181133] should_fail.cold+0x5/0xa [ 1455.181627] ? __alloc_skb+0x6d/0x5b0 [ 1455.182116] should_failslab+0x5/0x20 [ 1455.182603] kmem_cache_alloc_node+0x55/0x330 [ 1455.183204] __alloc_skb+0x6d/0x5b0 [ 1455.183677] ? genl_rcv_msg+0x36a/0x5a0 [ 1455.184190] netlink_ack+0x1ed/0xab0 [ 1455.184674] ? nl80211_vendor_cmd_dump+0x1640/0x1640 [ 1455.185325] ? netlink_sendmsg+0xe00/0xe00 [ 1455.185878] ? lock_release+0x680/0x680 [ 1455.186387] ? __lockdep_reset_lock+0x180/0x180 [ 1455.187006] netlink_rcv_skb+0x348/0x430 [ 1455.187527] ? genl_get_cmd+0x480/0x480 [ 1455.188036] ? netlink_ack+0xab0/0xab0 [ 1455.188550] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1455.189131] ? is_vmalloc_addr+0x7b/0xb0 [ 1455.189671] genl_rcv+0x24/0x40 [ 1455.190091] netlink_unicast+0x6ce/0xa00 [ 1455.190622] ? netlink_attachskb+0xab0/0xab0 [ 1455.191222] netlink_sendmsg+0x90f/0xe00 [ 1455.191760] ? netlink_unicast+0xa00/0xa00 [ 1455.192315] ? netlink_unicast+0xa00/0xa00 [ 1455.192860] __sock_sendmsg+0x154/0x190 [ 1455.193370] ____sys_sendmsg+0x70d/0x870 [ 1455.193889] ? sock_write_iter+0x3d0/0x3d0 [ 1455.194443] ? do_recvmmsg+0x6d0/0x6d0 [ 1455.194963] ? lock_downgrade+0x6d0/0x6d0 [ 1455.195495] ? __lockdep_reset_lock+0x180/0x180 [ 1455.196176] ___sys_sendmsg+0xf3/0x170 [ 1455.196894] ? sendmsg_copy_msghdr+0x160/0x160 [ 1455.197561] ? __fget_files+0x2cf/0x520 [ 1455.198073] ? lock_downgrade+0x6d0/0x6d0 [ 1455.198600] ? find_held_lock+0x2c/0x110 [ 1455.199133] ? __fget_files+0x2f8/0x520 [ 1455.199647] ? __fget_light+0xea/0x290 [ 1455.200149] __sys_sendmsg+0xe5/0x1b0 [ 1455.200638] ? __sys_sendmsg_sock+0x40/0x40 [ 1455.201182] ? rcu_read_lock_any_held+0x75/0xa0 [ 1455.201779] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1455.202451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1455.203108] ? trace_hardirqs_on+0x5b/0x180 [ 1455.203662] do_syscall_64+0x33/0x40 [ 1455.204135] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1455.204785] RIP: 0033:0x7fd20e781b19 [ 1455.205254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1455.207612] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.208572] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1455.209476] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1455.210388] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.211301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1455.212209] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 13:39:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002000210c0000000000000000020000000c0000006b657972696e6500"], 0x20}}, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5325, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5325, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) dup2(r2, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)=[r4, r0, r5]}, 0x3) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x240049c1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1455.244927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:39:21 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007c"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:39:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0ffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 1) 13:39:21 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:39:21 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:34 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 11) 13:39:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x1000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:34 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:39:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:39:34 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:39:34 executing program 0: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xa78, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="01c292fa0c590e4ab46c4d12902cb973100997ecc8160e43545f5bb80e116b1797bcfd709223dfc710fc1eccd613778ee7028125c54e560aa9e866f92a80e03eab489b79d783b33b21f4b86c2cdf62ff093af3a8e3b28b3830211d5f079540147c11d3d07b75892f82c70896e7e12a1a93f82cff5be5f9bc944e460d56897a2305e1e0eb416885d16dcf97bcc1500ee6dfe341aebb7d5b6d0e8d44f04b7b8ee661f8b245f9cf6cca013747791fc7c0d8bc11350928d7fe53cb7088dd639b1785f4ecc34894cbf006abcd34b524b238b0bff3c995e0cf04d87e19b0c114b65734e82b10b9c85457232deefc4cb76a436e5ae523ffa560e38e18bf3576b02e6ca584c62a57f792f17ad85997e716d53d7f69c73c0e9d0556d6f821c1125d03e3a9f3e3bf2441c281da4103b44909cbe1c0417efecd287e1efc5a7d44ddeff9711ed11783f8942cb376f99a2817dda361cb32c9aaf20585065357c2e1673ddeab0c772b44962871ff6157402aae6a355a54eef63533700c0b1894344bc008124051da135557b8bd578641a2040036b1506be39089a96b551e8ed44aee9773ce00c8c4fa2ce58b6cd3e219cef952ef6a8d2448dd1334c671f99422d4b7002f3c0e85282d1ed04a7905cef5a4552a8a01a5956b7508a7c3fcaa987b49ae8b1ce1692405d610f9e2a6ad176b2ccad113b22487ee7aaad5584e78b65cd71125803371ce8cb1bb3cdc042dfffe789080d488521b616ab28168f0547104020c3c47fa7b41a392f10e1e722d94ff22bd20d597438c1f70bb30ed152b629a8cb474f48228330902a673a86b90e05360c4a233f6d60bc8fe7375cb30a7ec78bc2c2223abb2a4fd9e16bd83313f7a64605ace2f53ecee61d787fda53adc17f9133d9b408d142165ea1402098384990097b5708657684bfac37a4e81399d96318a3d7dd8ba658c8cd748f5d64ab71d970f3d977a255a39f9e6188cec21ade85e2ba1cace64f3bca70fe6a91ca79c14281b01b65b1535cb1977732c27d4f328d3d784406cf38777033a0ceeb501b064bc12066fdb2ac748074684cc763d13bba4af1c154da199857fa0bfa3a4c51979eda45131ed400c2de0c2bbe314da58f8708655f41beb0e470725b2474d58f6003f38b731ee7faa3b346c27d2de234aacaeb0e3d1d72ccc2bb82f2a84844438585197d96cdf37f183192c024bd48bfaa89f88d775d09f9b5ad1f3556a07bcab80450fa442f7612a1c6b39adb4c2d908379c2573b8d113fce0d121fbc8bf26141d1bad5d4766214e569f63b73d80277fde174474a469f7763a627ebb0f7b35af96305aa18e213203975537ca4d7bdd9e0fe079777a752632d1653d7c41fdec82042889d90cff28b9e2b3dc4256b628c0304873db0ac99c6610de6fcf2ce97e5a35cad8d8bbf2bd5e6a078de47844d49085aeaaa9793ddcf38c43342c10394a1f2c8a9e020c80dac6e16392d585149d5a3c4ea5a4806dfcc6345bff93065d1aa94e9dc5b1e0f6c1817abd10cc7644f7f17149edc3d41258a4af11456609788b3ab6d87881f783fbb4bba5620583d2fcfa952f62bc5aa050067d35d469de50018bf8203009abfe22bafdc48475bd5a5c2eaf82524cec3d72a3cdae5c48cc26f06e075a5945485014a01c518c51e9ddea89afaacf2252c98f55575846d760a91008d23fdbe6a79b3f033e38d6f3863f222228535d7cc53ad4d600366cf44d7fba5802703b47a6ce621493a9ec3a217bda037c186525199a14491fccc8df4bd93ac1c0c7fde4616131e861d359bd506587158cbf0856b0765749eb424f82bac3fcf22795eb41249e9816ed725bc01831e7327e582c68d07173976df0493cf22db0b183574f5b0095a3c7e0abcf2bbada51437c2522061ed37d3885b5c9ff8277f45bad844f5c9effdaa0abf69512dc468c47df65f58ecf981c81335c6405a949ec76e8398194aa9bac7ee740f1b87db9a8fafb7f762524970c69c22277cbc216515c6ee73a833a6be7add73ad62e26f0719c1db73d2a1d751c40584b7b10d62d1642db46843c018aba126f835b91aceba3b9a75b1751b746369ad5328d40fb43eba26737f7a0742664f0413ae421b72688f1f427e3f319bacb42e5b4a5b4fa4890f72b2975ad8b3be86be983840560735819d9053ca24d59d76c4bdf8f683886151e45e6619777e27aef9f220c9dfd98610bd2a10c66b64ad06a7b2bef9dbe05b4ec5b08313868f82a564a4a339ff31aede1f9f63359249dfcb3a64f7afb153835870d55fdddf8db32e83f1299424356087a0a572dc99a7bf267e4e022a64c2766b9d17d68010eaa5ffee4c631ea1a46a328c48dde0101a661e1d9e6d3f8159863f797c131561be5198727d3eeed0fba08c2a65bab0e96921097bf1da0dfa7b22b2775953935ae1829d8e6ba50ffe3d228ab723e03dedd5290384843ec39e2ae769cd9d864c24fda01335e59a74b9b57729a25ba84e3dde7c9329f9e82b047a7958f4c4d6d2c432e5ae79372068e92e4d23fa2ee4bc8761a913fc32f5ae4ae717b2b59b5ebe33d8d5c16a421d316a85ba83d71a26326d14cb87b260b16591cb7f0637b0ee8b334195e64136765111898083004c02d4ad27c424922122a7f782ddcaea9f6db95ba56855d86ff0dcb619c4dc14716abad5450241d2a8e9554053f482f0ff69952673291e0da40a13bd73359e411fde538728241cdee2e032317cbf8267f14e9de97a56e428ca8a0032417dbdf1cb9c74f29991e9e3cf0d271650415b646f6b8490d7033bb8d552f7d2634f90a8d6b2409cdcb9a5d344bbffa48cf4911e5f3d2ad7a89d078793afb6af38ba8721b4ffd885a5b44c356d5256a62ecb4e0825f3dbe4fc495a16c75cda9a0b944b2478a788aa2606eb2330f83dcbca827ad86262b4d52312d00c31ec107d0522a23867006a229732732483161ce5993fe0f756842d84d353dfab50a2ccd80a5a9e58b5e01026dff5c4419b81c6059a990275a7a6db986bbe72bcca7188af2d147b5b3e59828ef92c2d03d1568465176ba93a8a8ad2390ce40c33f372c92ec664b1bd11b5c509d389c0c0bc9dd5f408b1fb4ec42364d319dd88c1722cdf63e05acf21db26d0e7c9458159107a427c608ede9351997c02a5b815db1d63316c76d7e200d74bf52c500d8189cb0fb7ba48cedca87f56d33b32dc97e236635d940ecf80d9fc3f5d454dc6aaa5e4d32110256823f334ca5196e73e36b9745c234246aaf5a3c2d6ed3515f5c54be0d55745bcbe0ba4881bf26a3cb38546c830f66afe55499eb890408a0e36a7644b058a3b546ee03fceb33557c2ba7868bf07dfd26cc2e24caf94c20bf1667dc9938bb74751635f632f98b4430c7e6f0b61f47ae442be93215a642e4d317fbab5a278bc6fb6efda06a9fc8d6b64ca867f1102b10a1fab42c360cce7e6f494967cf5590494addc9c629bace9169fc9db07471daf6f849bc24751a8d09ca73e7fb9e41a146241ab456e9f848286502f1df149fd205c414ca34ffe0c7eb114f78acec462a3856109d8d16a7c7278556e0b2593decd2affe71fec86d2ee0b6f5fab8ac278a4da53913772189a28d79c31ef75370da0677dd369ef9fa9ccfb28c121f5c69b628393a20f651f4777b44851beaa9ee8b7ba954d56d266c8a8df13d296d9f2c7e5836f8f7398cbe377e92715be4b0401a4c2e5db90a53f9748eb1c0effd5bb05adfeadaadb08407b89be555b8d45266e15b2dbac87c80ab842da59e7a190039fc04576bd96f5840f395160117beca1b2f5b19269284117042f24add7ef09953df85a4a00a2a9479e41bb4ac44ff72fc2311eef4c255252bbc3b90c640b66891d1349f8870169ee3d313c4b29fb4a2b6cc93186ccf683c822137ba28d22ef57de5247c7fa873dcac0358ba5113b7e318d8179ea12c6ea973f765602263eb7c369c2d5eceb35e41febb607d8e8112da7a1ec852522b312a8f971e21d2d8b0fff798a10f65c66bb891bac62b34eac3f58f807e95b85b2e6b11473c7c1c9eb79aa5692f07961f5d63939f3ebabbbc4dd4d506bf442f0696fc82928c5bfd1bba31e3511da3b19dec57f913e202942c86421ee57f499a35eadef2db0afb41aa77e2a7db3d260e7410fe3fd127f9def3e79d0fa0abe9ab05c5f95d49947881785c6f23bfe4a2082a8e6f44c5be1ef16309e116510552d3c5d424e199a4321c88dd372d71992723eaf54eb070ec0377b6f7d6b03f156088ba86bce1c8a72bbf5ef9db2e7dc802150d3a070558d883638fc43f218e871e31abde7fab2b72a204b8e20d746123f56868552877046161fdd2d75c562d94761bf22978ce0786d3658a1f547bc143e307a8142a72b8fc2012b1ed4fd1fd5cb5d99ac64b807ccc16a4e0d60920c7d68e324671d53238cc935ccff7f48778192e7895e8cb92735533b57369745e22abf858a7281f9e0f0c5079f46e2b0ce9c9fbd95097e6f3c9c56f14b388eff9461fba6a9086de556e1f8f162b53656d228491fc7c9a7d89ccc365224b93131b67d7a4e0e4928331dcdb05d466289c896fee425b127d88e3d3767f0defbfba3cf53bdf008349dbdc7c7ef9ebf0db4319889e53f0a06aa0d2de158b7d90b631d2b4968139f813c7b076dfa9427e28150a8997ee94991eaa49f8a2b6015428181ea63227285c405864c7df1fe6032bdf31865018b7bd8d81e4b39427a2b33b692d8bcc1de731910d4be2cc3872192dd6200fd9afb26fe4964ca97225f341a66a34f67adb5d4d77734fd9371d295cc4efe2376677bba1efe4cc9898eef6484b2d91b4d6e7e1d7d7e686f2f1e4b4c74de4932775fd2489d1b8b7bd30de282af366c3adf82fc1450828a1baf4f95ad8a9176f77dcd71598fc972592ea3c2dcec6f9cf9d2a1ab15adf2e1cc7877e226f20691adaac06ab77e11416bd37d8218f970beea7129fe0476a779bc6d50aab9432dea0bc3fd614ea623cb6e777c0a362d3821f56afadc8009eaa72fad7f37e642ec6d27d9d4186fff1711144ef61219fee4cd4ef2b9f1823086370081694190b353f6a23f906edfc8021f208fafba8c33a5850caad7303ad0c3ef1d1b60bde9989eba843eb55d86eed72d6f30d8c966cf55b53e811eebdec77e9ef242dd6b4b881c7f9bb15ab873ccc239ec27b3bd60c693851062ccfdf11c967e92ef996c0cea4a25a262bf2da0b4fa6ee0cc6566fd41bc9a5d60a7ca638b34470b3de43901679c5632063d2c9889189a56ed098da31e2c9df46060e1d876e2fd0f125470c25c24d71e8cba3b0992571a272fa3cf28be47e8bc6d304add3968023230eb1cd8fbaa3f4b7a2ecef772e5d406135eabe34842b24bf76a9669bc8b7abd6768eebf7c740a5a3e8ab29627d2777365ffa3f12784a2ea9227e261883224dec49c4c7493b78bcc23187b295abeb36e6882483d9c57135a603f98936d85d9d7101e5ec830753e0ef1e9d136e4dde1c065c349c95cb5c9f3fc4254deb359ee9b59c500bbf8200e4ead6a688db97c0e191da2e2addd0a06e2be33d07c79530ea7de1613e01eb9bbea11ee48c6d92ae1b7d559b4afb37d22d274312236b189b88bb4539709caa3cd87e86bdec8bcfffeee3d9d1853781aebcddfcc11f41fbe062dc8bf9f49e20c50145bec1af0d6c3bc769e01b8f5752540148d0ad7a8780ac649357ae03406f77a601c4f78d7f8b4d3d540236cbc1f57e51ece76431f89fd017345a8fc2674bf4a301978c426333ee499613a45cb1f096ddcfbe990608919aeefeb581695f7b9225dab0cdf5072c99e000000000000000"], 0xfdef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18) unshare(0x48020200) 13:39:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1468.708221] loop2: detected capacity change from 0 to 41948160 [ 1468.719698] FAULT_INJECTION: forcing a failure. [ 1468.719698] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.721180] CPU: 0 PID: 16446 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1468.722076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.723169] Call Trace: [ 1468.723516] dump_stack+0x107/0x167 [ 1468.723993] should_fail.cold+0x5/0xa [ 1468.724492] ? create_object.isra.0+0x3a/0xa20 [ 1468.725084] should_failslab+0x5/0x20 [ 1468.725579] kmem_cache_alloc+0x5b/0x310 [ 1468.726109] create_object.isra.0+0x3a/0xa20 [ 1468.726680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1468.727352] kmem_cache_alloc_node+0x169/0x330 [ 1468.727954] __alloc_skb+0x6d/0x5b0 [ 1468.728430] ? genl_rcv_msg+0x36a/0x5a0 [ 1468.728948] netlink_ack+0x1ed/0xab0 [ 1468.729435] ? nl80211_vendor_cmd_dump+0x1640/0x1640 [ 1468.730093] ? netlink_sendmsg+0xe00/0xe00 [ 1468.730643] ? lock_release+0x680/0x680 [ 1468.731165] ? __lockdep_reset_lock+0x180/0x180 [ 1468.731770] netlink_rcv_skb+0x348/0x430 [ 1468.732294] ? genl_get_cmd+0x480/0x480 [ 1468.732812] ? netlink_ack+0xab0/0xab0 [ 1468.733320] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1468.733913] ? is_vmalloc_addr+0x7b/0xb0 [ 1468.734437] genl_rcv+0x24/0x40 [ 1468.734863] netlink_unicast+0x6ce/0xa00 [ 1468.735399] ? netlink_attachskb+0xab0/0xab0 [ 1468.735977] netlink_sendmsg+0x90f/0xe00 [ 1468.736506] ? netlink_unicast+0xa00/0xa00 [ 1468.737061] ? netlink_unicast+0xa00/0xa00 [ 1468.737623] __sock_sendmsg+0x154/0x190 [ 1468.738138] ____sys_sendmsg+0x70d/0x870 [ 1468.738672] ? sock_write_iter+0x3d0/0x3d0 [ 1468.739221] ? do_recvmmsg+0x6d0/0x6d0 [ 1468.739726] ? lock_downgrade+0x6d0/0x6d0 [ 1468.740275] ? __lockdep_reset_lock+0x180/0x180 [ 1468.740912] ___sys_sendmsg+0xf3/0x170 [ 1468.741444] ? sendmsg_copy_msghdr+0x160/0x160 [ 1468.742050] ? __fget_files+0x2cf/0x520 [ 1468.742563] ? lock_downgrade+0x6d0/0x6d0 [ 1468.743113] ? find_held_lock+0x2c/0x110 [ 1468.743650] ? __fget_files+0x2f8/0x520 [ 1468.744179] ? __fget_light+0xea/0x290 [ 1468.744685] __sys_sendmsg+0xe5/0x1b0 [ 1468.745174] ? __sys_sendmsg_sock+0x40/0x40 [ 1468.745729] ? rcu_read_lock_any_held+0x75/0xa0 [ 1468.746340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.747020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.747687] ? trace_hardirqs_on+0x5b/0x180 [ 1468.748247] do_syscall_64+0x33/0x40 [ 1468.748733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.749391] RIP: 0033:0x7fd20e781b19 [ 1468.749871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.752238] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1468.753214] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1468.754129] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1468.755054] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1468.755969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1468.756883] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 [ 1468.759628] FAT-fs (loop2): bogus number of reserved sectors [ 1468.760417] FAT-fs (loop2): Can't find a valid FAT filesystem 13:39:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x2000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:34 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:39:34 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 12) 13:39:34 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x20f, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1468.973273] FAULT_INJECTION: forcing a failure. [ 1468.973273] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.974637] CPU: 0 PID: 16568 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1468.975458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.976437] Call Trace: [ 1468.976755] dump_stack+0x107/0x167 [ 1468.977185] should_fail.cold+0x5/0xa [ 1468.977637] should_failslab+0x5/0x20 [ 1468.978081] __kmalloc_node_track_caller+0x74/0x3b0 [ 1468.978663] ? netlink_ack+0x1ed/0xab0 [ 1468.979137] __alloc_skb+0xb1/0x5b0 [ 1468.979568] netlink_ack+0x1ed/0xab0 [ 1468.980003] ? nl80211_vendor_cmd_dump+0x1640/0x1640 [ 1468.980594] ? netlink_sendmsg+0xe00/0xe00 [ 1468.981088] ? lock_release+0x680/0x680 [ 1468.981557] ? __lockdep_reset_lock+0x180/0x180 [ 1468.982100] netlink_rcv_skb+0x348/0x430 [ 1468.982576] ? genl_get_cmd+0x480/0x480 [ 1468.983051] ? netlink_ack+0xab0/0xab0 [ 1468.983512] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1468.984046] ? is_vmalloc_addr+0x7b/0xb0 [ 1468.984520] genl_rcv+0x24/0x40 [ 1468.984906] netlink_unicast+0x6ce/0xa00 [ 1468.985378] ? netlink_attachskb+0xab0/0xab0 [ 1468.985899] netlink_sendmsg+0x90f/0xe00 [ 1468.986375] ? netlink_unicast+0xa00/0xa00 [ 1468.986870] ? netlink_unicast+0xa00/0xa00 [ 1468.987371] __sock_sendmsg+0x154/0x190 [ 1468.987836] ____sys_sendmsg+0x70d/0x870 [ 1468.988312] ? sock_write_iter+0x3d0/0x3d0 [ 1468.988801] ? do_recvmmsg+0x6d0/0x6d0 [ 1468.989259] ? lock_downgrade+0x6d0/0x6d0 [ 1468.989747] ? __lockdep_reset_lock+0x180/0x180 [ 1468.990293] ___sys_sendmsg+0xf3/0x170 [ 1468.990747] ? sendmsg_copy_msghdr+0x160/0x160 [ 1468.991292] ? __fget_files+0x2cf/0x520 [ 1468.991749] ? lock_downgrade+0x6d0/0x6d0 [ 1468.992230] ? find_held_lock+0x2c/0x110 [ 1468.992704] ? __fget_files+0x2f8/0x520 [ 1468.993175] ? __fget_light+0xea/0x290 [ 1468.993625] __sys_sendmsg+0xe5/0x1b0 [ 1468.994062] ? __sys_sendmsg_sock+0x40/0x40 [ 1468.994556] ? rcu_read_lock_any_held+0x75/0xa0 [ 1468.995104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.995707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.996299] ? trace_hardirqs_on+0x5b/0x180 [ 1468.996795] do_syscall_64+0x33/0x40 [ 1468.997229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.997818] RIP: 0033:0x7fd20e781b19 [ 1468.998247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1469.000357] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1469.001239] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1469.002069] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1469.002894] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1469.003735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1469.004562] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 13:39:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x3000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x174) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) openat(r2, &(0x7f0000000000)='./file1\x00', 0x20, 0x11) sendfile(r0, r1, 0x0, 0x100000001) 13:39:52 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:39:52 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 13) 13:39:52 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:52 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:39:52 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:39:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1486.475699] loop2: detected capacity change from 0 to 41948160 [ 1486.483076] FAT-fs (loop2): bogus number of reserved sectors [ 1486.484399] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1486.486492] FAULT_INJECTION: forcing a failure. [ 1486.486492] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.489080] CPU: 1 PID: 16589 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1486.490579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.492388] Call Trace: [ 1486.492972] dump_stack+0x107/0x167 [ 1486.493782] should_fail.cold+0x5/0xa [ 1486.494612] ? create_object.isra.0+0x3a/0xa20 [ 1486.495619] should_failslab+0x5/0x20 [ 1486.496440] kmem_cache_alloc+0x5b/0x310 [ 1486.497320] create_object.isra.0+0x3a/0xa20 [ 1486.498262] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1486.499377] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1486.500473] ? netlink_ack+0x1ed/0xab0 [ 1486.501331] __alloc_skb+0xb1/0x5b0 [ 1486.502120] netlink_ack+0x1ed/0xab0 [ 1486.502943] ? nl80211_vendor_cmd_dump+0x1640/0x1640 [ 1486.504057] ? netlink_sendmsg+0xe00/0xe00 [ 1486.504980] ? lock_release+0x680/0x680 [ 1486.505846] ? __lockdep_reset_lock+0x180/0x180 [ 1486.506851] netlink_rcv_skb+0x348/0x430 [ 1486.507738] ? genl_get_cmd+0x480/0x480 [ 1486.508591] ? netlink_ack+0xab0/0xab0 [ 1486.509437] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1486.510434] ? is_vmalloc_addr+0x7b/0xb0 [ 1486.511348] genl_rcv+0x24/0x40 [ 1486.512065] netlink_unicast+0x6ce/0xa00 [ 1486.512955] ? netlink_attachskb+0xab0/0xab0 [ 1486.513924] netlink_sendmsg+0x90f/0xe00 [ 1486.514817] ? netlink_unicast+0xa00/0xa00 [ 1486.515753] ? netlink_unicast+0xa00/0xa00 [ 1486.516669] __sock_sendmsg+0x154/0x190 [ 1486.517537] ____sys_sendmsg+0x70d/0x870 [ 1486.518424] ? sock_write_iter+0x3d0/0x3d0 [ 1486.519359] ? do_recvmmsg+0x6d0/0x6d0 [ 1486.520204] ? lock_downgrade+0x6d0/0x6d0 [ 1486.521113] ? __lockdep_reset_lock+0x180/0x180 [ 1486.522127] ___sys_sendmsg+0xf3/0x170 [ 1486.522982] ? sendmsg_copy_msghdr+0x160/0x160 [ 1486.523992] ? __fget_files+0x2cf/0x520 [ 1486.524854] ? lock_downgrade+0x6d0/0x6d0 [ 1486.525768] ? find_held_lock+0x2c/0x110 [ 1486.526659] ? __fget_files+0x2f8/0x520 [ 1486.527553] ? __fget_light+0xea/0x290 [ 1486.528416] __sys_sendmsg+0xe5/0x1b0 [ 1486.529253] ? __sys_sendmsg_sock+0x40/0x40 [ 1486.530198] ? rcu_read_lock_any_held+0x75/0xa0 [ 1486.531258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.532410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.533539] ? trace_hardirqs_on+0x5b/0x180 [ 1486.534474] do_syscall_64+0x33/0x40 [ 1486.535293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.536383] RIP: 0033:0x7fd20e781b19 [ 1486.537199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.541263] RSP: 002b:00007fd20bcf7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1486.542884] RAX: ffffffffffffffda RBX: 00007fd20e894f60 RCX: 00007fd20e781b19 [ 1486.544401] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1486.545913] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.547440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:39:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x4000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1486.548950] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 13:39:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:52 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x500, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x5000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f00000001c0)="ed4100000008d508c0958fc7b9eb45db78c3bfd810130873000494b03a40da1bf329f059", 0x24, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00']) 13:39:52 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:39:52 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 14) [ 1486.852377] FAULT_INJECTION: forcing a failure. [ 1486.852377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.855230] CPU: 0 PID: 16711 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1486.856702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.858430] Call Trace: [ 1486.858995] dump_stack+0x107/0x167 [ 1486.859780] should_fail.cold+0x5/0xa [ 1486.860583] _copy_to_user+0x2e/0x180 [ 1486.861384] simple_read_from_buffer+0xcc/0x160 [ 1486.862358] proc_fail_nth_read+0x198/0x230 [ 1486.863281] ? proc_sessionid_read+0x230/0x230 [ 1486.864234] ? security_file_permission+0xb1/0xe0 [ 1486.865255] ? proc_sessionid_read+0x230/0x230 [ 1486.866217] vfs_read+0x228/0x620 [ 1486.866963] ksys_read+0x12d/0x260 [ 1486.867723] ? vfs_write+0xb10/0xb10 [ 1486.868513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.869613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.870688] do_syscall_64+0x33/0x40 [ 1486.871471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.872550] RIP: 0033:0x7fd20e73469c [ 1486.873323] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1486.877191] RSP: 002b:00007fd20bcf7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1486.878794] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007fd20e73469c [ 1486.880295] RDX: 000000000000000f RSI: 00007fd20bcf71e0 RDI: 0000000000000005 [ 1486.881800] RBP: 00007fd20bcf71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.883327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.884831] R13: 00007ffcde859c7f R14: 00007fd20bcf7300 R15: 0000000000022000 13:39:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:39:52 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5}, {0x5, 0x0, 0x1, 0x3}]}) r1 = syz_open_dev$rtc(&(0x7f00000003c0), 0x5a, 0x155582) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000580)=ANY=[@ANYBLOB="070000000700000000ef58f610129eff000000007ed8487c35c97ce46beb701972822fc77944469551eeab973cb29e75191bfb557169acb18adb91366b97bdd67cf36eaf7a206f8447e700e0f0fbed2e04a72f6dd0a09c088bba805f8b8e19f5473d9b67b05ad720bb9d00a3c6b95dbf8b50458aed9870000000000000000000"]) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) tee(r2, 0xffffffffffffffff, 0xffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xa9, 0x0, 0x1d, 0x19, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x100000001, 0x9]}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x0, 0x13, 0x0, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]}) creat(&(0x7f0000000040)='./file1\x00', 0xc8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000200)=ANY=[@ANYBLOB="9789cdc1a58bb7523a45992fbb476b7ba2f081093dc89803cc6745a634a85feaf8ebcd4ec14543c88d990c72ba873c4073a7537a63495141fd6432925ef7240019f7bd2bc2541505748aaf5c8bad5ffbb966b332d87a3c99b80c16f31f281131ef91e6"]) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) open(&(0x7f0000000080)='./file2\x00', 0x80, 0x26) acct(&(0x7f00000001c0)='./file1\x00') acct(&(0x7f0000000380)='./file1\x00') perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1487.070837] Process accounting resumed [ 1487.107882] Process accounting resumed [ 1487.114776] Process accounting resumed [ 1487.175862] Process accounting resumed 13:40:07 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:07 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x36, 0x400, 0x70bd26, 0x25dfdbfe, {0x18}, [@generic="66804eb74372ed"]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x8, 0x6, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) r1 = dup2(r0, r0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0x6, 0x4) 13:40:07 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f0008000000000000000000ff0250831958000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205f06a498ecce8c2e2bac055023a5c6a60048ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd28ccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f6365815fbaeed820000161d17c3a8446ef221d39d3504136905c2a587000000000000224cab6b3426f7aca5dcf032ec434c3ad68f54a9206946735225076eee7fd7cb35c0b06b2b8f925971d75e9889d3ea0a9d6959c090419ce3f6b1b4eb35ef1cb65122537fb5a794f71da1e6fae5c881bc83d458f97e6eb70cc5b3ca6dd4ec51524272620363fe56522b82c0ca9b89f564ddc64d8ca8b2b803207b72ee280f837d6f2be1f7f6c37c28fb0067d56e7574afdcc35c47645ffa74c26e91df9ace7b773459b987ad777043d71e12df0700d72483ab6489bffb00000000000000000000000000000000003e521370adeffb5357d5d6eef885594d33addb3fa1f821561d84cd342060fd4ebfbb98e3c635945a519da82404168ccd1112edf4e85bc47af3d1077ebffd59b691dd6131dc270c06515083d1489a3b713c97c197c6cb90b17b04dad833de21d66041ce1360cfa0e2552e28bda10744c5550e308c53e4e6cff9456be143f162ccc658a49f2c1ccc7d30e7800085dba28bfee6d705000d131a0a1dac4dac4535cfde1eee17aff22f4d009cb71305d239a21898882d1bdd607ba69ded308d9c7f05cae2c3b2cbc8ca82"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:40:07 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:40:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:07 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:40:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x6000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:07 executing program 0: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000001e00)={0x3bc, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x6b}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x20}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x38c, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd2, 0x3, "c09bcaa800b2bcda85d004014130fc9a4f1984d3c393d27cd09a279829963b32423824103444b98c3212bf8c529eb0f6c9705977444740c37f1a21f99f60d4e45b64b023ace432b0a7a93a2aa54e64b9ac1157dea9846a8119f714f34602219d1d2876609d15a69eebe678bf1fefb83ef0f4403c949a8a4edcdf7c126a2b16cd828c80b6c7d2ba5fcaf444ad8c2b68a8d5fd2c2c4d48e8569f93d1aa89e1d311d8b2b792fc6e89da3a6589d1e412d6d3d22ed9a4c67023f8551cd1b94c0accaedef80a773eaa40b5f4f0815fff03"}, @NL80211_BAND_60GHZ={0xf5, 0x2, "16db4b6ba591c52bc10b45ece3d3518242a5352bd84dc94a40840e80ebe7ea1c4760eb6de983f20ca63acda04aecaaece8e6478dd3afa5a410b572d19c4d302809c320aec7e3d1ac4735713f72e7a4cb7d7ae35acf70b2540bba13df104890b6f707e48d6989d7f60c1a64ef397d4c768d442acf49db0f3d1726198ed7a2ed60cd799cc66f02ac2edcbe534811c7e3d5ca8bd9fdf2e881fc0e5858842ac487217ef7d850e0bd86ac6500189802497cf4417de20c44587b5215e822a1c028e599f5e0a8955fe1f6412a74b90dfa7970a1975d32396b2f91c558ed3395df94bd30569d61a4963a48411625ca29881c0cd640"}, @NL80211_BAND_6GHZ={0xf0, 0x3, "cc57a29d17d5f4680b4abca57aa1a30ecd84e3747b5d313d3665d6e66f6a31aefa1119d238b192fbda900ef95c98346af291f5978e549de6f17beeb1f3d36ad2aa4f19280406e92da020e51c930b85221adfc5a7d4b627a0b7dd9480c0b119a8a85c99eb60ce0bf7ae7889ca205ddf38524ff3cbf48a599545daa614480374b8675655f66f51d5ae6dacf733407b3c38ef79b9f4d929a14bed138a5421977404ee5ed959a362969aa6689d08aa971981aa924a8b9abc4ed5bc6538830b62a04ad94b16f6e2095bc1c13b8240612665521bb2eacc7d06704c917d27904f3f990c9c8f8e2e661e51571a2502df"}, @NL80211_BAND_6GHZ={0xcc, 0x3, "7a8a50bd56f55b46fd3c4c8a0efa6831ce64bb1ec858a171cb390ca5a86657f86e6f20a356aa30dd051c6f6ee6509bf8ed8b49788a5d8a7e4d2d86033cdb37dbe52aaaea6824f74819e833c122064f0468c96abd2e41ac629fe7070fa4231fb51cc706fd11616b4a619b11838de5211d89e761abf519b69229ff2651c8e976456ab4a185cf331f8d3a54aeb5a36e272a79d75d74b7db7575dda6c513fdccf6815ea223f6415cfbc29754f48507ef20e149a5eb8a91265a0100000000000000204b24d019cc8b0662"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000700)=""/4096, &(0x7f0000000340)=0x1000) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) [ 1501.723226] loop2: detected capacity change from 0 to 41948160 13:40:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x7000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:07 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1501.780972] FAT-fs (loop2): bogus number of reserved sectors [ 1501.782317] FAT-fs (loop2): Can't find a valid FAT filesystem 13:40:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:07 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:40:07 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x900, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:40:21 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:40:21 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:40:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xfffffffffffe0206}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x8801) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="ed4c6c2d3a7c428c98c12adb1687b0b1a493d1d18f249d60d4d81b286b5cd7b2152e35d14ddc76f24686af15b3d41ac0639e72ef33125f351f8e5f14729606f5a60b9bba4d99dbf65397bd7381363b55c2565a9cc35732563e89a5d9c07e67374b1768bb3ebaf19a"], 0x1c}}, 0x0) [ 1515.226239] loop2: detected capacity change from 0 to 41948160 [ 1515.246819] FAT-fs (loop2): bogus number of reserved sectors [ 1515.248152] FAT-fs (loop2): Can't find a valid FAT filesystem 13:40:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xd020000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf00, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) sendmmsg$unix(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x2, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r4}}, 0x3) 13:40:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:40:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:21 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:35 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000001240)='\x00', 0x1a10c0, 0x1a9) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x5) r1 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000e00)={0x0, 0x1, 0x1, [0x1ff, 0x7, 0x1, 0x100000000, 0xa80], [0x8, 0x100000001, 0xfffffffffffffff7, 0x6, 0x40, 0xa121, 0x784c, 0xaf01, 0x80, 0x8, 0x8, 0x8000, 0x425f, 0x8, 0x50000000000000, 0x8, 0xfffffffffffffffe, 0x7f, 0x0, 0x80000000000000, 0x101, 0x9, 0x101, 0xc000000000000000, 0x20, 0x400, 0x7fffffff, 0x5e6000000, 0x6a, 0x401, 0x6, 0x8, 0x7fffffff, 0x1, 0x6214, 0x6, 0x9, 0x5, 0x1, 0xb5, 0xb391, 0x6, 0x80, 0x1, 0x8000, 0x1, 0x0, 0x4, 0x6, 0x7f, 0x100000001, 0xfffffffffffffe01, 0x10001, 0x2, 0x36bb, 0x401, 0x9, 0x9, 0x1, 0x7, 0x1, 0xffff, 0x8, 0x9, 0x3, 0xfffffffffffffff7, 0x80000000, 0xb1d, 0x938, 0x401, 0x4, 0x6, 0xe2, 0x3, 0x36, 0x7fff, 0x10001, 0xfff, 0x8, 0x0, 0xe6, 0x2, 0x7ff, 0x8, 0x88ea, 0x1000, 0x20, 0xff, 0x3, 0x5, 0x0, 0x28, 0x7ff, 0x16, 0x9, 0x8001, 0x60000, 0x3a999f34, 0x8, 0x8000, 0x1000, 0x5, 0x3f, 0x9b, 0x9, 0x8, 0x80000001, 0x80, 0x5, 0x43c, 0x8000000000000000, 0x84, 0x0, 0x8, 0x1, 0x20, 0x5, 0x1f, 0x10000, 0x100, 0xfffffffffffffff7]}) lseek(r1, 0xfffffffffffffffa, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) syz_open_procfs(r2, &(0x7f0000000400)='pagemap\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d00210c00000000000000000aff0f000000000000000000140001"], 0x30}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0x2000) pwritev2(r3, &(0x7f0000000d80)=[{&(0x7f0000000440)="469709b2d72bd59e1e0ce2636e6000ea0b24117cc920492f9be23dc9f0486b51ba1b50f9c041fc8321ac475d140527a8ec555d2e8cca4a6dddd25995a9f393bf811be7b74222e7f835c58a21f86b86874edd2d68ee473eecda4bf3758384043abd79759613400c92cf9833a5c218a8f3a871baa4ffe36b226bfb74", 0x7b}, {&(0x7f00000004c0)="ee2ebe189ec89ba6f934dd7c77f167f2a92613c602b79d0a7856624542637beeac0166bb5386a9de14f4acab7adf0c7dd89c3ac07338c52950aebc7e994e46776b643abd9a511dadc4c3715d7fd9ab2a9c669099802899fa14a61319653cc29514c04690488a6575c9d38536c752b435", 0x70}, {&(0x7f00000009c0)="dfe73e5bed3c52581860113c168c0c5e00fcc4a92b891542f3ec909261fca2108c82a297d8592f6ffab40935743505c00d189e4564d7e1d26ab28fc71000575af97381fb2254b7a7cb2a5fb79a38b63b3b856738518a2e708feaba3037a375630516354285ca2f12e76bb7641b982b79e60149553bb36c", 0x77}, {&(0x7f0000000a40)="800d44afdf514429263ba612dd21f435937a9a33d15e05496cba2e183c6f487266fec92004e193325f2b3919e868efdcad10f551be98a9cdf75ea9a633a4fb2038b612ab1f839df7a848ff38b1b804ddd01d9523b15cb827aa84dc920bec776f33beab1f6110f52621fc67033b57e43ee4c3ada4bd4a4691bb6cac3b096c4683a61ba32bba4de455b5dad254d79e", 0x8e}, {&(0x7f0000000b00)="dfbe36796e85bfd72a7e25b6a857efc775d984a6ff953f523731a13a5d7fbf53bc701df2869c808a1a214dae02f1367622360cc8b740d087d4ffaecbf3fbff589783799f53766473f0c31dc8086da6f6b6ca71b46e84b726f6fef7d3ab87d492535fb2e90d6cb7ee611824e83bf44ad9186505a3508b62ca699e6a4f4f64207ec979966afaa13ee968382a338a68524a99a1431f26bb33d536049bf60fc9dd1c5a9188a120c94a758212324faef211d518967d9f9bc612bc3e9c96817e9770a3bdbb4d6899f9340ae954910849ebaa9fe8c688cb23175d278deffffd07612eb2a3addade79afbdc2c8", 0xe9}, {&(0x7f0000000c00)="b8ced5a6d66cd3b7844cfd2fc6e4039d4eaeaafe95c7a59175a16aff93efc7018318e2cf66b75a7039e2bd84007a2de13441a6353ee13ebe6499e75dfffcf41297dc596b7e59d6ad8b06c519842fc761c8672df80b37f65258ffca36fd9dd23402ba4db38e8d8cf07f3ab5bf602c1576e0687fe20d43d6d0b56a4861517f1439c7971767f35002c376900f4ec6ba4793e3effe7f4e4e6ac5b06829a82f41803dba01f4e88fc9d0f0636e22390cbdf0d1ffb4c709e4d1577e5bab226c27c1320b85fa840e53fe07eca636fe8dfa4c4144361aaa75f1b1c2f6859c0f68f8f209bdd9", 0xe1}, {&(0x7f0000000d00)="e86c9a9eadc21f70b1fc32b2fd7e7f243a1c97e6d06c831755a62b6e4579c82d7cc3b1bc71ac0ee9fce1de04d0947ce69c272b6c6152445bd96d17a7986fe7611140e7282f6d49b2ffcca17f0660e900658969b729608c426192861a58a47564e15d424eb48abae3c503374bf6d6c11c18221621f41dc231c6bf3834a7", 0x7d}], 0x7, 0x401, 0x1a, 0xf) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000005c0)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="86881d18e0a4634dca41639461d6930fc5a1", 0x12, 0x400, &(0x7f0000000240)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00']) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f00000002c0)=ANY=[@ANYBLOB='gid', @ANYRESHEX=0x0, @ANYBLOB="2c73697a653d6b256d2d3474c82c6d6f64653d30303030303030303030303030303030303037373032332c6769643d", @ANYRESHEX=0xee00, @ANYBLOB="00040000ff9bd492c35891f93cc82c5208cc4494fe3e98f509c1c3338615e16a81d0bafbc05ac21892e21277a6142459205ead9b70f20dd2bec43edb079c8958f0b8b9313ab1ee5392654f9119f2c9089bc0b39b2a1e8479087932fd4ab56741ce18c3e6caaa5b5a4166c408e5885dd946eb5f9aa9728f5bd3f112c9bc2c12afd9f094101bfd61c9000000007a1f0252fcc51e984699bafd139660222456c09d034f6d0205e2a01b744bfb14cecda511aefc6352b7"]) 13:40:35 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf02, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1529.237025] loop2: detected capacity change from 0 to 41948160 13:40:35 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:40:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:35 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:40:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9effffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:35 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:35 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) [ 1529.247666] FAT-fs (loop2): bogus number of reserved sectors [ 1529.248477] FAT-fs (loop2): Can't find a valid FAT filesystem 13:40:35 executing program 0: syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xfe, 0x2, &(0x7f0000001240)=[{&(0x7f0000000200)="a99df07b8c44a8000000809f8680d891a9fcfaf9b9ef5946a02c437e97b708a49a221413872c8d7b2dbafc", 0x2b}, {&(0x7f0000000240)="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", 0x13b, 0x6}], 0x2000000, &(0x7f00000013c0)={[{'}-'}, {'-\xbd#\\$&'}, {'d\'\xf7(.'}, {'+'}], [{@permit_directio}, {@audit}, {@dont_hash}, {@fowner_lt}]}) socket$nl_audit(0x10, 0x3, 0x9) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000001640), &(0x7f00000017c0)=@v3={0x3000000, [{0x400, 0x101}, {0x7fffffff, 0x8}]}, 0x18, 0x2) 13:40:35 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:35 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0ffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:35 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:40:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:40:53 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:53 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:40:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x900) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) r4 = semget(0x2, 0x0, 0x20b) r5 = getuid() semctl$IPC_RMID(r4, 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r5, 0x0, r6, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="570000007d01000000410000010500000009010010000000000000000000000088680002000006000000e90e0000000000000500245b5d292601005e01000000000000000060073abb44e1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6], 0x57) ioctl$KDSKBLED(r3, 0x4b65, 0x8) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000001c0)={{r3}, 0x8, 0xe76, 0x7f}) syz_io_uring_setup(0x1509, &(0x7f0000000080)={0x0, 0xd429, 0x8, 0x1, 0x205, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r8, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r8, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r8, 0x1, 0x0, 0x0, 0x0, 0x1, {0x0, r1}}, 0x3) 13:40:53 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x30000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xfffff000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:53 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) [ 1547.938845] loop2: detected capacity change from 0 to 41948160 [ 1547.964617] FAT-fs (loop2): bogus number of reserved sectors [ 1547.965824] FAT-fs (loop2): Can't find a valid FAT filesystem 13:40:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000}}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d91e31b7892f71f3ac842db783e431d605372ea606c253e7c4ff3d013e13614b38210b49077cca3b953d867fd849b8fe2ff2f49a2849f897aa0aa580d9181e218f7c241c047d0a0ef6ba946c262de8447d2ec926ffc3aaadd9660fff9cea9b11f2ff3704df391d2bdb33465bfa785d15ef405e901c59cb0dfc75ae84a5ce85db5f2f363979cb753db1587", @ANYRESHEX, @ANYBLOB="23b568000000f0b5ac79358d6445bdfe35b3b7355c8e8d48ed885c132662cb5d89c1e6d07c00000000000000007f010000000000000017d6", @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=loose,noextend,nodevmap,dont_appraise,dont_measure,subj_type=,dont_measure,fscontext=system_u,fsmagic=0x000000000000008c,uid=', @ANYRESDEC=r6, @ANYBLOB=',audit,rootcoNtexu,\x00\x00\x00\x00\x00\x00\x00\x00']) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r6, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1ff, 0x7, &(0x7f0000000640)=[{&(0x7f00000002c0)="8b7c6d8d5ca91f954936bfeb5629547edda1774498ac11928c0dbddeabf5ddfca3fad9cf7140277fa5c316e7b1f924b9dfce012274dd87f06d76e2d61d0190ce3a0f5fea3287fbbea5de1a02741ef43a9e76f6953167c3d986de7b835a35dedc08bb432ec13226e249ff905bd48d1aedcca4b8cd30ce3392248972666c1e52a2a1fe77f32b4bb705d35cda504fad5fa7749176f237ea505e6b5f2b32c93e9fe03ea3e9740640d6242b68e809746fd2cece4d236b075ddbf58f90eaf5cca8", 0xbe, 0x6b}, {&(0x7f0000000240)="0fd6169722492470d3ed7d423f84d7", 0xf, 0x10001}, {&(0x7f00000003c0)="e2ca625ecf3376efd110c502cb48bfdece28851882d5b5dbacb91d3c9f4b768a3770ad8c1b932d842e1d9b3bb460ac0df60186934bd059d5cbcb878994f54bd37eb930b297ff0883e05af05b7142a1048c37e7b9e10138773383422cfa858eca82dcd281e39b3a16a1186ebf41d8d7", 0x6f, 0x1}, {&(0x7f0000000440)="55f27671c51b319a7f7b577570c41ce7fe3cf6a9bd1e4b831e57edaa1c1daaa6ac464e810ee62b1351ae711a534a73cbde56d8196534ccc04bce0d264fcb2c3eb70ff887e165c03ba4737c3f4144da261a4cafc08e6b3bf93e511013b1ba735cf01bca9307f40347c6", 0x69, 0x400}, {&(0x7f00000004c0)="59dd5c6152b48212a8820dfffab4f76e0fd84d16929ba32adbccfcff77954a260174d5822e319d27586c05190984c7a1a07492acd20ae3d8066c156a21ea056709d5353277c3f7c0d337a9c22bc880a98559ccdc721da6d3a477996c1df3507030477c8f6929a7d6599548cb42ed7db86da2baf7952c878372d8c0ac96885838e4e9b9dda2cc31cb5a9ec89f24341f33a394a1c3303ee1965769b35523b989ea3cac31b0715aeefd59f8edb55dc9f990", 0xb0, 0x8}, {&(0x7f0000000580)="1bfbe784eb8feacd2cec1197f69825370b8d3f1b76be5053cfc44ffc3c52cd501a081c8639fdb43976b5d7a2e4dadf2fdf11f236d67642e9f3d38e3b11c670d81a59cc57df7ca682d265c92362c99161b341b3055d0dc7b9dbd4e350c2cd7106", 0x60, 0xd7}, {&(0x7f0000000600), 0x0, 0x7}], 0x20, &(0x7f0000000700)={[{@size}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x32, 0x25, 0x74, 0x70, 0x65, 0x32]}}, {@huge_never}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x35, 0x5a, 0x2f, 0x38, 0x35]}}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x33, 0x67, 0x6d, 0x36, 0x30, 0x30, 0x36, 0x6d, 0x6d]}}, {@uid={'uid', 0x3d, r6}}], [{@euid_gt}, {@obj_user={'obj_user', 0x3d, 'wfdno'}}, {@obj_role={'obj_role', 0x3d, 'rfdno'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'rfdno'}}]}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 13:40:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x110, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffff7f, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:54 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:40:54 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:54 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x80000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:40:54 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:40:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffff9e, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:09 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x100000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:09 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x232, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:09 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:41:09 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:41:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xfffffff0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:09 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:41:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) r1 = semget(0x2, 0x0, 0x20b) r2 = getuid() semctl$IPC_RMID(r1, 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r2, r0, r3, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x5, 0x5, &(0x7f0000000600)=[{&(0x7f0000000240), 0x0, 0x400}, {&(0x7f0000000380)="578f57d0c8142d1a9302eedfc7af89aad3f1f6025a97b872bcb782ab33d6fce9451b2b4a6d17b22a8b7b148ca5d6e375446001ca631786c1ab99bb2abc9c1dc318547ec8f3c935b4ba8527910e40ed1cba141fc4a01440ae1b69d515f041d13a338f7173aeeb4c889962e4673bd321ff56045d999aff22a82bf7c9784e", 0x7d, 0x3e51c0000000}, {&(0x7f0000001100)="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", 0x1000, 0x8}, {&(0x7f0000000400)="a0147b434b8e1f090afb20b64e1546c773b9f30d56ead46953c0895d0c69d827350d5a7931de5f05011a9ab24b5fb85406f78c5c066f0da345b482bb625c2e865956b33d7ab9593a5dfe8c68fe030321fa8e83d6aa28d39992877710cc8dce7fb2cc53cae156c3bbb22ad28317b9deee1fcbac42bcdd76955c8d16c0b5a9e604c0138aaa0d0172c828dc7eaf91961af899ea8839b6571560f7a5c2ddf2224b278607e154f47a7c25d9bc8e98f4dd7defb803", 0xb2, 0x80000000}, {&(0x7f0000000500)="7246479c4556cdf8b0e56356701fa2f8e7f0ccabf62a043a29e3031d9126ef53f730de914bbb2c284415242f50a498875b9ed07e0b9083f8d6afa0ae4e3610b7148e654996e0e35c9569cd4666214743452c36e160d0c4f8197b4d2f12ea9da2d992e8ee79a9bc849454ee6bec3e38dd9f9785b8880f3158e3337cfbc4378497d5e78fceff26885d07a963b8eddbae29aa3acecfcf88eb49f89a7661c1e20ed65cdacccd8b6e36529bd75866680cf23949d586230482c3be31f0055ccccd247cc9abc76461d83baf", 0xc8, 0x6}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='.,$*@$\\,,os2.,fowner=', @ANYRESDEC=r3, @ANYBLOB=',obj_type={)(,defcontext=staff@u,measure,fscontext=user_u,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="2c646f6e745f6d6561737572652c6673636f6e746578743d73746166665f752c6673757569643d6436314b636532332d645364372d666638662d633432382d59383430316133f72c00"]) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000780)='./file2\x00', 0x9) getxattr(&(0x7f0000000280)='mnt/encrypted_dir\x00', &(0x7f00000002c0)=@random={'os2.', 'dfltuid'}, &(0x7f0000000300)=""/117, 0x75) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r5, 0x0, 0xcf, 0x0, 0x4) fallocate(r4, 0x0, 0x0, 0x8800000) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0xa4100) finit_module(r6, &(0x7f0000000080)='os2.', 0x2) [ 1563.786122] loop2: detected capacity change from 0 to 41948160 [ 1563.807022] FAT-fs (loop2): bogus number of reserved sectors [ 1563.808316] FAT-fs (loop2): Can't find a valid FAT filesystem 13:41:09 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0ffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:09 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:09 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:41:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:10 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) quotactl(0x4, &(0x7f0000000200)='./file0\x00', 0xee00, &(0x7f0000000300)="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") futimesat(r0, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {0x77359400}}) 13:41:10 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:41:10 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:10 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x1000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x500, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:41:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:26 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:41:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0xf30, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20008000) 13:41:26 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:41:26 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:26 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x2000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1580.866850] loop2: detected capacity change from 0 to 41948160 [ 1580.886169] FAT-fs (loop2): bogus number of reserved sectors [ 1580.887477] FAT-fs (loop2): Can't find a valid FAT filesystem 13:41:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:27 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x3000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:27 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x11a, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:27 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat(r0, &(0x7f0000000240)='./file1\x00', 0x404a00, 0x1a0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="45eb7e701f06b3ba5d7f9dd045ae700f4ba8370bd7f50f0796424424ae34c67507e88cdc9ade9f6f2703c90888d977ba7007999f099d039bf5116e1103852f318d40756d36fd92eb7c3aadcdb8d17dc2718bfe00a657b25579042d613c2bdab3b1cea8c113c75146f2bf07b4bf11c65eeb960bf9ef2a294962c5caed94cca0d726fc52628de0407c6bd10d82e11d57c386ce8ad098075dd5a0c5ae389d51a90ad797f050aa1b8575c8e700ad933fa5e9eb106417d92c86ee7d662fe8e9c8ce8495", @ANYBLOB="0cffff645a6f3d00000000000000000000f700000000b8d0ef6977781af90e2906c5af80088afef6184a52b62c5ca55af0e323b614925a58e03b38f557a47e8bb7329c4d878483118342239ca3757c7f78a4c2abfbd5b7a9c2205969727ebf959282d48f2bbc0dc36ff268bd8ea5076bd0766e5a7126ca41480184e55bac8cc718dd1acaf40000000000006e68", @ANYRESHEX]) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x1, 0x3, 0x4, 0xa3, 0x0, 0xffffffffffffff7f, 0x80, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000340), 0x4}, 0x4068, 0x8, 0x1a9eca6b, 0x2, 0x0, 0x8001, 0x4a, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) signalfd(r1, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000940)={0x0, "06f67b39af495be66b82d72419b421d1"}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) 13:41:27 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:41:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x39, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x900, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:45 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:41:45 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200}, 0x0, 0x0, 0x0, 0x1, 0x80, 0xfffffffd, 0xa3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000001200)='./file0\x00', 0x1, 0x2) r2 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/4107, 0x100b, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x20, 0x3, 0x56, 0x5, 0x0, 0xffff, 0x20, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x453364a0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x84e0, 0x2, 0x9, 0x8, 0x3, 0x2, 0x0, 0x0, 0x3, 0x0, 0x7b83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000006c0)="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") openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0011cd"], 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000440)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) 13:41:45 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:41:45 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:41:45 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x4000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1599.173393] loop2: detected capacity change from 0 to 41948160 [ 1599.197829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1599.207195] FAT-fs (loop2): bogus number of reserved sectors [ 1599.208571] FAT-fs (loop2): Can't find a valid FAT filesystem 13:41:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf00, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:45 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x5000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1599.315477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.317238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.320327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:41:45 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x500, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1599.346973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:41:45 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x6000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x1001, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:45 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:41:45 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xec0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:41:45 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5}, {0x5, 0x0, 0x1, 0x3}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000580)=ANY=[@ANYBLOB="070000000700000000efff000000007ed8487c35c97ce46bc77944469551eeab973cb29e75191bfb010069acb18a51a73a7d210a33086066d41c9acd8cdb91366b97bdd67cf36eaf7a206f8447e760e0f0fbedc930a72f6dd0a09c088bba805f8b8e19f5473d9b67b05ad720bb9d00a3c688ed9870"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xa9, 0x12, 0x1d, 0x19, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x100000001, 0x9]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x0, 0x13, 0x0, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]}) creat(&(0x7f0000000380)='./file0\x00', 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000200)=ANY=[@ANYBLOB="9789cdc1a58bb7523a45992fbb476b7ba2f081093dc81803cc6745a634a85feaf8ebcd4ec14543c88d990c72ba873c406408925ef7240019f7bd2bc2541505748aaf018bad5ffbb866b332d87a3c99b80c1603203a1131ef91e6"]) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000600)={'mangle\x00', 0xa2, "21669cb87500bef91d3aee893e0f3c4d29681b4dbb262a39426a476951005ae20ba55d3540563ff853c1a1ea3f0edd1739d83a70f807698156e382d77b477f6f93a70ced515825b73ebf3e36d82e7486187c5a3567548bd07709a39a877118036cec71630fb9ab8586d9060dbbae7d3ecd4baaea260e2da82bc9cc2468158c4c05daa0abc3ec4ff7b95dd7a4e8e08c2b72efe487be909c3b6c9f1e0b2cf0eb0b67ea"}, &(0x7f0000000140)=0xc6) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) open(&(0x7f0000000080)='./file2\x00', 0x80, 0x26) acct(&(0x7f00000001c0)='./file1\x00') dup(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20082, 0xf4) 13:42:01 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x7000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:42:01 executing program 0: timer_getoverrun(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x0) dup(r0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) io_uring_enter(r1, 0x24f6, 0x488, 0x0, &(0x7f0000000100)={[0x3ff]}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000040)='./file0\x00', 0x4, 0x1000, 0x1}, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) 13:42:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:42:01 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 13:42:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:01 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x3202, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1615.038707] selinux_netlink_send: 42 callbacks suppressed [ 1615.038724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=17810 comm=syz-executor.0 [ 1615.048381] loop2: detected capacity change from 0 to 41948160 [ 1615.053599] FAT-fs (loop2): bogus number of reserved sectors [ 1615.054394] FAT-fs (loop2): Can't find a valid FAT filesystem 13:42:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20000178, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1615.098540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:42:01 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1615.141119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=17820 comm=syz-executor.0 13:42:01 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) [ 1615.163830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:42:01 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x900, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x30000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20000478, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x400000000800003, 0x48282) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000020c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b506000000000000002db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe", @ANYBLOB="7198b8510805e85291ce210e8ae4169999a39db0d96d2c7d61b5298cecfd0d0a76259b3a5b99a2a2d9707768005d2539c4cf12c47df91a531a1750d989fffe2961f264b96faa667fc99d7f315cc9d820848c33b2d50186104ed51b8f17a60085b51f9b16ed789bd55c435f5c0543c04eb48fc85fb6b3d3b2264136e844834aae7954b2ec09bc7a62646d8a0b933485e8dc898fadb6a9490724962145b4a0be7e017075db7be580fb8c0e24b3605fb88a295b7d8ec3102629466b5c5d370a83ff6748af1351d5c2c1079c3ac3ce53b5cdbbd1f1f981dbfb1e6dd079bb7127077ec2b52a7cbeb72677f5aad5699a31d2f4", @ANYRESHEX=r1, @ANYBLOB="97c19e51bb03884406d138233a1082d10e8d055ceb92107c6ee798646ff3bc4f78e32fc0305af2a897ad2e4d7393b0b3af63139ab8fd51d15a728c8ec0b29de78e8613407a1d9e2a6197332b980c59572cbb71c6e568a516cffb00300bc22be5c7abe6a0b1e6cba73e7bf77b9c3d12452cc78abf0b294ed7f22700000000"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x40) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffc00}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000084}, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x20103, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000011c0)={0x53, 0xffffffffffffffff, 0x0, 0x0, @buffer={0x0, 0x100c, &(0x7f0000002500)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) unshare(0x48020200) 13:42:15 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:42:15 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 13:42:15 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf00, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x80000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:15 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:42:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x8, 0x9, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x20, 0x1, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', r2, 0x2f, 0x7, 0x20, 0x9, 0xdcc6e33367273e63, @local, @mcast1, 0x8000, 0x20, 0xe91d, 0xeb}}) setsockopt$inet6_int(r1, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r0, 0x7fffffff, 0x100000001, 0xf2, 0xa, 0x1, {0x3}}, 0xffff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(r3, 0x0, 0x1) syz_io_uring_setup(0x21, &(0x7f0000000100)={0x0, 0xecb8, 0x8, 0x0, 0x275}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x80, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x80800, 0x1}, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 13:42:15 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 13:42:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xc1) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x9, 0x2, 0x81, 0x8, 0x0, 0x2, 0x8000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x8400, 0x7, 0x1, 0x8, 0xa, 0xbf, 0x3, 0x0, 0x81, 0x0, 0x4}, 0x0, 0x4, r3, 0x9) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000240)=0x2) [ 1629.278440] loop2: detected capacity change from 0 to 41948160 13:42:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1629.305892] FAT-fs (loop2): invalid media value (0x00) [ 1629.307114] FAT-fs (loop2): Can't find a valid FAT filesystem 13:42:15 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x1a01, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:15 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf020000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x100000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:15 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, 0x0, 0x86) 13:42:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0ffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:42:15 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x10008, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffff) syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) flock(0xffffffffffffffff, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r4}}, 0x10000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r4, r0}}, 0x101) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000300)={0x1000000d}, r0, 0x3, 0x0, 0x1, {0x0, r4}}, 0xdd) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 13:42:30 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9effffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:30 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:42:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:42:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x1000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:30 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, 0x0, 0x86) 13:42:30 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x709042, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:42:30 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1644.779276] loop2: detected capacity change from 0 to 41948160 [ 1644.799071] FAT-fs (loop2): invalid media value (0x00) [ 1644.800301] FAT-fs (loop2): Can't find a valid FAT filesystem 13:42:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x2000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:30 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x30000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:30 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, 0x0, 0x86) 13:42:30 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0ffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:30 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x80000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r1 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044005) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffff3e, 0x0, 0x0, 0xfffffffffffffed7) 13:42:31 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x0) 13:42:31 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x100000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup2(r2, r0) 13:42:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x3000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:46 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:42:46 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xfffff000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:42:46 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x0) 13:42:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:42:46 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0ffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1660.946131] loop2: detected capacity change from 0 to 41948160 [ 1660.958779] FAT-fs (loop2): invalid media value (0x00) [ 1660.959515] FAT-fs (loop2): Can't find a valid FAT filesystem 13:42:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x4000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:43:00 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:43:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000002c0), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(0x0, 0x0) sendfile(r1, r0, &(0x7f00000001c0)=0x9d, 0x10001) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x3, 0x0, 0x9c, 0x9, 0x0, 0x10000, 0x1c0, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x6}, 0x60, 0x6, 0xfffffffa, 0x9, 0x800, 0x7, 0x0, 0x0, 0x1, 0x0, 0x41da}, r2, 0x8, r0, 0x3) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x85801, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xfc, 0x1, 0x5b, 0x9, 0x0, 0x80000001, 0x2100a, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x28, 0x8, 0xffffffff, 0x8, 0x9, 0x9, 0x7, 0x0, 0x5, 0x0, 0x3}, r2, 0xe, r3, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934f5489a26265ae", 0x19, 0x4e8}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00baeec5e7b27e7eadc740d710152d13c6c2fb9445aa73eda3295a65dac5e1b4ffda57784dfd40ed026766080b92510742da24908f9f5f2f5dba69377fc1d479281a8447e7e8670d6a7ec74985f3d05e59689b45c935443b"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r5, 0x0) close_range(r4, r5, 0x0) 13:43:00 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x1000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:00 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffff7f, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0xb, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:00 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x0) 13:43:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x5000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x39, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1674.186827] loop2: detected capacity change from 0 to 41948160 [ 1674.203960] FAT-fs (loop2): invalid media value (0x00) [ 1674.204755] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:00 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffff9e, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x6000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:00 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x2000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x69, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:00 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xfffffff0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:00 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:43:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x7000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:43:15 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:43:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:15 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 1) 13:43:15 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x3000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:15 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x14d200, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000200)=""/195) socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xff, 0x3, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2f}, 0x0, 0xd, 0xffffffffffffffff, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x226081, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) r3 = dup3(r2, r0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9}}, 0x80000001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2000, @fd_index=0x2, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1f) 13:43:15 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1689.672027] loop2: detected capacity change from 0 to 41948160 [ 1689.679406] FAT-fs (loop2): invalid media value (0x00) [ 1689.680682] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1689.687848] FAULT_INJECTION: forcing a failure. [ 1689.687848] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.689201] CPU: 1 PID: 18743 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1689.690004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.690964] Call Trace: [ 1689.691284] dump_stack+0x107/0x167 [ 1689.691713] should_fail.cold+0x5/0xa [ 1689.692167] ? getname_flags.part.0+0x50/0x4f0 [ 1689.692701] should_failslab+0x5/0x20 [ 1689.693164] kmem_cache_alloc+0x5b/0x310 [ 1689.693663] getname_flags.part.0+0x50/0x4f0 [ 1689.694188] getname_flags+0x9a/0xe0 [ 1689.694627] do_mkdirat+0x8f/0x2b0 [ 1689.695054] ? user_path_create+0xf0/0xf0 [ 1689.695545] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1689.696158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1689.696773] do_syscall_64+0x33/0x40 [ 1689.697214] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1689.697858] RIP: 0033:0x7fa75552db19 [ 1689.698289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.700497] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1689.701399] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1689.702262] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1689.703109] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.703965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.704819] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:43:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)={0xe4, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0xc1, 0x22, 0x0, 0x1, [@typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="859c4e0878e666bf78d90e7a7959a0be7d945e5fdadbe878d0f6355c6b64795f1a87ff0cafa478b11f0d640202501346e8edca15e602ba14c7af5e", @typed={0x4, 0x4}, @generic, @generic="1c87138441d736f3d3f633cd886de8385a2a1623c60eda92047f593e3869fc63e17ba04a42200c590e13eaa08c0f213910476c4e8233eb10af97de75542eee6fedf330fe0f2eb7ccb619b97198d9a4a6bf996105a0f376dd2c58574d8e0b298e9de4e6a2054c0f27f6cf"]}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0xe4}}, 0x20000000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x400082, 0x151) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f6eef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdafad9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) ioctl$KIOCSOUND(r6, 0x4b2f, 0xff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2ea144601a8e69f5fa8c2aa82f66696c653000"]) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000500)=0x7) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) unshare(0x48020200) 13:43:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:15 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:15 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x4000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1689.818715] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.0'. 13:43:15 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 2) 13:43:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x10010000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1689.945964] FAULT_INJECTION: forcing a failure. [ 1689.945964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1689.947734] CPU: 1 PID: 18876 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1689.948571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.949581] Call Trace: [ 1689.949913] dump_stack+0x107/0x167 [ 1689.950346] should_fail.cold+0x5/0xa [ 1689.950813] __alloc_pages_nodemask+0x182/0x600 [ 1689.951361] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1689.952077] ? kmem_cache_alloc+0x301/0x310 [ 1689.952579] alloc_pages_current+0x187/0x280 [ 1689.953115] allocate_slab+0x26f/0x380 [ 1689.953592] ___slab_alloc+0x470/0x700 [ 1689.954060] ? getname_flags.part.0+0x50/0x4f0 [ 1689.954609] ? ksys_write+0x21a/0x260 [ 1689.955066] ? getname_flags.part.0+0x50/0x4f0 [ 1689.955627] ? kmem_cache_alloc+0x301/0x310 [ 1689.956138] kmem_cache_alloc+0x301/0x310 [ 1689.956643] getname_flags.part.0+0x50/0x4f0 [ 1689.957162] getname_flags+0x9a/0xe0 [ 1689.957633] do_mkdirat+0x8f/0x2b0 [ 1689.958075] ? user_path_create+0xf0/0xf0 [ 1689.958570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1689.959205] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1689.959827] do_syscall_64+0x33/0x40 [ 1689.960262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1689.960881] RIP: 0033:0x7fa75552db19 [ 1689.961323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.963532] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1689.964454] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1689.965307] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1689.966155] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.967001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.967868] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:43:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:43:31 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x32020000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:31 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x5000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:31 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aa0008004500003c0000000000069078ac1e0001ac1414bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000011e0020000000000000000000000000001e0300fe00f989fe04f989"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x11}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @random="62097e1cf113", @mcast1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mcast2}}, 0x38) syz_emit_ethernet(0x61, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="06149aed5b94", @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0x1b, "84f626f89a55ed34ed7d12fa3c401d3c1cc96e7fd3270588feb276952682763ce9298fd2cc0e5aa8c3ed5eac2b6cb7de34da024490d5fd6ef9956426c1fa6136121541955e26ca81cb10af76cde497"}}}, &(0x7f0000000100)={0x0, 0x1, [0xe6, 0xd25, 0xf87, 0x731]}) 13:43:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:31 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 3) 13:43:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:43:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) [ 1705.628142] loop2: detected capacity change from 0 to 41948160 [ 1705.649002] FAT-fs (loop2): invalid media value (0x00) [ 1705.650022] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1705.684226] FAULT_INJECTION: forcing a failure. [ 1705.684226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1705.686437] CPU: 0 PID: 19003 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1705.687605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.689017] Call Trace: [ 1705.689481] dump_stack+0x107/0x167 [ 1705.690142] should_fail.cold+0x5/0xa [ 1705.690826] strncpy_from_user+0x34/0x470 [ 1705.691578] getname_flags.part.0+0x95/0x4f0 [ 1705.692359] getname_flags+0x9a/0xe0 [ 1705.693004] do_mkdirat+0x8f/0x2b0 [ 1705.693631] ? user_path_create+0xf0/0xf0 [ 1705.694353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1705.695247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1705.696128] do_syscall_64+0x33/0x40 [ 1705.696773] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1705.697665] RIP: 0033:0x7fa75552db19 [ 1705.698308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.701484] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1705.702777] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1705.703968] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1705.705148] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1705.706381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1705.707614] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:43:31 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x6000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x4686}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xb, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xb, &(0x7f0000000200)={0xb6e3, 0x1}, &(0x7f0000000240)) r1 = gettid() prlimit64(r1, 0x5, &(0x7f00000001c0)={0x401, 0x3fe}, &(0x7f0000000280)) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x2, 0x3e, 0x90, 0x1e, 0x0, 0x40001, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7fff, 0x22}, 0x1188, 0x6, 0x100, 0x7, 0x8, 0x80, 0x1000, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x5, r0, 0x3) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1c12c1, 0x1a8, 0x13}, 0x18) fsetxattr$security_ima(r3, &(0x7f0000000140), &(0x7f0000000640)=ANY=[@ANYBLOB="0603000000000100f2de61c18ac5d3f8cf90258f0a0b145255ca50f7f3875d15c211cc6279e09653ca4bd11d4f3adb9be1cb1c1e8f28f8ef045ab42284a7b75cd3bb7e984a0ec86e70b3cc5811f22b86d68ebc4341806f17d5237ca525001f98daafd92a7247a074ae499b453bd4d45b74b3247eb2a65a507500eba2c583d1b7cafcf81ed92ba3c0290453c8de435bb0cbea8a4e6ae1020d712613464d067bf775e72bb774fdd16b6fe1733f5d6bce6539461cec475b60e24e8551a59354959c6180ae62831a98e03add1721a83cd7d9a28b890bc2fbe06285bb7fe5b79615470bf42b0928da1579946c1c"], 0xfb, 0x1) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0xc, 0x0, 0x16, 0x0, 0xb, 0x6, 0x1, 0xae}) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_UIE_ON(r2, 0x7003) r4 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000500)={0x7, 0x26, 0x11, 0x16, 0x6, 0x9, 0x2, 0x22}) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x18, 0x0, 0x8f8}) 13:43:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9effffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:31 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x39, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:31 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x7000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:31 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 4) [ 1705.998855] FAULT_INJECTION: forcing a failure. [ 1705.998855] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.001205] CPU: 0 PID: 19143 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1706.002198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1706.003366] Call Trace: [ 1706.003750] dump_stack+0x107/0x167 [ 1706.004264] should_fail.cold+0x5/0xa [ 1706.004799] ? __d_alloc+0x2a/0x990 [ 1706.005305] should_failslab+0x5/0x20 [ 1706.005841] kmem_cache_alloc+0x5b/0x310 [ 1706.006408] ? __d_lookup+0x3bf/0x760 [ 1706.006949] __d_alloc+0x2a/0x990 [ 1706.007435] d_alloc+0x46/0x1c0 [ 1706.007920] __lookup_hash+0xcc/0x190 [ 1706.008457] filename_create+0x186/0x4a0 [ 1706.009032] ? filename_parentat+0x570/0x570 [ 1706.009649] ? getname_flags.part.0+0x1dd/0x4f0 [ 1706.010301] do_mkdirat+0xa2/0x2b0 [ 1706.010797] ? user_path_create+0xf0/0xf0 [ 1706.011381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1706.012125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1706.012850] do_syscall_64+0x33/0x40 [ 1706.013364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1706.014098] RIP: 0033:0x7fa75552db19 [ 1706.014618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.017216] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1706.018275] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1706.019253] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1706.020239] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.021230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.022238] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:43:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0ffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:50 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:43:50 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 5) 13:43:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:50 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:50 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:43:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0700000000010000000000000000000000000000000000000000000000000000000000004a89e680d62f644742eb1e4942993b4d44ad00383a933b715af17a12423804ee32e37039c94b5e50df0e0c3acee3d43fed0ff29a29bc227a4ffdecbad3203c73653d9c44bfde476146071b5ed1f1e1a24f7eddcb53a7ba5f5854b4d9ba5c100519547fef9debed5f619a42d1170a32b7f8b9b14fd5e65f13327f21f4e895b1805f8a33c38f577c0c594c754972a18ebd272efc5e87028dca1bbd043b9f97b2b9348ff9a4"]}) [ 1724.734916] loop2: detected capacity change from 0 to 41948160 [ 1724.748222] FAT-fs (loop2): bogus number of FAT sectors [ 1724.749604] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1724.803829] FAULT_INJECTION: forcing a failure. [ 1724.803829] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.807396] CPU: 0 PID: 19153 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1724.808888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1724.810732] Call Trace: [ 1724.811316] dump_stack+0x107/0x167 [ 1724.812092] should_fail.cold+0x5/0xa [ 1724.812907] ? create_object.isra.0+0x3a/0xa20 [ 1724.813897] should_failslab+0x5/0x20 13:43:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xfffff000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1724.814727] kmem_cache_alloc+0x5b/0x310 [ 1724.815780] create_object.isra.0+0x3a/0xa20 [ 1724.816717] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1724.817802] kmem_cache_alloc+0x159/0x310 [ 1724.818717] ? __d_lookup+0x3bf/0x760 [ 1724.819544] __d_alloc+0x2a/0x990 [ 1724.820296] d_alloc+0x46/0x1c0 [ 1724.821169] __lookup_hash+0xcc/0x190 [ 1724.821983] filename_create+0x186/0x4a0 [ 1724.822860] ? filename_parentat+0x570/0x570 [ 1724.823809] ? getname_flags.part.0+0x1dd/0x4f0 [ 1724.824805] do_mkdirat+0xa2/0x2b0 [ 1724.825578] ? user_path_create+0xf0/0xf0 [ 1724.826493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1724.827614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1724.828711] do_syscall_64+0x33/0x40 [ 1724.829506] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1724.830603] RIP: 0033:0x7fa75552db19 [ 1724.831403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.835321] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1724.836949] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1724.838475] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1724.840003] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1724.841515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.843034] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:43:50 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xec0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x6, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:50 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf000000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r1, 0x8, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380), 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_setup(0x3875, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x1, 0x6000, @fd_index=0x9, 0x60e1, &(0x7f0000000200), 0x0, 0x7, 0x1, {0x2}}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/59, 0x3b, 0xfff) 13:43:51 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 6) 13:43:51 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:51 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x1a010000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffff7f, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:43:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x7, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1725.169078] FAULT_INJECTION: forcing a failure. [ 1725.169078] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.171923] CPU: 1 PID: 19285 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1725.173368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1725.175115] Call Trace: [ 1725.175673] dump_stack+0x107/0x167 [ 1725.176444] should_fail.cold+0x5/0xa [ 1725.177253] ? cgroup_mkdir+0x251/0xf50 [ 1725.178110] should_failslab+0x5/0x20 [ 1725.178907] __kmalloc+0x72/0x390 [ 1725.179643] cgroup_mkdir+0x251/0xf50 [ 1725.180452] ? cgroup_destroy_locked+0x710/0x710 [ 1725.181457] kernfs_iop_mkdir+0x14d/0x1e0 [ 1725.182333] vfs_mkdir+0x493/0x750 [ 1725.183085] do_mkdirat+0x150/0x2b0 [ 1725.183850] ? user_path_create+0xf0/0xf0 [ 1725.184728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1725.185818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1725.186900] do_syscall_64+0x33/0x40 [ 1725.187675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1725.188752] RIP: 0033:0x7fa75552db19 [ 1725.189523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1725.193359] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1725.194987] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1725.196508] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1725.198031] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.199547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.201053] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:44:04 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:44:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20000178, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:44:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x8, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:04 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x9effffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:04 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 7) 13:44:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffff9e, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:04 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) fcntl$lock(r2, 0x7, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x9759}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) sendfile(r3, r1, &(0x7f0000000080)=0xfff, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x800000000000000}) dup2(r1, r0) [ 1738.584936] loop2: detected capacity change from 0 to 41948160 [ 1738.594082] FAULT_INJECTION: forcing a failure. [ 1738.594082] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.595805] CPU: 1 PID: 19315 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1738.596719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1738.597793] Call Trace: [ 1738.598154] dump_stack+0x107/0x167 [ 1738.598638] should_fail.cold+0x5/0xa [ 1738.599134] ? create_object.isra.0+0x3a/0xa20 [ 1738.599733] should_failslab+0x5/0x20 [ 1738.600242] kmem_cache_alloc+0x5b/0x310 [ 1738.600787] create_object.isra.0+0x3a/0xa20 [ 1738.601360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1738.602086] __kmalloc+0x16e/0x390 [ 1738.602558] cgroup_mkdir+0x251/0xf50 [ 1738.603057] ? cgroup_destroy_locked+0x710/0x710 [ 1738.603736] kernfs_iop_mkdir+0x14d/0x1e0 [ 1738.604312] vfs_mkdir+0x493/0x750 [ 1738.604811] do_mkdirat+0x150/0x2b0 [ 1738.605317] FAT-fs (loop2): bogus number of FAT sectors [ 1738.605362] ? user_path_create+0xf0/0xf0 [ 1738.606879] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1738.607409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1738.609721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1738.610443] do_syscall_64+0x33/0x40 [ 1738.610958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1738.611679] RIP: 0033:0x7fa75552db19 [ 1738.612158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.614541] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1738.615529] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1738.616456] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1738.617386] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.618337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.619254] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:44:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x9, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:04 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xf0ffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20000478, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0xf, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:04 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x1, 0x0, 0xfffffffffffffffe) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000100001000a00000000001100fc80487fec864b245e0f3f9be149f8000000"], 0x30}}, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000280), &(0x7f0000000300)=@sha1={0x1, "9f8ce3fd5eba33278ce4ec989be7aeef64c50e03"}, 0x15, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r3, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="ad88601b1f061177586a9207aa13cf57c0be481bcfc681073561b0581b2cc2b2f2348f209f30df9a12b25e1b33cfc4917be070c05af51e811ab71efc01b054866b8377ca6bfae7e47fe72466b0e94db1d05dfa96175a1b43b6d27ced9be161c18f17b66612f0b4bbf5f34dfa3f3343d93581d42d2eb4df167c3ef0fdb64547af9fe75672f3163f5df6f18050180b0cd744ac6741785000c767f4ed49d637b149271dd477c1c1049f5f78e3d84753b03ef817e04452b9005535373bb74c4342fc269da3627a2900f16f4f71ba8effe06f42b71b9db59292614ae0a3442620026920fb5d0cc7a318be4dcf03af27f8943870314e2695", @ANYRESDEC=r0, @ANYBLOB="010027bd7000fddbdf25010000000048e01e344100000014001462726f6164636173742d6c696e6b"], 0x30}}, 0x1) syz_genetlink_get_family_id$ipvs(0x0, r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) lseek(r1, 0x1, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r4, 0x1, 0x6, @remote}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYBLOB="40f634c43b", @ANYBLOB="2dcadbce1e98ace8da0b4dfec1f216461337bcd377ae8319be7dd63193f293a9864d5901d97776f5aea393a769f386f38fdcf7b5cae7ca2d1efcf542964995b5ec193128d1578333cb4d78d81441041bc4cbc14e5e8a001c"], 0x100}}, 0x10) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000380)="7346ee6f663c4f4e230051082387a8bd0a5e2ea0006679717cbbeec48d420791b28149fa7ff20e30e40635bf192156e94404301ad8f9d707d2053cb009ce60eed80cb3f9ac6a601a8bbd793ce144f7568ceccc73dde5b816e2484de12b0b8e415c0a819455") unshare(0x48020200) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x202, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4) 13:44:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xfffffff0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1738.776275] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 13:44:04 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 8) 13:44:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:04 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xfffff000, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1738.896330] FAULT_INJECTION: forcing a failure. [ 1738.896330] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.898081] CPU: 1 PID: 19447 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1738.899062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1738.900283] Call Trace: [ 1738.900788] dump_stack+0x107/0x167 [ 1738.901309] should_fail.cold+0x5/0xa [ 1738.901859] ? create_object.isra.0+0x3a/0xa20 [ 1738.902593] should_failslab+0x5/0x20 [ 1738.903210] kmem_cache_alloc+0x5b/0x310 [ 1738.903915] create_object.isra.0+0x3a/0xa20 [ 1738.904701] kmemleak_alloc_percpu+0xa0/0x100 [ 1738.905387] pcpu_alloc+0x4e2/0x1240 [ 1738.905973] ? cset_cgroup_from_root+0x220/0x220 [ 1738.906770] percpu_ref_init+0x31/0x3d0 [ 1738.907342] cgroup_mkdir+0x288/0xf50 [ 1738.907939] ? cgroup_destroy_locked+0x710/0x710 [ 1738.908732] kernfs_iop_mkdir+0x14d/0x1e0 [ 1738.909464] vfs_mkdir+0x493/0x750 [ 1738.910182] do_mkdirat+0x150/0x2b0 [ 1738.910719] ? user_path_create+0xf0/0xf0 [ 1738.911312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1738.912053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1738.912885] do_syscall_64+0x33/0x40 [ 1738.913464] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1738.914351] RIP: 0033:0x7fa75552db19 [ 1738.915089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.917824] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1738.918964] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1738.919739] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1738.920682] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.921812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.922609] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:44:04 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) [ 1738.993719] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 13:44:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x10, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:20 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:20 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 9) 13:44:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:20 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffff7f, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:20 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f0008000000000000000000ff0250831958000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205f06a498ecce8c2e2bac055023a5c6a60048ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd28ccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f6365815fbaeed820000161d17c3a8446ef221d39d3504136905c2a587000000000000224cab6b3426f7aca5dcf032ec434c3ad68f54a9206946735225076eee7fd7cb35c0b06b2b8f925971d75e9889d3ea0a9d6959c090419ce3f6b1b4eb35ef1cb65122537fb5a794f71da1e6fae5c881bc83d458f97e6eb70cc5b3ca6dd4ec51524272620363fe56522b82c0ca9b89f564ddc64d8ca8b2b803207b72ee280f837d6f2be1f7f6c37c28fb0067d56e7574afdcc35c47645ffa74c26e91df9ace7b773459b987ad777043d71e12df0700d72483ab6489bffb00000000000000000000000000000000003e521370adeffb5357d5d6eef885594d33addb3fa1f821561d84cd342060fd4ebfbb98e3c635945a519da82404168ccd1112edf4e85bc47af3d1077ebffd59b691dd6131dc270c06515083d1489a3b713c97c197c6cb90b17b04dad833de21d66041ce1360cfa0e2552e28bda10744c5550e308c53e4e6cff9456be143f162ccc658a49f2c1ccc7d30e7800085dba28bfee6d705000d131a0a1dac4dac4535cfde1e"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:44:20 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) [ 1754.382933] loop2: detected capacity change from 0 to 41948160 13:44:20 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30}, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) syz_open_procfs(r1, &(0x7f0000000080)='ns\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x10c) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x800, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) dup2(r2, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYBLOB="00000200000000002e2f66696c653100"]) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x3, 0x0, 0x4, 0x12, 0x14f, &(0x7f0000000500)}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) [ 1754.398257] FAULT_INJECTION: forcing a failure. [ 1754.398257] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.401492] CPU: 0 PID: 19568 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1754.402972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1754.404719] Call Trace: [ 1754.405278] dump_stack+0x107/0x167 [ 1754.405872] FAT-fs (loop2): bogus number of FAT sectors [ 1754.406070] should_fail.cold+0x5/0xa [ 1754.407274] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1754.408003] ? create_object.isra.0+0x3a/0xa20 [ 1754.408025] should_failslab+0x5/0x20 [ 1754.408048] kmem_cache_alloc+0x5b/0x310 [ 1754.411846] ? mark_held_locks+0x9e/0xe0 [ 1754.412707] create_object.isra.0+0x3a/0xa20 [ 1754.413645] kmemleak_alloc_percpu+0xa0/0x100 [ 1754.414612] pcpu_alloc+0x4e2/0x1240 [ 1754.415415] ? cset_cgroup_from_root+0x220/0x220 [ 1754.416417] percpu_ref_init+0x31/0x3d0 [ 1754.417269] cgroup_mkdir+0x288/0xf50 [ 1754.418088] ? cgroup_destroy_locked+0x710/0x710 [ 1754.419102] kernfs_iop_mkdir+0x14d/0x1e0 [ 1754.419976] vfs_mkdir+0x493/0x750 [ 1754.420735] do_mkdirat+0x150/0x2b0 [ 1754.421508] ? user_path_create+0xf0/0xf0 [ 1754.422399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1754.423499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1754.424592] do_syscall_64+0x33/0x40 [ 1754.425376] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1754.426463] RIP: 0033:0x7fa75552db19 [ 1754.427245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:44:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1754.431151] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1754.432887] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1754.434410] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1754.435916] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.437420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.438931] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:44:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:20 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:20 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffff9e, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x20d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:20 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xfffffff0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:35 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:44:35 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:35 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) capset(&(0x7f0000000240)={0x20071026, r1}, &(0x7f00000002c0)={0xffff, 0x4, 0x3, 0x119b, 0xfffffffe}) timer_create(0x5, &(0x7f0000000180)={0x0, 0x2b, 0x0, @thr={&(0x7f0000000340)="ca256ae063a7abe92f151d03a855e6fe8094d9da29deab10aac4eaf5866a40934f6e52dbf847d34134afaa64457d923ff0dc6b7397ea3ad14767a17ef7ebf99e9572b9d2c8a91673023ff75bef5d8ec9ad2d9043c37789bbeb34c5bc35578d76562c47fde1e1a47b587d054eeef92b6560077283794926f5208e8a33f40be37b846e61a460be0641c2c8ce9670399eb7b2efe019d57ed805817b3fd09fc589c79c5ec0e94563f8cbc61ab4386df535bd0d44fa7e3d976cd9c79d2f3bb1e75ea9aae8e7f16fe631fb4910fd21f1c382b07d5735b319ed385a14e6b8b29d1665ad", &(0x7f0000000440)="4154c744a7fae26850c86a19fb3861cf922cd243662738416d8d8a09c5c2bf729d473a38ba0eac875358710f9710b5026305345f1237e9"}}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14f4f67098148c5c5561080000000000000000003738310da5b064a0a3b149cc757dea8de05d2981e3c5cb372b88166f0a2e932feacbdf194154944a18df03a21e73246a39070050e32325a907e03b8c38426323183c5c584644cb8846"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) read(0xffffffffffffffff, &(0x7f0000000540)=""/102, 0x66) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:44:35 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 10) 13:44:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x39, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:35 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f0008000000000000000000ff0250831958000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205f06a498ecce8c2e2bac055023a5c6a60048ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd28ccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f6365815fbaeed820000161d17c3a8446ef221d39d3504136905c2a587000000000000224cab6b3426f7aca5dcf032ec434c3ad68f54a9206946735225076eee7fd7cb35c0b06b2b8f925971d75e9889d3ea0a9d6959c090419ce3f6b1b4eb35ef1cb65122537fb5a794f71da1e6fae5c881bc83d458f97e6eb70cc5b3ca6dd4ec51524272620363fe56522b82c0ca9b89f564ddc64d8ca8b2b803207b72ee280f837d6f2be1f7f6c37c28fb0067d56e7574afdcc35c47645ffa74c26e91df9ace7b773459b987ad777043d71e12df0700d72483ab6489bffb00000000000000000000000000000000003e521370adeffb5357d5d6eef885594d33addb3fa1f821561d84cd342060fd4ebfbb98e3c635945a519da82404168ccd1112edf4e85bc47af3d1077ebffd59b691dd6131dc270c06515083d1489a3b713c97c197c6cb90b17b04dad833de21d66041ce1360cfa0e2552e28bda10744c5550e308c53e4e6cff9456be143f162ccc658a49f2c1ccc7d30e7800085dba28bfee6d705000d131a0a1dac4dac4535cfde1e"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:44:35 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1769.197065] loop2: detected capacity change from 0 to 41948160 [ 1769.207093] FAULT_INJECTION: forcing a failure. [ 1769.207093] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.208874] CPU: 0 PID: 19715 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1769.209805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1769.210952] Call Trace: [ 1769.211310] dump_stack+0x107/0x167 [ 1769.211808] should_fail.cold+0x5/0xa [ 1769.212321] ? percpu_ref_init+0xd8/0x3d0 [ 1769.212886] should_failslab+0x5/0x20 [ 1769.213393] kmem_cache_alloc_trace+0x55/0x320 [ 1769.214005] ? cset_cgroup_from_root+0x220/0x220 [ 1769.214653] percpu_ref_init+0xd8/0x3d0 [ 1769.215187] cgroup_mkdir+0x288/0xf50 [ 1769.215692] ? cgroup_destroy_locked+0x710/0x710 [ 1769.216315] kernfs_iop_mkdir+0x14d/0x1e0 [ 1769.216871] vfs_mkdir+0x493/0x750 [ 1769.217354] do_mkdirat+0x150/0x2b0 [ 1769.217840] ? user_path_create+0xf0/0xf0 [ 1769.218403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1769.219111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1769.219807] do_syscall_64+0x33/0x40 [ 1769.220309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1769.220982] RIP: 0033:0x7fa75552db19 [ 1769.221469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1769.223919] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1769.224941] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1769.225890] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1769.226841] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1769.227809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1769.228760] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 [ 1769.230154] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 13:44:35 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x500, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:35 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:35 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0xb, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:35 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 11) 13:44:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x6433, &(0x7f0000000300)={0x0, 0x5d33, 0x4, 0x2, 0x1a6, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xfffffffffffffffd, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x16, 0x1}, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x11, r4, 0xd0235000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, 0x0}, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000dff000/0x1000)=nil, 0x1000, 0x200000a, 0x10, 0xffffffffffffffff, 0x8000000) 13:44:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x600, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1769.525543] FAULT_INJECTION: forcing a failure. [ 1769.525543] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.529080] CPU: 1 PID: 19856 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1769.530653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1769.532744] Call Trace: [ 1769.533297] dump_stack+0x107/0x167 [ 1769.534143] should_fail.cold+0x5/0xa [ 1769.535140] ? create_object.isra.0+0x3a/0xa20 [ 1769.536308] should_failslab+0x5/0x20 [ 1769.537267] kmem_cache_alloc+0x5b/0x310 [ 1769.538354] create_object.isra.0+0x3a/0xa20 [ 1769.539412] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1769.540476] kmem_cache_alloc_trace+0x151/0x320 [ 1769.541754] ? cset_cgroup_from_root+0x220/0x220 [ 1769.542916] percpu_ref_init+0xd8/0x3d0 [ 1769.543964] cgroup_mkdir+0x288/0xf50 [ 1769.544838] ? cgroup_destroy_locked+0x710/0x710 [ 1769.545854] kernfs_iop_mkdir+0x14d/0x1e0 [ 1769.546858] vfs_mkdir+0x493/0x750 [ 1769.547787] do_mkdirat+0x150/0x2b0 [ 1769.548678] ? user_path_create+0xf0/0xf0 [ 1769.549694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1769.550916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1769.552245] do_syscall_64+0x33/0x40 [ 1769.553180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1769.554501] RIP: 0033:0x7fa75552db19 [ 1769.555383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1769.559443] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1769.561266] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1769.563134] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1769.564970] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1769.566778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1769.568632] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:44:49 executing program 0: listen(0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3972, &(0x7f0000000a40)={0x0, 0x5912, 0x8, 0x0, 0x24}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x2e2f, &(0x7f0000000040)={0x0, 0x164c, 0x0, 0x0, 0x2d2, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/77, 0x4d, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x48, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}]}, 0x48}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6000200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x1c4, 0x13, 0x100, 0x70bd29, 0x25dfdbfc, {0x1d, 0xa5, 0x84, 0x9, {0x4e23, 0x4e20, [0x2, 0xfff, 0x3, 0x1], [0x7fff, 0xffffffff, 0x3, 0xbe91], r2, [0x10200, 0xd7]}, 0x9d6, 0x80000000}, [@INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "d654a69bcecaf9a5a7fbf8b094850ebdf17a0afb67438db093c1fc99e49897be12e41c35d7f0d93d2d6ed3d6e2876a1810de2beac27497150ac07bf4909ee8f9ad50e38f52aaa0f247fe11576f15cf7e1ceda710ae8750d2d607ab9b174e22487558ee49f9505af3567b8307f72044b4e5f41b9d0424525d31b958673cecd9ab12526b3221720df17922ca09ddfe3234e3f2ad3b174230c57984bdad460e9c2d6846fe1e631eb002b6afedb0468da9b4ba4a7646dd753100957918d51177c63d9d58bff1177d4a17f6b1e7cc55631bb3fe4652f27c"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "9032d42fba86d6a6557787116010a931fddc6d5351728a47c3dbf4c207adf1117c753698a35beb097a08802bfffeb4155dc657434df88700313bbcd03bd640798d8ab9cf63152b5b6150f101a434c151ec37e04ef8eff16ddaa96eca3d57a72d6589ef2b4ac904dc88b069b70b6056e79781962349b90ab3b73ecf20850c6720c78c808463e2b0ffdcbf72ef6f3ace233d"}]}, 0x1c4}}, 0x41) 13:44:49 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:44:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xec0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:49 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:44:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x700, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:49 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x39, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:49 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 12) [ 1783.957344] loop2: detected capacity change from 0 to 41948160 13:44:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x900, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1783.987901] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1783.989089] CPU: 1 PID: 19866 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1783.990056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1783.991230] Call Trace: [ 1783.991590] dump_stack+0x107/0x167 [ 1783.992098] sysfs_warn_dup.cold+0x1c/0x29 [ 1783.992683] sysfs_do_create_link_sd+0x122/0x140 [ 1783.993332] sysfs_create_link+0x5f/0xc0 [ 1783.993892] device_add+0x703/0x1c50 [ 1783.994419] ? devlink_add_symlinks+0x970/0x970 [ 1783.995076] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1783.995810] wiphy_register+0x1da6/0x2850 [ 1783.996383] ? wiphy_unregister+0xb90/0xb90 [ 1783.996983] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1783.997735] ieee80211_register_hw+0x23c5/0x38b0 [ 1783.998408] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1783.999090] ? net_generic+0xdb/0x2b0 [ 1783.999606] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.000250] ? memset+0x20/0x50 [ 1784.000709] ? __hrtimer_init+0x12c/0x270 [ 1784.001278] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1784.001960] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1784.002585] ? hwsim_new_radio_nl+0x967/0x1080 [ 1784.003207] ? memcpy+0x39/0x60 [ 1784.003673] hwsim_new_radio_nl+0x991/0x1080 [ 1784.004277] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1784.004991] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1784.005870] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1784.006796] genl_family_rcv_msg_doit+0x22d/0x330 [ 1784.007451] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1784.008326] ? cap_capable+0x1cd/0x230 [ 1784.008875] ? ns_capable+0xe2/0x110 [ 1784.009382] genl_rcv_msg+0x36a/0x5a0 [ 1784.009905] ? genl_get_cmd+0x480/0x480 [ 1784.010432] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1784.011352] ? lock_release+0x680/0x680 [ 1784.011894] ? __lockdep_reset_lock+0x180/0x180 [ 1784.012518] netlink_rcv_skb+0x14b/0x430 [ 1784.013062] ? genl_get_cmd+0x480/0x480 [ 1784.013599] ? netlink_ack+0xab0/0xab0 [ 1784.014133] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1784.014778] ? is_vmalloc_addr+0x7b/0xb0 [ 1784.015328] genl_rcv+0x24/0x40 [ 1784.015769] netlink_unicast+0x6ce/0xa00 [ 1784.016314] ? netlink_attachskb+0xab0/0xab0 [ 1784.016922] netlink_sendmsg+0x90f/0xe00 [ 1784.017485] ? netlink_unicast+0xa00/0xa00 [ 1784.018066] ? netlink_unicast+0xa00/0xa00 [ 1784.018649] __sock_sendmsg+0x154/0x190 [ 1784.019192] ____sys_sendmsg+0x70d/0x870 [ 1784.019755] ? sock_write_iter+0x3d0/0x3d0 [ 1784.020221] FAULT_INJECTION: forcing a failure. [ 1784.020221] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.020326] ? do_recvmmsg+0x6d0/0x6d0 [ 1784.020348] ? __lockdep_reset_lock+0x180/0x180 [ 1784.020365] ___sys_sendmsg+0xf3/0x170 [ 1784.020390] ? sendmsg_copy_msghdr+0x160/0x160 [ 1784.024990] ? __fget_files+0x2cf/0x520 [ 1784.025526] ? lock_downgrade+0x6d0/0x6d0 [ 1784.026095] ? futex_exit_release+0x220/0x220 [ 1784.026706] ? find_held_lock+0x2c/0x110 [ 1784.027253] ? __fget_files+0x2f8/0x520 [ 1784.027788] ? __fget_light+0xea/0x290 [ 1784.028321] __sys_sendmsg+0xe5/0x1b0 [ 1784.028841] ? __sys_sendmsg_sock+0x40/0x40 [ 1784.029420] ? __do_sys_futex+0x2bb/0x480 [ 1784.030001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.030727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.031419] ? trace_hardirqs_on+0x5b/0x180 [ 1784.032008] do_syscall_64+0x33/0x40 [ 1784.032514] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.033211] RIP: 0033:0x7f38494bfb19 [ 1784.033713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.036246] RSP: 002b:00007f3846a35188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1784.037265] RAX: ffffffffffffffda RBX: 00007f38495d2f60 RCX: 00007f38494bfb19 [ 1784.038244] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 1784.039219] RBP: 00007f3849519f6d R08: 0000000000000000 R09: 0000000000000000 [ 1784.040185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1784.041161] R13: 00007ffd47a0004f R14: 00007f3846a35300 R15: 0000000000022000 [ 1784.042142] CPU: 0 PID: 19884 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1784.043642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.045408] Call Trace: [ 1784.045980] dump_stack+0x107/0x167 [ 1784.046770] should_fail.cold+0x5/0xa [ 1784.047586] ? create_object.isra.0+0x3a/0xa20 [ 1784.048553] should_failslab+0x5/0x20 [ 1784.049365] kmem_cache_alloc+0x5b/0x310 [ 1784.050239] create_object.isra.0+0x3a/0xa20 [ 1784.051195] kmemleak_alloc_percpu+0xa0/0x100 [ 1784.052152] pcpu_alloc+0x4e2/0x1240 [ 1784.052962] cgroup_rstat_init+0x14f/0x1f0 [ 1784.053874] cgroup_mkdir+0x706/0xf50 [ 1784.054696] ? cgroup_destroy_locked+0x710/0x710 [ 1784.055703] kernfs_iop_mkdir+0x14d/0x1e0 [ 1784.056588] vfs_mkdir+0x493/0x750 [ 1784.057352] do_mkdirat+0x150/0x2b0 [ 1784.058128] ? user_path_create+0xf0/0xf0 [ 1784.059035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.060151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.061250] do_syscall_64+0x33/0x40 [ 1784.062041] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.063141] RIP: 0033:0x7fa75552db19 [ 1784.063928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.067857] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1784.069473] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1784.070992] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1784.072513] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1784.074025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.075548] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:44:50 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x69, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1784.128662] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1784.130476] CPU: 0 PID: 19890 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1784.131952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.133701] Call Trace: [ 1784.134262] dump_stack+0x107/0x167 [ 1784.135033] sysfs_warn_dup.cold+0x1c/0x29 [ 1784.135933] sysfs_do_create_link_sd+0x122/0x140 [ 1784.136918] sysfs_create_link+0x5f/0xc0 [ 1784.137774] device_add+0x703/0x1c50 [ 1784.138588] ? devlink_add_symlinks+0x970/0x970 [ 1784.139587] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1784.140692] wiphy_register+0x1da6/0x2850 [ 1784.141584] ? wiphy_unregister+0xb90/0xb90 [ 1784.142516] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1784.143650] ieee80211_register_hw+0x23c5/0x38b0 [ 1784.144674] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1784.145679] ? net_generic+0xdb/0x2b0 [ 1784.146502] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.147499] ? memset+0x20/0x50 [ 1784.148207] ? __hrtimer_init+0x12c/0x270 [ 1784.149066] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1784.150147] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1784.151111] ? hwsim_new_radio_nl+0x967/0x1080 [ 1784.152060] ? memcpy+0x39/0x60 [ 1784.152757] hwsim_new_radio_nl+0x991/0x1080 [ 1784.153685] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1784.154786] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 13:44:50 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 13) [ 1784.156150] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1784.157623] genl_family_rcv_msg_doit+0x22d/0x330 [ 1784.158659] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1784.160018] ? cap_capable+0x1cd/0x230 [ 1784.160839] ? ns_capable+0xe2/0x110 [ 1784.161624] genl_rcv_msg+0x36a/0x5a0 [ 1784.162415] ? genl_get_cmd+0x480/0x480 [ 1784.163258] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1784.164334] ? lock_release+0x680/0x680 [ 1784.165160] ? __lockdep_reset_lock+0x180/0x180 [ 1784.166141] netlink_rcv_skb+0x14b/0x430 [ 1784.167010] ? genl_get_cmd+0x480/0x480 [ 1784.167846] ? netlink_ack+0xab0/0xab0 [ 1784.168655] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1784.169592] ? is_vmalloc_addr+0x7b/0xb0 [ 1784.170455] genl_rcv+0x24/0x40 [ 1784.171136] netlink_unicast+0x6ce/0xa00 [ 1784.172002] ? netlink_attachskb+0xab0/0xab0 [ 1784.172932] netlink_sendmsg+0x90f/0xe00 [ 1784.173781] ? netlink_unicast+0xa00/0xa00 [ 1784.174697] ? netlink_unicast+0xa00/0xa00 [ 1784.175582] __sock_sendmsg+0x154/0x190 [ 1784.176422] ____sys_sendmsg+0x70d/0x870 [ 1784.177272] ? sock_write_iter+0x3d0/0x3d0 [ 1784.178135] ? do_recvmmsg+0x6d0/0x6d0 [ 1784.178971] ? __lockdep_reset_lock+0x180/0x180 [ 1784.179950] ___sys_sendmsg+0xf3/0x170 [ 1784.180752] ? sendmsg_copy_msghdr+0x160/0x160 [ 1784.181710] ? __fget_files+0x2cf/0x520 [ 1784.182550] ? lock_downgrade+0x6d0/0x6d0 [ 1784.183414] ? __lockdep_reset_lock+0x180/0x180 [ 1784.184397] ? futex_exit_release+0x220/0x220 [ 1784.185329] ? __fget_files+0x2f8/0x520 [ 1784.186172] ? __fget_light+0xea/0x290 [ 1784.187005] __sys_sendmsg+0xe5/0x1b0 [ 1784.187782] ? __sys_sendmsg_sock+0x40/0x40 [ 1784.188676] ? __do_sys_futex+0x2bb/0x480 [ 1784.189566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.190670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.191720] ? trace_hardirqs_on+0x5b/0x180 [ 1784.192619] do_syscall_64+0x33/0x40 [ 1784.193403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.194466] RIP: 0033:0x7f38494bfb19 [ 1784.195243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.199105] RSP: 002b:00007f3846a14188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1784.200697] RAX: ffffffffffffffda RBX: 00007f38495d3020 RCX: 00007f38494bfb19 [ 1784.202189] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 1784.203705] RBP: 00007f3849519f6d R08: 0000000000000000 R09: 0000000000000000 [ 1784.205204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1784.206699] R13: 00007ffd47a0004f R14: 00007f3846a14300 R15: 0000000000022000 13:44:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0xd02, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:50 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x39, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:44:50 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:44:50 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}], 0x3, 0x8, 0x6aa12b08) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1) dup2(r2, r1) readv(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x5652, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) write$binfmt_elf64(r0, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe8a) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000340)={&(0x7f00000005c0)=""/129, 0x81}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001300274e000000000000000000000000040000001400000000000000000000040010999500000000"], 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000580)={0x40000000, 0x7, 0x0, 0x5cb7c17, 0xffffffff}) fork() ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) [ 1784.381940] FAULT_INJECTION: forcing a failure. [ 1784.381940] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.384855] CPU: 0 PID: 20010 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1784.386292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.388045] Call Trace: [ 1784.388604] dump_stack+0x107/0x167 [ 1784.389376] should_fail.cold+0x5/0xa [ 1784.390182] ? create_object.isra.0+0x3a/0xa20 [ 1784.391163] should_failslab+0x5/0x20 [ 1784.391962] kmem_cache_alloc+0x5b/0x310 [ 1784.392821] ? mark_held_locks+0x9e/0xe0 [ 1784.393680] create_object.isra.0+0x3a/0xa20 [ 1784.394634] kmemleak_alloc_percpu+0xa0/0x100 [ 1784.395564] pcpu_alloc+0x4e2/0x1240 [ 1784.396380] cgroup_rstat_init+0x14f/0x1f0 [ 1784.397278] cgroup_mkdir+0x706/0xf50 [ 1784.398094] ? cgroup_destroy_locked+0x710/0x710 [ 1784.399210] kernfs_iop_mkdir+0x14d/0x1e0 [ 1784.400086] vfs_mkdir+0x493/0x750 [ 1784.400848] do_mkdirat+0x150/0x2b0 [ 1784.401592] ? user_path_create+0xf0/0xf0 [ 1784.402468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.403575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.404668] do_syscall_64+0x33/0x40 [ 1784.405431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.406476] RIP: 0033:0x7fa75552db19 [ 1784.407276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.411096] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1784.412720] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1784.414204] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1784.415026] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1784.415698] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1784.415710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.415725] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:45:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:45:04 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:45:04 executing program 0: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000880)=@rc={0x1f, @none}, 0x80, &(0x7f0000000140)}, 0x2) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/70, 0x46, 0xfffffffffffffff8) r2 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x39, 0x30, 0x32, 0x39, 0x0, 0x38, 0x37, 0x2c, 0x34, 0x38]}}}}]}) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/255, 0xff}, {&(0x7f0000000a00)=""/233, 0xe9}], 0x2, 0x0, 0x200) mknodat$loop(r2, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r3, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18b22a00890804ac7b7d1cf73ff24879bd311414bb00d58c4520462561"], 0x18}}], 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') chown(&(0x7f0000000280)='./mnt\x00', r3, 0xee01) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) open_tree(r2, &(0x7f0000000180)='./mnt\x00', 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) 13:45:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:04 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20000178, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:04 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 14) 13:45:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1798.784393] loop2: detected capacity change from 0 to 41948160 [ 1798.801004] tmpfs: Bad value for 'mpol' [ 1798.822527] FAULT_INJECTION: forcing a failure. [ 1798.822527] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.825860] CPU: 1 PID: 20036 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1798.827626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1798.829772] Call Trace: [ 1798.830481] dump_stack+0x107/0x167 [ 1798.831455] should_fail.cold+0x5/0xa [ 1798.832455] should_failslab+0x5/0x20 [ 1798.833440] __kmalloc_track_caller+0x79/0x370 [ 1798.834621] ? kstrdup_const+0x53/0x80 [ 1798.835822] ? find_held_lock+0x2c/0x110 [ 1798.836869] kstrdup+0x36/0x70 [ 1798.837838] kstrdup_const+0x53/0x80 [ 1798.838792] __kernfs_new_node+0x9d/0x860 [ 1798.840046] ? mark_held_locks+0x9e/0xe0 [ 1798.841085] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1798.842516] ? cpumask_next+0x1f/0x30 [ 1798.843499] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1798.844895] ? pcpu_alloc+0x12a/0x1240 [ 1798.846084] kernfs_new_node+0x18d/0x250 [ 1798.847324] kernfs_create_dir_ns+0x49/0x160 [ 1798.848653] cgroup_mkdir+0x315/0xf50 [ 1798.849812] ? cgroup_destroy_locked+0x710/0x710 [ 1798.851057] kernfs_iop_mkdir+0x14d/0x1e0 [ 1798.852305] vfs_mkdir+0x493/0x750 [ 1798.853200] do_mkdirat+0x150/0x2b0 [ 1798.854300] ? user_path_create+0xf0/0xf0 [ 1798.855559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1798.857112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1798.858639] do_syscall_64+0x33/0x40 [ 1798.859185] tmpfs: Bad value for 'mpol' [ 1798.859750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1798.859766] RIP: 0033:0x7fa75552db19 [ 1798.859791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1798.867642] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1798.869910] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1798.872035] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 13:45:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20000478, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1798.874159] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1798.876297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1798.878088] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:45:04 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xec0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:05 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 15) 13:45:05 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x580}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)={0x77359400}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xf) fcntl$getown(r1, 0x9) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x4) 13:45:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1799.159037] FAULT_INJECTION: forcing a failure. 13:45:05 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1799.159037] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.162151] CPU: 1 PID: 20164 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1799.163710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1799.165514] Call Trace: [ 1799.166238] dump_stack+0x107/0x167 [ 1799.167056] should_fail.cold+0x5/0xa [ 1799.167903] ? create_object.isra.0+0x3a/0xa20 [ 1799.169024] should_failslab+0x5/0x20 [ 1799.169861] kmem_cache_alloc+0x5b/0x310 [ 1799.170795] create_object.isra.0+0x3a/0xa20 [ 1799.171765] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1799.173070] __kmalloc_track_caller+0x177/0x370 [ 1799.174336] ? kstrdup_const+0x53/0x80 [ 1799.175274] ? find_held_lock+0x2c/0x110 [ 1799.176287] kstrdup+0x36/0x70 [ 1799.177007] kstrdup_const+0x53/0x80 [ 1799.177844] __kernfs_new_node+0x9d/0x860 [ 1799.178781] ? mark_held_locks+0x9e/0xe0 [ 1799.179778] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1799.180978] ? cpumask_next+0x1f/0x30 [ 1799.181872] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1799.182934] ? pcpu_alloc+0x12a/0x1240 [ 1799.183890] kernfs_new_node+0x18d/0x250 [ 1799.184799] kernfs_create_dir_ns+0x49/0x160 [ 1799.185844] cgroup_mkdir+0x315/0xf50 [ 1799.187123] ? cgroup_destroy_locked+0x710/0x710 [ 1799.188363] kernfs_iop_mkdir+0x14d/0x1e0 [ 1799.189380] vfs_mkdir+0x493/0x750 [ 1799.190246] do_mkdirat+0x150/0x2b0 [ 1799.191155] ? user_path_create+0xf0/0xf0 [ 1799.192324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1799.193716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1799.195184] do_syscall_64+0x33/0x40 [ 1799.196290] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1799.197679] RIP: 0033:0x7fa75552db19 [ 1799.198872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1799.203571] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1799.205434] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1799.207544] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1799.209267] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1799.211044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1799.212987] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 [ 1814.152048] FAULT_INJECTION: forcing a failure. [ 1814.152048] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.153460] CPU: 1 PID: 20185 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1814.154201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1814.155105] Call Trace: [ 1814.155398] dump_stack+0x107/0x167 [ 1814.155796] should_fail.cold+0x5/0xa [ 1814.156211] ? __kernfs_new_node+0xd4/0x860 [ 1814.156676] should_failslab+0x5/0x20 [ 1814.157085] kmem_cache_alloc+0x5b/0x310 [ 1814.157548] __kernfs_new_node+0xd4/0x860 [ 1814.157998] ? mark_held_locks+0x9e/0xe0 [ 1814.158458] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1814.158879] loop2: detected capacity change from 0 to 41948160 [ 1814.158990] ? cpumask_next+0x1f/0x30 [ 1814.160960] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1814.161465] ? pcpu_alloc+0x12a/0x1240 [ 1814.161912] kernfs_new_node+0x18d/0x250 [ 1814.162356] kernfs_create_dir_ns+0x49/0x160 [ 1814.162867] cgroup_mkdir+0x315/0xf50 [ 1814.163292] ? cgroup_destroy_locked+0x710/0x710 [ 1814.163810] kernfs_iop_mkdir+0x14d/0x1e0 [ 1814.164279] vfs_mkdir+0x493/0x750 [ 1814.164669] do_mkdirat+0x150/0x2b0 [ 1814.165061] ? user_path_create+0xf0/0xf0 [ 1814.165532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1814.166097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1814.166655] do_syscall_64+0x33/0x40 [ 1814.167091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1814.167643] RIP: 0033:0x7fa75552db19 [ 1814.168044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1814.170010] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1814.170832] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1814.171597] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1814.172405] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1814.173169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1814.173973] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:45:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r0, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = fsmount(r3, 0x1, 0x1) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 13:45:20 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:20 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20000178, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:20 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f0008000000000000000000ff0250831958000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205f06a498ecce8c2e2bac055023a5c6a60048ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd28ccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f6365815fbaeed820000161d17c3a8446ef221d39d3504136905c2a587000000000000224cab6b3426f7aca5dcf032ec434c3ad68f54a9206946735225076eee7fd7cb35c0b06b2b8f925971d75e9889d3ea0a9d6959c090419ce3f6b1b4eb35ef1cb65122537fb5a794f71da1e6fae5c881bc83d458f97e6eb70cc5b3ca6dd4ec51524272620363fe56522b82c0ca9b89f564ddc64d8ca8b2b803207b72ee280f837d6f2be1f7f6c37c28fb0067d56e7574afdcc35c47645ffa74c26e91df9ace7b773459b987ad777043d71e12df0700d72483ab6489bffb00000000000000000000000000000000003e521370adeffb5357d5d6eef885594d33addb3fa1f821561d84cd342060fd4ebfbb98e3c635945a519da82404168ccd1112edf4e85bc47af3d1077ebffd59b691dd6131dc270c06515083d1489a3b713c97c197c6cb90b17b04dad833de21d66041ce1360cfa0e2552e28bda10744c5550e308c53e4e6cff9456be143f162ccc658a49f2c1ccc7d30e7800085dba28bfee6d705000d131a0a1dac4dac4535cfde1eee17aff22f4d009cb71305d239a21898882d1bdd607ba69ded308d9c7f"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:45:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x49240, 0x1, 0x9, 0x7, 0x3ff, 0xfffffffc}, 0x0, 0xfffe000000000001, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000480)=""/160, 0xa0, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x59) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0xfd00ae9fb133f86) ioctl$CDROMPLAYTRKIND(r3, 0x5304, &(0x7f0000000180)={0xe1, 0x2, 0x34, 0x7}) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x4, 0x20, 0x8, 0x0, 0x2, 0x930c2, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000300)}, 0x200, 0xffffffff, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x3, 0x0, 0x79}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r6, &(0x7f0000000300)=ANY=[], 0xc1) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000000c0)=[r0, 0xffffffffffffffff, r4], 0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x1f012, r6, 0x0) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f000001b0c0)="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", 0x1000, 0xc, 0x0, 0x2}, &(0x7f0000000100)) pread64(r5, &(0x7f00000020c0)=""/102391, 0x18ff7, 0x8001) openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x131000, 0x0) 13:45:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:20 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 16) 13:45:20 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 17) 13:45:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r0, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = fsmount(r3, 0x1, 0x1) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x100000001) [ 1814.262796] loop2: detected capacity change from 0 to 41948160 [ 1814.296453] FAULT_INJECTION: forcing a failure. [ 1814.296453] name failslab, interval 1, probability 0, space 0, times 0 13:45:20 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1814.299121] CPU: 0 PID: 20199 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1814.300682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1814.302422] Call Trace: [ 1814.303037] dump_stack+0x107/0x167 [ 1814.303920] should_fail.cold+0x5/0xa [ 1814.304828] ? __kernfs_new_node+0xd4/0x860 [ 1814.305863] should_failslab+0x5/0x20 [ 1814.306781] kmem_cache_alloc+0x5b/0x310 [ 1814.307776] __kernfs_new_node+0xd4/0x860 [ 1814.308768] ? mark_held_locks+0x9e/0xe0 [ 1814.309732] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1814.310877] ? cpumask_next+0x1f/0x30 [ 1814.311792] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1814.312902] ? pcpu_alloc+0x12a/0x1240 [ 1814.313834] kernfs_new_node+0x18d/0x250 [ 1814.314808] kernfs_create_dir_ns+0x49/0x160 [ 1814.315879] cgroup_mkdir+0x315/0xf50 [ 1814.316796] ? cgroup_destroy_locked+0x710/0x710 [ 1814.317917] kernfs_iop_mkdir+0x14d/0x1e0 [ 1814.318916] vfs_mkdir+0x493/0x750 [ 1814.319771] do_mkdirat+0x150/0x2b0 [ 1814.320645] ? user_path_create+0xf0/0xf0 [ 1814.321628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1814.322893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1814.324117] do_syscall_64+0x33/0x40 13:45:20 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20000478, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1814.325005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1814.326251] RIP: 0033:0x7fa75552db19 [ 1814.327163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1814.331570] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1814.333422] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1814.335159] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1814.336890] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1814.338622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1814.340355] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:45:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:20 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 18) 13:45:20 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r0, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = fsmount(r3, 0x1, 0x1) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x100000001) [ 1814.471915] loop2: detected capacity change from 0 to 41948160 [ 1814.596192] FAULT_INJECTION: forcing a failure. [ 1814.596192] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.599239] CPU: 0 PID: 20322 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1814.600717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1814.602486] Call Trace: [ 1814.603118] dump_stack+0x107/0x167 [ 1814.603999] should_fail.cold+0x5/0xa [ 1814.604912] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1814.606267] should_failslab+0x5/0x20 [ 1814.607184] kmem_cache_alloc+0x5b/0x310 [ 1814.608154] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1814.609475] idr_get_free+0x4b5/0x8f0 [ 1814.610394] idr_alloc_u32+0x170/0x2d0 [ 1814.611343] ? __fprop_inc_percpu_max+0x130/0x130 [ 1814.612485] ? lock_acquire+0x197/0x470 [ 1814.613430] ? __kernfs_new_node+0xff/0x860 [ 1814.614467] idr_alloc_cyclic+0x102/0x230 [ 1814.615457] ? idr_alloc+0x130/0x130 [ 1814.616328] ? rwlock_bug.part.0+0x90/0x90 [ 1814.617356] __kernfs_new_node+0x117/0x860 [ 1814.618358] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1814.619488] ? mark_held_locks+0x9e/0xe0 [ 1814.620452] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1814.621700] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1814.622977] ? trace_hardirqs_on+0x5b/0x180 [ 1814.623995] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1814.625299] kernfs_new_node+0x18d/0x250 [ 1814.626261] kernfs_create_dir_ns+0x49/0x160 [ 1814.627315] cgroup_mkdir+0x315/0xf50 [ 1814.628221] ? cgroup_destroy_locked+0x710/0x710 [ 1814.629343] kernfs_iop_mkdir+0x14d/0x1e0 [ 1814.630325] vfs_mkdir+0x493/0x750 [ 1814.631177] do_mkdirat+0x150/0x2b0 [ 1814.632041] ? user_path_create+0xf0/0xf0 [ 1814.633030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1814.634262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1814.635492] do_syscall_64+0x33/0x40 [ 1814.636380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1814.637604] RIP: 0033:0x7fa75552db19 [ 1814.638482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1814.642840] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1814.644665] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1814.646350] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1814.648040] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1814.649721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1814.651406] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 [ 1828.342379] loop2: detected capacity change from 0 to 41948160 [ 1828.343028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20342 comm=syz-executor.0 13:45:34 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 19) 13:45:34 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:34 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, 0x0, 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:45:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f0008000000000000000000ff0250831958000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205f06a498ecce8c2e2bac055023a5c6a60048ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd28ccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f6365815fbaeed820000161d17c3a8446ef221d39d3504136905c2a587000000000000224cab6b3426f7aca5dcf032ec434c3ad68f54a9206946735225076eee7fd7cb35c0b06b2b8f925971d75e9889d3ea0a9d6959c090419ce3f6b1b4eb35ef1cb65122537fb5a794f71da1e6fae5c881bc83d458f97e6eb70cc5b3ca6dd4ec51524272620363fe56522b82c0ca9b89f564ddc64d8ca8b2b803207b72ee280f837d6f2be1f7f6c37c28fb0067d56e7574afdcc35c47645ffa74c26e91df9ace7b773459b987ad777043d71e12df0700d72483ab6489bffb00000000000000000000000000000000003e521370adeffb5357d5d6eef885594d33addb3fa1f821561d84cd342060fd4ebfbb98e3c635945a519da82404168ccd1112edf4e85bc47af3d1077ebffd59b691dd6131dc270c06515083d1489a3b713c97c197c6cb90b17b04dad833de21d66041ce1360cfa0e2552e28bda10744c5550e308c53e4e6cff9456be143f162ccc658a49f2c1ccc7d30e7800085dba28bfee6d705000d131a0a1dac4dac4535cfde1eee17aff22f4d009cb71305d239a21898882d1bdd607ba69ded308d9c7f"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:45:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:34 executing program 0: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001180)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000017c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001480)={0x2f8, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xe5, 0x7, 0x62}, {0x6, 0x5f, 0x8c, 0x5}, {0x2, 0x9, 0x7, 0x5}, {0x8001, 0x3f, 0x70, 0x92}, {0x4, 0x7f, 0x2}]}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4353, 0x20, 0x2, 0x2}, {0x1ff, 0x3f, 0x6e, 0xe9}, {0xfffc, 0x2, 0x7f, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000004}, 0x1080) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1433, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x113}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000001300)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4109, 0x100d}], 0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a7, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000580)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001240)=0x80, &(0x7f0000001280)=@phonet, 0x0, 0x80800}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000011c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0xe60) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2203, &(0x7f0000001380)={0x0, 0xfffffffe, 0x2, 0xfffffffe, 0x20000388}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001200)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd, 0x7, 0x0}, 0x0) [ 1828.384203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20352 comm=syz-executor.0 13:45:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, 0x0, 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) [ 1828.406020] FAULT_INJECTION: forcing a failure. [ 1828.406020] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.408998] CPU: 1 PID: 20334 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1828.410640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1828.412626] Call Trace: [ 1828.413262] dump_stack+0x107/0x167 [ 1828.414137] should_fail.cold+0x5/0xa [ 1828.415062] ? create_object.isra.0+0x3a/0xa20 [ 1828.416150] should_failslab+0x5/0x20 [ 1828.417063] kmem_cache_alloc+0x5b/0x310 [ 1828.418037] create_object.isra.0+0x3a/0xa20 [ 1828.419100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1828.420315] kmem_cache_alloc+0x159/0x310 [ 1828.421317] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1828.422658] idr_get_free+0x4b5/0x8f0 [ 1828.423593] idr_alloc_u32+0x170/0x2d0 [ 1828.424525] ? __fprop_inc_percpu_max+0x130/0x130 [ 1828.425683] ? lock_acquire+0x197/0x470 [ 1828.426630] ? __kernfs_new_node+0xff/0x860 [ 1828.427675] idr_alloc_cyclic+0x102/0x230 [ 1828.428660] ? idr_alloc+0x130/0x130 [ 1828.429547] ? rwlock_bug.part.0+0x90/0x90 [ 1828.430558] __kernfs_new_node+0x117/0x860 [ 1828.431562] ? mark_held_locks+0x9e/0xe0 [ 1828.432521] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1828.433647] ? cpumask_next+0x1f/0x30 [ 1828.434543] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1828.435675] ? pcpu_alloc+0x12a/0x1240 [ 1828.436603] kernfs_new_node+0x18d/0x250 [ 1828.437568] kernfs_create_dir_ns+0x49/0x160 [ 1828.438631] cgroup_mkdir+0x315/0xf50 [ 1828.439554] ? cgroup_destroy_locked+0x710/0x710 [ 1828.440672] kernfs_iop_mkdir+0x14d/0x1e0 [ 1828.441664] vfs_mkdir+0x493/0x750 [ 1828.442514] do_mkdirat+0x150/0x2b0 [ 1828.443390] ? user_path_create+0xf0/0xf0 [ 1828.444373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1828.445626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1828.446847] do_syscall_64+0x33/0x40 [ 1828.447739] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1828.448958] RIP: 0033:0x7fa75552db19 [ 1828.449824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1828.454125] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1828.455911] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1828.457579] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1828.459257] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1828.460930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1828.462599] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:45:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:45:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0xb, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:34 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x6, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:34 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 20) 13:45:34 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1828.603441] loop2: detected capacity change from 0 to 41948160 13:45:34 executing program 0: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001180)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000017c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001480)={0x2f8, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xe5, 0x7, 0x62}, {0x6, 0x5f, 0x8c, 0x5}, {0x2, 0x9, 0x7, 0x5}, {0x8001, 0x3f, 0x70, 0x92}, {0x4, 0x7f, 0x2}]}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4353, 0x20, 0x2, 0x2}, {0x1ff, 0x3f, 0x6e, 0xe9}, {0xfffc, 0x2, 0x7f, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000004}, 0x1080) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1433, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x113}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000001300)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4109, 0x100d}], 0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a7, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000580)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001240)=0x80, &(0x7f0000001280)=@phonet, 0x0, 0x80800}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000011c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0xe60) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2203, &(0x7f0000001380)={0x0, 0xfffffffe, 0x2, 0xfffffffe, 0x20000388}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001200)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd, 0x7, 0x0}, 0x0) [ 1828.661477] FAULT_INJECTION: forcing a failure. [ 1828.661477] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.663095] CPU: 0 PID: 20514 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1828.663944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1828.664946] Call Trace: [ 1828.665267] dump_stack+0x107/0x167 [ 1828.665711] should_fail.cold+0x5/0xa [ 1828.666178] ? selinux_kernfs_init_security+0x137/0x4c0 [ 1828.666819] should_failslab+0x5/0x20 [ 1828.667286] __kmalloc+0x72/0x390 [ 1828.667712] selinux_kernfs_init_security+0x137/0x4c0 [ 1828.668334] ? selinux_file_mprotect+0x610/0x610 [ 1828.668907] ? find_held_lock+0x2c/0x110 [ 1828.669402] ? __kernfs_new_node+0x2ad/0x860 [ 1828.669934] ? lock_downgrade+0x6d0/0x6d0 [ 1828.670436] ? rwlock_bug.part.0+0x90/0x90 [ 1828.670948] security_kernfs_init_security+0x4e/0xb0 [ 1828.671577] __kernfs_new_node+0x531/0x860 [ 1828.672091] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1828.672670] ? cpumask_next+0x1f/0x30 [ 1828.673131] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1828.673705] ? pcpu_alloc+0x12a/0x1240 [ 1828.674200] kernfs_new_node+0x18d/0x250 [ 1828.674701] kernfs_create_dir_ns+0x49/0x160 [ 1828.675265] cgroup_mkdir+0x315/0xf50 [ 1828.675739] ? cgroup_destroy_locked+0x710/0x710 [ 1828.676309] kernfs_iop_mkdir+0x14d/0x1e0 [ 1828.676809] vfs_mkdir+0x493/0x750 [ 1828.677241] do_mkdirat+0x150/0x2b0 [ 1828.677681] ? user_path_create+0xf0/0xf0 [ 1828.678186] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1828.678820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1828.679454] do_syscall_64+0x33/0x40 [ 1828.679908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1828.680522] RIP: 0033:0x7fa75552db19 [ 1828.680971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1828.683193] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1828.684114] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1828.684967] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1828.685818] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1828.686671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1828.687549] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 [ 1828.697317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20559 comm=syz-executor.0 13:45:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x39, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:34 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x7, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, 0x0, 0x216000, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:45:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x111240, 0x104) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x200000c, 0x2010, r0, 0x80000) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x101) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000000000000000008004500003000006804f3d42d67718a002316bf0000000000000001780a010101ac1414aa050090780000000045000000000000000000000000000000ac14d6071ebd0d59c6504a98cd88f690998d179b95fa6a86e4e43180624195d1624561597c51bd5a4b47b52df5fa6a787af530a8b74c23439b1330d120117fec3d7db125d6f838ee5594e1277d7f"], 0x0) 13:45:47 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x8, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:47 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f0008000000000000000000ff0250831958000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205f06a498ecce8c2e2bac055023a5c6a60048ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd28ccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f6365815fbaeed820000161d17c3a8446ef221d39d3504136905c2a587000000000000224cab6b3426f7aca5dcf032ec434c3ad68f54a9206946735225076eee7fd7cb35c0b06b2b8f925971d75e9889d3ea0a9d6959c090419ce3f6b1b4eb35ef1cb65122537fb5a794f71da1e6fae5c881bc83d458f97e6eb70cc5b3ca6dd4ec51524272620363fe56522b82c0ca9b89f564ddc64d8ca8b2b803207b72ee280f837d6f2be1f7f6c37c28fb0067d56e7574afdcc35c47645ffa74c26e91df9ace7b773459b987ad777043d71e12df0700d72483ab6489bffb00000000000000000000000000000000003e521370adeffb5357d5d6eef885594d33addb3fa1f821561d84cd342060fd4ebfbb98e3c635945a519da82404168ccd1112edf4e85bc47af3d1077ebffd59b691dd6131dc270c06515083d1489a3b713c97c197c6cb90b17b04dad833de21d66041ce1360cfa0e2552e28bda10744c5550e308c53e4e6cff9456be143f162ccc658a49f2c1ccc7d30e7800085dba28bfee6d705000d131a0a1dac4dac4535cfde1eee17aff22f4d009cb71305d239a21898882d1bdd607ba69ded308d9c7f05cae2c3b2"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:45:47 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 21) 13:45:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x69, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:47 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:45:47 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1841.953584] loop2: detected capacity change from 0 to 41948160 [ 1841.964155] FAULT_INJECTION: forcing a failure. [ 1841.964155] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.965986] CPU: 1 PID: 20599 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1841.966990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1841.968186] Call Trace: [ 1841.968588] dump_stack+0x107/0x167 [ 1841.969119] should_fail.cold+0x5/0xa [ 1841.969682] ? create_object.isra.0+0x3a/0xa20 [ 1841.970343] should_failslab+0x5/0x20 [ 1841.970898] kmem_cache_alloc+0x5b/0x310 [ 1841.971496] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1841.972198] create_object.isra.0+0x3a/0xa20 [ 1841.972832] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1841.973556] __kmalloc+0x16e/0x390 [ 1841.974058] selinux_kernfs_init_security+0x137/0x4c0 [ 1841.974771] ? selinux_file_mprotect+0x610/0x610 [ 1841.975431] ? find_held_lock+0x2c/0x110 [ 1841.975994] ? __kernfs_new_node+0x2ad/0x860 [ 1841.976617] ? lock_downgrade+0x6d0/0x6d0 [ 1841.977188] ? rwlock_bug.part.0+0x90/0x90 [ 1841.977776] security_kernfs_init_security+0x4e/0xb0 [ 1841.978478] __kernfs_new_node+0x531/0x860 [ 1841.979068] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1841.979750] ? cpumask_next+0x1f/0x30 [ 1841.980278] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1841.980935] ? pcpu_alloc+0x12a/0x1240 [ 1841.981482] kernfs_new_node+0x18d/0x250 [ 1841.982060] kernfs_create_dir_ns+0x49/0x160 [ 1841.982679] cgroup_mkdir+0x315/0xf50 [ 1841.983209] ? cgroup_destroy_locked+0x710/0x710 [ 1841.983884] kernfs_iop_mkdir+0x14d/0x1e0 [ 1841.984460] vfs_mkdir+0x493/0x750 [ 1841.984972] do_mkdirat+0x150/0x2b0 [ 1841.985474] ? user_path_create+0xf0/0xf0 [ 1841.986050] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1841.986773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1841.987492] do_syscall_64+0x33/0x40 [ 1841.987996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1841.988694] RIP: 0033:0x7fa75552db19 [ 1841.989198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1841.991687] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1841.992758] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1841.993718] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1841.994688] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1841.995648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1841.996608] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:46:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:46:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:46:01 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0xb, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:01 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x9, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0xfff, 0x8, 0x80, 0x7, 0x9}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x7, 0x0) setxattr$trusted_overlay_redirect(0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000600)={0x1, 0x0, 0x7fffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) 13:46:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:01 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 22) [ 1855.857010] loop2: detected capacity change from 0 to 41948160 [ 1855.932809] FAULT_INJECTION: forcing a failure. [ 1855.932809] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.935410] CPU: 0 PID: 20637 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1855.936878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1855.938627] Call Trace: [ 1855.939179] dump_stack+0x107/0x167 [ 1855.939959] should_fail.cold+0x5/0xa [ 1855.940760] should_failslab+0x5/0x20 [ 1855.941565] __kmalloc_track_caller+0x79/0x370 [ 1855.942518] ? security_context_to_sid_core+0xb4/0x890 [ 1855.943626] kmemdup_nul+0x2d/0xa0 [ 1855.944381] security_context_to_sid_core+0xb4/0x890 [ 1855.945469] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 1855.946598] ? do_raw_spin_lock+0x121/0x260 [ 1855.947508] ? rwlock_bug.part.0+0x90/0x90 [ 1855.948398] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1855.949426] ? do_raw_spin_unlock+0x4f/0x220 [ 1855.950354] ? _raw_spin_unlock+0x1a/0x30 [ 1855.951231] security_context_to_sid+0x35/0x50 [ 1855.952201] selinux_kernfs_init_security+0x19d/0x4c0 [ 1855.953273] ? selinux_file_mprotect+0x610/0x610 [ 1855.954256] ? find_held_lock+0x2c/0x110 [ 1855.955110] ? __kernfs_new_node+0x2ad/0x860 [ 1855.956041] ? lock_downgrade+0x6d0/0x6d0 [ 1855.956905] ? rwlock_bug.part.0+0x90/0x90 [ 1855.957798] security_kernfs_init_security+0x4e/0xb0 [ 1855.958860] __kernfs_new_node+0x531/0x860 [ 1855.959756] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1855.960742] ? cpumask_next+0x1f/0x30 [ 1855.961549] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1855.962530] ? pcpu_alloc+0x12a/0x1240 [ 1855.963371] kernfs_new_node+0x18d/0x250 [ 1855.964257] kernfs_create_dir_ns+0x49/0x160 [ 1855.965207] cgroup_mkdir+0x315/0xf50 [ 1855.966006] ? cgroup_destroy_locked+0x710/0x710 [ 1855.966988] kernfs_iop_mkdir+0x14d/0x1e0 [ 1855.967868] vfs_mkdir+0x493/0x750 [ 1855.968611] do_mkdirat+0x150/0x2b0 [ 1855.969379] ? user_path_create+0xf0/0xf0 [ 1855.970242] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1855.971342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1855.972430] do_syscall_64+0x33/0x40 [ 1855.973200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1855.974275] RIP: 0033:0x7fa75552db19 13:46:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1855.975056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1855.979112] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1855.980855] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1855.982377] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1855.984127] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 13:46:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000002c0), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f660080ffff00"]) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(0x0, 0x0) sendfile(r1, r0, &(0x7f00000001c0)=0x9d, 0x10001) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x3, 0x0, 0x9c, 0x9, 0x0, 0x10000, 0x1c0, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x6}, 0x60, 0x6, 0xfffffffa, 0x9, 0x800, 0x7, 0x0, 0x0, 0x1, 0x0, 0x41da}, r2, 0x8, r0, 0x3) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x20, 0x4, 0x0, 0x3, 0x0, 0x7e13, 0x80280, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x1, 0xffffffff, 0x7fff, 0x6, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0x9, 0xffffffffffffffff, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)='/#w!:.\xf3)$\x00', &(0x7f0000000180)='\x96(\x00', &(0x7f0000000200)='{}\x00', &(0x7f0000000300)='%\x00', &(0x7f0000000340)='^/['], &(0x7f0000000480)=[&(0x7f00000003c0)='/-+\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='@)}+\x00'], 0x100) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x2}}, 0x1c) [ 1855.985766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1855.987265] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:46:02 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x39, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:02 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0xf, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:46:02 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x69, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:46:02 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 23) 13:46:02 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x10, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1856.286872] loop2: detected capacity change from 0 to 41948160 13:46:02 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1856.432019] FAULT_INJECTION: forcing a failure. [ 1856.432019] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.435052] CPU: 0 PID: 20783 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1856.436751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1856.438758] Call Trace: [ 1856.439400] dump_stack+0x107/0x167 [ 1856.440310] should_fail.cold+0x5/0xa [ 1856.441239] should_failslab+0x5/0x20 [ 1856.442159] __kmalloc_track_caller+0x79/0x370 [ 1856.443251] ? security_context_to_sid_core+0xb4/0x890 [ 1856.444530] kmemdup_nul+0x2d/0xa0 [ 1856.445386] security_context_to_sid_core+0xb4/0x890 [ 1856.446620] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 1856.447937] ? do_raw_spin_lock+0x121/0x260 [ 1856.448963] ? rwlock_bug.part.0+0x90/0x90 [ 1856.449979] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1856.451128] ? do_raw_spin_unlock+0x4f/0x220 [ 1856.452206] ? _raw_spin_unlock+0x1a/0x30 [ 1856.453215] security_context_to_sid+0x35/0x50 [ 1856.454320] selinux_kernfs_init_security+0x19d/0x4c0 [ 1856.455558] ? selinux_file_mprotect+0x610/0x610 [ 1856.456714] ? find_held_lock+0x2c/0x110 [ 1856.457683] ? __kernfs_new_node+0x2ad/0x860 [ 1856.458739] ? lock_downgrade+0x6d0/0x6d0 [ 1856.459740] ? rwlock_bug.part.0+0x90/0x90 [ 1856.460756] security_kernfs_init_security+0x4e/0xb0 [ 1856.461976] __kernfs_new_node+0x531/0x860 [ 1856.462991] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1856.464136] ? cpumask_next+0x1f/0x30 [ 1856.465065] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1856.466208] ? pcpu_alloc+0x12a/0x1240 [ 1856.467163] kernfs_new_node+0x18d/0x250 [ 1856.468162] kernfs_create_dir_ns+0x49/0x160 [ 1856.469231] cgroup_mkdir+0x315/0xf50 [ 1856.470177] ? cgroup_destroy_locked+0x710/0x710 [ 1856.471326] kernfs_iop_mkdir+0x14d/0x1e0 [ 1856.472349] vfs_mkdir+0x493/0x750 [ 1856.473213] do_mkdirat+0x150/0x2b0 [ 1856.474093] ? user_path_create+0xf0/0xf0 [ 1856.475091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1856.476353] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1856.477594] do_syscall_64+0x33/0x40 [ 1856.478487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1856.479710] RIP: 0033:0x7fa75552db19 [ 1856.480587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1856.484951] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1856.486749] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1856.488464] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1856.490141] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1856.491838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1856.493527] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:46:19 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x9c) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:46:19 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:19 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 24) 13:46:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:46:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xc1) r2 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT, @ANYRES64=r1, @ANYBLOB="bb98b197e5c859ad7e0b4e85385deac944996fee6592aac5575b5b74201c38", @ANYRESOCT=r1, @ANYRESDEC, @ANYRESHEX, @ANYRES32]) umount2(0x0, 0x0) lseek(r2, 0xfa2b, 0x0) r3 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r3}}, {@fowner_eq={'fowner', 0x3d, r4}}]}}) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r2, 0x0, 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') prlimit64(0x0, 0x4, &(0x7f00000001c0)={0x4, 0xfff}, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) [ 1873.024412] loop2: detected capacity change from 0 to 41948160 13:46:19 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x20f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1873.100267] FAULT_INJECTION: forcing a failure. [ 1873.100267] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.103286] CPU: 1 PID: 20917 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1873.104897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1873.106843] Call Trace: [ 1873.107460] dump_stack+0x107/0x167 [ 1873.108316] should_fail.cold+0x5/0xa [ 1873.109209] ? create_object.isra.0+0x3a/0xa20 [ 1873.110265] should_failslab+0x5/0x20 [ 1873.111143] kmem_cache_alloc+0x5b/0x310 [ 1873.112099] create_object.isra.0+0x3a/0xa20 [ 1873.113118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1873.114306] __kmalloc_track_caller+0x177/0x370 [ 1873.115383] ? security_context_to_sid_core+0xb4/0x890 [ 1873.116616] kmemdup_nul+0x2d/0xa0 [ 1873.117442] security_context_to_sid_core+0xb4/0x890 [ 1873.118638] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 1873.119882] ? do_raw_spin_lock+0x121/0x260 [ 1873.120884] ? rwlock_bug.part.0+0x90/0x90 [ 1873.121860] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1873.122976] ? do_raw_spin_unlock+0x4f/0x220 [ 1873.123996] ? _raw_spin_unlock+0x1a/0x30 [ 1873.124965] security_context_to_sid+0x35/0x50 [ 1873.126030] selinux_kernfs_init_security+0x19d/0x4c0 [ 1873.127220] ? selinux_file_mprotect+0x610/0x610 [ 1873.128318] ? find_held_lock+0x2c/0x110 [ 1873.129271] ? __kernfs_new_node+0x2ad/0x860 [ 1873.130306] ? lock_downgrade+0x6d0/0x6d0 [ 1873.131266] ? rwlock_bug.part.0+0x90/0x90 [ 1873.132242] security_kernfs_init_security+0x4e/0xb0 [ 1873.133391] __kernfs_new_node+0x531/0x860 [ 1873.134354] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1873.135441] ? cpumask_next+0x1f/0x30 [ 1873.136313] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1873.137385] ? pcpu_alloc+0x12a/0x1240 [ 1873.138287] kernfs_new_node+0x18d/0x250 [ 1873.139228] kernfs_create_dir_ns+0x49/0x160 [ 1873.140250] cgroup_mkdir+0x315/0xf50 [ 1873.141127] ? cgroup_destroy_locked+0x710/0x710 [ 1873.142190] kernfs_iop_mkdir+0x14d/0x1e0 [ 1873.143135] vfs_mkdir+0x493/0x750 [ 1873.143940] do_mkdirat+0x150/0x2b0 [ 1873.144797] ? user_path_create+0xf0/0xf0 [ 1873.145747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1873.146934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1873.148125] do_syscall_64+0x33/0x40 [ 1873.148982] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1873.150156] RIP: 0033:0x7fa75552db19 [ 1873.150995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1873.155166] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1873.156883] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1873.158503] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1873.160112] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1873.161742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1873.163354] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:46:19 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0xd020000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:19 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 25) 13:46:19 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1873.417422] FAULT_INJECTION: forcing a failure. [ 1873.417422] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.420778] CPU: 1 PID: 21040 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1873.422370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1873.424244] Call Trace: [ 1873.424851] dump_stack+0x107/0x167 [ 1873.425694] should_fail.cold+0x5/0xa [ 1873.426551] ? create_object.isra.0+0x3a/0xa20 [ 1873.427575] should_failslab+0x5/0x20 [ 1873.428445] kmem_cache_alloc+0x5b/0x310 [ 1873.429382] ? sidtab_sid2str_get+0x65/0x720 [ 1873.430406] create_object.isra.0+0x3a/0xa20 [ 1873.431410] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1873.432592] __kmalloc_track_caller+0x177/0x370 [ 1873.433650] ? sidtab_sid2str_get+0x17e/0x720 [ 1873.434677] kmemdup+0x23/0x50 [ 1873.435411] sidtab_sid2str_get+0x17e/0x720 [ 1873.436413] sidtab_entry_to_string+0x33/0x110 [ 1873.437448] security_sid_to_context_core+0x33c/0x5d0 [ 1873.438624] selinux_kernfs_init_security+0x239/0x4c0 [ 1873.439791] ? selinux_file_mprotect+0x610/0x610 [ 1873.440886] ? find_held_lock+0x2c/0x110 [ 1873.441814] ? __kernfs_new_node+0x2ad/0x860 [ 1873.442804] ? rwlock_bug.part.0+0x90/0x90 [ 1873.443758] security_kernfs_init_security+0x4e/0xb0 [ 1873.444916] __kernfs_new_node+0x531/0x860 [ 1873.445885] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1873.446958] ? cpumask_next+0x1f/0x30 [ 1873.447848] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1873.448944] ? pcpu_alloc+0x12a/0x1240 [ 1873.449844] kernfs_new_node+0x18d/0x250 [ 1873.450780] kernfs_create_dir_ns+0x49/0x160 [ 1873.451789] cgroup_mkdir+0x315/0xf50 [ 1873.452687] ? cgroup_destroy_locked+0x710/0x710 [ 1873.453770] kernfs_iop_mkdir+0x14d/0x1e0 [ 1873.454719] vfs_mkdir+0x493/0x750 [ 1873.455539] do_mkdirat+0x150/0x2b0 [ 1873.456370] ? user_path_create+0xf0/0xf0 [ 1873.457335] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1873.458529] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1873.459709] do_syscall_64+0x33/0x40 [ 1873.460564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1873.461730] RIP: 0033:0x7fa75552db19 [ 1873.462575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1873.466665] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1873.468391] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1873.470006] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1873.471630] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1873.473262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1873.474875] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:46:33 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:33 executing program 0: r0 = memfd_create(&(0x7f00000003c0)='oD(\xe8\x82\x82B\xe2\x0f;', 0x3) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xe) fallocate(r0, 0x0, 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:46:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a04}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x216000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) fchmod(0xffffffffffffffff, 0x102) fsmount(r1, 0x0, 0x1) pipe2(&(0x7f0000000240), 0x4000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = fsmount(r4, 0x1, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x101, 0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) 13:46:33 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup(r2) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 26) 13:46:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f0008000000000000000000ff0250831958000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205f06a498ecce8c2e2bac055023a5c6a60048ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd28ccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f6365815fbaeed820000161d17c3a8446ef221d39d3504136905c2a587000000000000224cab6b3426f7aca5dcf032ec434c3ad68f54a9206946735225076eee7fd7cb35c0b06b2b8f925971d75e9889d3ea0a9d6959c090419ce3f6b1b4eb35ef1cb65122537fb5a794f71da1e6fae5c881bc83d458f97e6eb70cc5b3ca6dd4ec51524272620363fe56522b82c0ca9b89f564ddc64d8ca8b2b803207b72ee280f837d6f2be1f7f6c37c28fb0067d56e7574afdcc35c47645ffa74c26e91df9ace7b773459b987ad777043d71e12df0700d72483ab6489bffb00000000000000000000000000000000003e521370adeffb5357d5d6eef885594d33addb3fa1f821561d84cd342060fd4ebfbb98e3c635945a519da82404168ccd1112edf4e85bc47af3d1077ebffd59b691dd6131dc270c06515083d1489a3b713c97c197c6cb90b17b04dad833de21d66041ce1360cfa0e2552e28bda10744c5550e308c53e4e6cff9456be143f162ccc658a49f2c1ccc7d30e7800085dba28bfee6d705000d131a0a1dac4dac4535cfde1eee17aff22f4d009cb71305d239a21898882d1bdd607ba69ded308d9c7f05cae2c3b2cbc8"], 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = fork() r2 = fork() syz_emit_ethernet(0x61, &(0x7f0000001600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@x25={0x805, {0x2, 0x1, 0x0, "103ab82e18763eb4dac93b8afe96924c543bb8ebe4b1140b25cba0d35f1994b67d43a75d04ebf31293cb0b6879381fabc2816bc82725cde78952f01f1b0e47cf9187ceb3a42c97aa47ad730905fdfacf"}}}}, &(0x7f0000001680)={0x0, 0x3, [0xeb5, 0x2b1, 0xca0, 0xe29]}) r3 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000003c0)) ptrace(0x10, r1) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) sched_getparam(0x0, &(0x7f00000018c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x73, 0x7, 0x1, 0x3, 0x0, 0x509, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7f}, 0x46810, 0x2, 0xaf9c, 0x8, 0x6, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5a60}, r2, 0xc, r4, 0x1) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r5, r4, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x0, 0x6, 0x20, 0x3, 0x0, 0x7ff, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2010, 0x2, 0x0, 0x7, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x7}, r3, 0x2, r4, 0x2) timer_create(0x3, &(0x7f0000001840)={0x0, 0x25, 0x4, @thr={&(0x7f0000001700)="203d31e81aa98f9276b346745530ea9aceece3cc125e8f756ac75b2f96dfe2c90157481a5a5d0fa13191d167184d87e5922f63da215492934397d7c549081bc466d66748eabf7dfb69a89a844ab5a8710ea5c5b1822b88bd30aa0f7ed9f23fb6b4427bee5b6523cf7c5d18", &(0x7f0000001780)="06ffcb6f66261a813600a299f33e961ab69fc6f040c4eeb817abb90cf2de9a60c67276f77358237fb21f86ca528ee75e64a5fccd99fb538d300540047f8830c07fa5b1924a79d0f12fec51d995b7a490c279d5df57b3b2ecb0a10974064c1c2437bb036279a64b42c7bd47454f07134afe2dee34521a4c664594f3c40ea50ec2387d08601e141d9f9e11daf46c"}}, &(0x7f0000001880)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000}) 13:46:33 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x500, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1887.312802] FAULT_INJECTION: forcing a failure. [ 1887.312802] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.317039] CPU: 1 PID: 21050 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1887.318606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1887.320480] Call Trace: [ 1887.321084] dump_stack+0x107/0x167 [ 1887.321913] should_fail.cold+0x5/0xa [ 1887.322779] ? kvmalloc_node+0x119/0x170 [ 1887.323697] should_failslab+0x5/0x20 [ 1887.324567] __kmalloc_node+0x76/0x420 [ 1887.325448] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1887.326540] kvmalloc_node+0x119/0x170 [ 1887.327421] simple_xattr_alloc+0x43/0xa0 [ 1887.328363] simple_xattr_set+0x75/0x610 [ 1887.329308] kernfs_xattr_set+0x50/0x80 [ 1887.330222] selinux_kernfs_init_security+0x26d/0x4c0 [ 1887.331389] ? selinux_file_mprotect+0x610/0x610 [ 1887.332475] ? find_held_lock+0x2c/0x110 [ 1887.333397] ? __kernfs_new_node+0x2ad/0x860 [ 1887.334388] ? rwlock_bug.part.0+0x90/0x90 [ 1887.335358] security_kernfs_init_security+0x4e/0xb0 [ 1887.336525] __kernfs_new_node+0x531/0x860 [ 1887.337489] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1887.338563] ? cpumask_next+0x1f/0x30 [ 1887.339421] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1887.340492] ? pcpu_alloc+0x12a/0x1240 [ 1887.341384] kernfs_new_node+0x18d/0x250 [ 1887.342309] kernfs_create_dir_ns+0x49/0x160 [ 1887.342731] loop2: detected capacity change from 0 to 41948160 [ 1887.343308] cgroup_mkdir+0x315/0xf50 [ 1887.344885] ? cgroup_destroy_locked+0x710/0x710 [ 1887.345954] kernfs_iop_mkdir+0x14d/0x1e0 [ 1887.346898] vfs_mkdir+0x493/0x750 [ 1887.347710] do_mkdirat+0x150/0x2b0 [ 1887.348544] ? user_path_create+0xf0/0xf0 [ 1887.349486] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1887.350671] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1887.351843] do_syscall_64+0x33/0x40 [ 1887.352716] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1887.353877] RIP: 0033:0x7fa75552db19 [ 1887.354722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1887.358908] RSP: 002b:00007fa752aa3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1887.360664] RAX: ffffffffffffffda RBX: 00007fa755640f60 RCX: 00007fa75552db19 [ 1887.362312] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 1887.363964] RBP: 00007fa752aa31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1887.365614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1887.367265] R13: 00007ffcbb49ed8f R14: 00007fa752aa3300 R15: 0000000000022000 13:46:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x7fffffff}]}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x0, 0x40, 0x5, 0x400}, {0x200, 0x6, 0x5, 0xb219}, {0x7fff, 0x7f, 0x56, 0x5878ca5e}, {0xea3a, 0xa, 0x3, 0x4}, {0x1, 0x3f, 0x9, 0xcf}, {0x9, 0x1b, 0x6, 0x9}, {0x3, 0x4, 0x4, 0x3}, {0x3, 0x0, 0x5, 0x800}, {0x401, 0x3, 0x3f, 0x3}]}) 13:46:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x6, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:33 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x600, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) 13:46:33 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) [ 1900.328985] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88804b5e8680 (size 144): comm "syz-executor.6", pid 21050, jiffies 4296554338 (age 20.739s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 b9 5d b0 68 00 00 00 00 .........].h.... e6 31 2c 14 00 00 00 00 b9 5d b0 68 00 00 00 00 .1,......].h.... backtrace: [<00000000f2b2784b>] __kernfs_iattrs+0xbc/0x470 [<00000000926571db>] kernfs_xattr_set+0x2b/0x80 [<00000000731a6a29>] selinux_kernfs_init_security+0x26d/0x4c0 [<000000002b9bc5e8>] security_kernfs_init_security+0x4e/0xb0 [<000000004eea1894>] __kernfs_new_node+0x531/0x860 [<0000000064fed14f>] kernfs_new_node+0x18d/0x250 [<000000000735ee5a>] kernfs_create_dir_ns+0x49/0x160 [<000000005f157c00>] cgroup_mkdir+0x315/0xf50 [<000000000ee99071>] kernfs_iop_mkdir+0x14d/0x1e0 [<00000000bb0e3aca>] vfs_mkdir+0x493/0x750 [<00000000ac6ad74b>] do_mkdirat+0x150/0x2b0 [<00000000988a5adf>] do_syscall_64+0x33/0x40 [<0000000014dfa6cc>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: leak checking failed VM DIAGNOSIS: 13:46:54 Registers: info registers vcpu 0 RAX=ffffffff83e953c0 RBX=0000000000000000 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffcd7d1080 CR3=000000001b0c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934343120657a697328203038363865 XMM03=3220646970202c22362e726f74756365 XMM04=2e2e2e2e2e2e2e202030302030302030 XMM05=20303020303020303020303020303020 XMM06=65747962203233207473726966282070 XMM07=30322065676128203833333435353639 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e953c0 RBX=0000000000000001 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffcd74db00 CR3=0000000018368000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004169375100000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000