r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1741.898343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.907986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.931445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.934448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.941984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.958139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1744.297237] Bluetooth: hci1: command 0x0406 tx timeout [ 1746.729146] Bluetooth: hci0: command 0x0409 tx timeout [ 1748.777125] Bluetooth: hci0: command 0x041b tx timeout [ 1750.825198] Bluetooth: hci0: command 0x040f tx timeout [ 1751.847602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.849569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.862388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1751.894603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.896331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.898975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1752.047574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1752.054480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1752.873138] Bluetooth: hci0: command 0x0419 tx timeout 11:19:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 58) 11:19:32 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000640)=@un=@file={0x1, './mnt\x00'}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=[@mark={{0x14, 0x1, 0x24, 0x8000}}], 0x18}, 0x4004045) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=ANY=[], 0x50, 0x0) openat(r0, &(0x7f0000000480)='./file1\x00', 0x24000, 0x23) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="10b6ae57402a44cd76e19d000000020000000b0000000000"], 0x42a080) openat(r1, &(0x7f0000000240)='./mnt\x00', 0x103641, 0x101) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x101, &(0x7f0000000f00)={0x77359400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) fcntl$setlease(r2, 0x400, 0x0) [ 1766.608714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.624052] loop6: detected capacity change from 0 to 32256 [ 1766.636378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:19:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:19:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:19:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xba}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfe00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x804ebb, &(0x7f0000001780)={0x0, 0x1b9b, 0x10, 0x0, 0x165}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x3c24, 0x7f29, 0x2, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x20000, 0x31) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000340)=ANY=[@ANYRES64], 0x8) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) write(r6, &(0x7f0000000540)='\t', 0x1) openat$random(0xffffffffffffff9c, &(0x7f00000002c0), 0x240000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x1f, &(0x7f0000001140)=""/244, &(0x7f0000000000)=0xf4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) fsmount(r5, 0x1, 0x8) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000000), &(0x7f0000000040)={'U+', 0x9e}, 0x16, 0x1) futimesat(0xffffffffffffffff, 0x0, 0x0) 11:19:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) 11:19:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, 0x0, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040), &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000400)=0x1) 11:19:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1766.645596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.652920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.653452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.663949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.669397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.676009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.686756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.702752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.721514] FAULT_INJECTION: forcing a failure. [ 1766.721514] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.724336] CPU: 0 PID: 16799 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1766.725930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.727835] Call Trace: [ 1766.727943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.728444] dump_stack+0x107/0x167 [ 1766.728468] should_fail.cold+0x5/0xa [ 1766.728489] ? fib_create_info+0x769/0x4a30 [ 1766.728509] should_failslab+0x5/0x20 [ 1766.728529] __kmalloc+0x72/0x390 [ 1766.728549] ? lock_chain_count+0x20/0x20 [ 1766.728574] fib_create_info+0x769/0x4a30 [ 1766.731908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.732142] ? find_held_lock+0x2c/0x110 [ 1766.732179] ? fib_result_prefsrc+0x4a0/0x4a0 [ 1766.740443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.741642] ? __local_bh_enable_ip+0x9d/0x100 [ 1766.742679] fib_table_insert+0x163/0x19a0 [ 1766.743667] ? fib_route_seq_show+0xeb0/0xeb0 [ 1766.744684] ? mark_held_locks+0x9e/0xe0 [ 1766.745631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.746825] ? __local_bh_enable_ip+0x9d/0x100 [ 1766.747848] ? trace_hardirqs_on+0x5b/0x180 [ 1766.748834] ? fib_new_table+0xfb/0x460 [ 1766.749736] fib_magic+0x32d/0x3b0 [ 1766.750539] ? fib_new_table+0x460/0x460 [ 1766.751486] ? lockdep_rtnl_is_held+0x22/0x30 [ 1766.752497] ? ip_mc_up+0x1ac/0x3a0 [ 1766.753336] fib_add_ifaddr+0x4b9/0x580 [ 1766.754248] fib_netdev_event+0x3ac/0x720 [ 1766.755190] raw_notifier_call_chain+0xb3/0x110 [ 1766.756293] call_netdevice_notifiers_info+0xba/0x130 [ 1766.757481] __dev_notify_flags+0x110/0x2c0 [ 1766.758454] ? dev_change_name+0x6b0/0x6b0 [ 1766.759411] ? __dev_change_flags+0x4cf/0x6e0 [ 1766.760433] ? dev_set_allmulti+0x30/0x30 [ 1766.761389] ? dev_ioctl+0x22e/0xd30 [ 1766.762230] ? lock_acquire+0x197/0x470 [ 1766.763137] ? full_name_hash+0xb5/0xf0 [ 1766.764052] dev_change_flags+0x100/0x160 [ 1766.765006] dev_ifsioc+0x5b9/0xa00 [ 1766.765833] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1766.767019] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1766.768217] dev_ioctl+0x23c/0xd30 [ 1766.769036] sock_do_ioctl+0x17d/0x300 [ 1766.769917] ? compat_ifr_data_ioctl+0x180/0x180 [ 1766.771000] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1766.772303] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1766.773491] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1766.774678] ? generic_block_fiemap+0x60/0x60 [ 1766.775689] ? lock_downgrade+0x6d0/0x6d0 [ 1766.776632] sock_ioctl+0x3ef/0x710 [ 1766.777464] ? dlci_ioctl_set+0x30/0x30 [ 1766.778371] ? selinux_file_ioctl+0xb6/0x270 [ 1766.779374] ? dlci_ioctl_set+0x30/0x30 [ 1766.780278] __x64_sys_ioctl+0x19a/0x210 [ 1766.781267] do_syscall_64+0x33/0x40 [ 1766.782134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.783311] RIP: 0033:0x7fb25f64db19 [ 1766.784146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.788299] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1766.790029] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1766.791654] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1766.793274] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.794891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1766.796504] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:19:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 59) 11:19:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:19:33 executing program 0: fallocate(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b97, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x35d3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0xa3b, &(0x7f00000000c0)={0x0, 0xfd74, 0x0, 0x0, 0x284}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000001c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2247e2, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000240)=0x6, 0x4) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000080)=@hci}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f00000002c0)=@llc={0x1a, 0x301, 0x0, 0x8, 0xf9, 0x1b, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x1}, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) clock_gettime(0x3, &(0x7f0000000140)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}, 0x1c) [ 1766.964712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.989591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.003513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.039684] FAULT_INJECTION: forcing a failure. [ 1767.039684] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.042390] CPU: 0 PID: 16823 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1767.043913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1767.045747] Call Trace: [ 1767.046328] dump_stack+0x107/0x167 [ 1767.047128] should_fail.cold+0x5/0xa [ 1767.047962] ? create_object.isra.0+0x3a/0xa30 [ 1767.048969] should_failslab+0x5/0x20 [ 1767.049803] kmem_cache_alloc+0x5b/0x310 [ 1767.050699] create_object.isra.0+0x3a/0xa30 [ 1767.051653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1767.052768] __kmalloc+0x16e/0x390 [ 1767.053543] ? lock_chain_count+0x20/0x20 [ 1767.054450] fib_create_info+0x769/0x4a30 [ 1767.055361] ? find_held_lock+0x2c/0x110 [ 1767.056259] ? fib_result_prefsrc+0x4a0/0x4a0 [ 1767.057247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.058387] ? __local_bh_enable_ip+0x9d/0x100 [ 1767.059379] fib_table_insert+0x163/0x19a0 [ 1767.060326] ? fib_route_seq_show+0xeb0/0xeb0 [ 1767.061316] ? mark_held_locks+0x9e/0xe0 [ 1767.062215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.063358] ? __local_bh_enable_ip+0x9d/0x100 [ 1767.064355] ? trace_hardirqs_on+0x5b/0x180 [ 1767.065300] ? fib_new_table+0xfb/0x460 [ 1767.066172] fib_magic+0x32d/0x3b0 [ 1767.066949] ? fib_new_table+0x460/0x460 [ 1767.067857] ? lockdep_rtnl_is_held+0x22/0x30 [ 1767.068839] ? ip_mc_up+0x1ac/0x3a0 [ 1767.069634] fib_add_ifaddr+0x4b9/0x580 [ 1767.070509] fib_netdev_event+0x3ac/0x720 [ 1767.071418] raw_notifier_call_chain+0xb3/0x110 [ 1767.072440] call_netdevice_notifiers_info+0xba/0x130 [ 1767.073559] __dev_notify_flags+0x110/0x2c0 [ 1767.074494] ? dev_change_name+0x6b0/0x6b0 [ 1767.075408] ? __dev_change_flags+0x4cf/0x6e0 [ 1767.076380] ? dev_set_allmulti+0x30/0x30 [ 1767.077285] ? dev_ioctl+0x22e/0xd30 [ 1767.078092] ? lock_acquire+0x197/0x470 [ 1767.078947] ? full_name_hash+0xb5/0xf0 [ 1767.079807] dev_change_flags+0x100/0x160 [ 1767.080714] dev_ifsioc+0x5b9/0xa00 [ 1767.081502] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1767.082630] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1767.083767] dev_ioctl+0x23c/0xd30 [ 1767.084542] sock_do_ioctl+0x17d/0x300 [ 1767.085392] ? compat_ifr_data_ioctl+0x180/0x180 [ 1767.086425] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1767.087667] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1767.088789] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1767.089922] ? generic_block_fiemap+0x60/0x60 [ 1767.090886] ? lock_downgrade+0x6d0/0x6d0 [ 1767.091783] sock_ioctl+0x3ef/0x710 [ 1767.092565] ? dlci_ioctl_set+0x30/0x30 [ 1767.093447] ? selinux_file_ioctl+0xb6/0x270 [ 1767.094396] ? dlci_ioctl_set+0x30/0x30 [ 1767.095256] __x64_sys_ioctl+0x19a/0x210 [ 1767.096136] do_syscall_64+0x33/0x40 [ 1767.096944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1767.098033] RIP: 0033:0x7fb25f64db19 [ 1767.098825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1767.102748] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.104370] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1767.105897] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1767.107410] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1767.108940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1767.110457] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:19:33 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x109) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) ftruncate(r3, 0xfffffffffffffffe) pkey_mprotect(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x8, r1) creat(&(0x7f0000000180)='./file1/../file0\x00', 0xd1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) mbind(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x7, 0xdc, 0x5) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000ff0000/0x3000)=nil) pkey_mprotect(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x1000001, r2) fcntl$setstatus(r0, 0x4, 0x400) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) 11:19:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:19:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:19:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, 0x0, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040), &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000400)=0x1) 11:19:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 60) 11:19:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x580}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)={0x77359400}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xf) fcntl$getown(r0, 0x9) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7}, 0x7) fallocate(r0, 0x20, 0x0, 0x8000) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x0) dup2(r2, r1) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x28) [ 1767.270720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:19:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x0) fadvise64(r1, 0x1, 0x80000001, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000000c0)) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c", 0x33}, {&(0x7f0000000080)="e396b7469fb7b6f360c66fd87414f4a29a6a86d6452be0a095bc3d494d3b7d2b0ac6b5", 0x23}, {&(0x7f0000000540)}], 0x4) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@hci}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) dup3(r5, r6, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x4000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) 11:19:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) [ 1767.281017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.308628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.310413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.316605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.320752] FAULT_INJECTION: forcing a failure. [ 1767.320752] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.323256] CPU: 0 PID: 16840 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1767.324549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1767.326133] Call Trace: [ 1767.326640] dump_stack+0x107/0x167 [ 1767.327332] should_fail.cold+0x5/0xa [ 1767.328056] ? create_object.isra.0+0x3a/0xa30 [ 1767.328930] should_failslab+0x5/0x20 [ 1767.329657] kmem_cache_alloc+0x5b/0x310 [ 1767.330435] create_object.isra.0+0x3a/0xa30 [ 1767.331264] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1767.332220] __kmalloc+0x16e/0x390 [ 1767.332896] ? lock_chain_count+0x20/0x20 [ 1767.333688] fib_create_info+0x769/0x4a30 [ 1767.334478] ? find_held_lock+0x2c/0x110 [ 1767.335245] ? fib_result_prefsrc+0x4a0/0x4a0 [ 1767.336084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.337066] ? __local_bh_enable_ip+0x9d/0x100 [ 1767.337932] fib_table_insert+0x163/0x19a0 [ 1767.338732] ? fib_route_seq_show+0xeb0/0xeb0 [ 1767.339572] ? mark_held_locks+0x9e/0xe0 [ 1767.340343] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.341331] ? __local_bh_enable_ip+0x9d/0x100 [ 1767.342187] ? trace_hardirqs_on+0x5b/0x180 [ 1767.342986] ? fib_new_table+0xfb/0x460 [ 1767.343725] fib_magic+0x32d/0x3b0 [ 1767.344389] ? fib_new_table+0x460/0x460 [ 1767.345170] ? lockdep_rtnl_is_held+0x22/0x30 [ 1767.346006] ? ip_mc_up+0x1ac/0x3a0 [ 1767.346680] fib_add_ifaddr+0x4b9/0x580 [ 1767.347435] fib_netdev_event+0x3ac/0x720 [ 1767.348217] raw_notifier_call_chain+0xb3/0x110 [ 1767.349106] call_netdevice_notifiers_info+0xba/0x130 [ 1767.350065] __dev_notify_flags+0x110/0x2c0 [ 1767.350869] ? dev_change_name+0x6b0/0x6b0 [ 1767.351653] ? __dev_change_flags+0x4cf/0x6e0 [ 1767.352483] ? dev_set_allmulti+0x30/0x30 [ 1767.353269] ? dev_ioctl+0x22e/0xd30 [ 1767.353286] ? lock_acquire+0x197/0x470 [ 1767.353300] ? full_name_hash+0xb5/0xf0 [ 1767.353320] dev_change_flags+0x100/0x160 [ 1767.353339] dev_ifsioc+0x5b9/0xa00 [ 1767.353356] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1767.353382] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1767.355752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.356357] dev_ioctl+0x23c/0xd30 [ 1767.356381] sock_do_ioctl+0x17d/0x300 [ 1767.357629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.358106] ? compat_ifr_data_ioctl+0x180/0x180 [ 1767.358128] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1767.358144] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1767.358163] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1767.358180] ? generic_block_fiemap+0x60/0x60 [ 1767.358195] ? lock_downgrade+0x6d0/0x6d0 [ 1767.358215] sock_ioctl+0x3ef/0x710 [ 1767.358232] ? dlci_ioctl_set+0x30/0x30 [ 1767.358253] ? selinux_file_ioctl+0xb6/0x270 [ 1767.358287] ? dlci_ioctl_set+0x30/0x30 [ 1767.372114] __x64_sys_ioctl+0x19a/0x210 [ 1767.372870] do_syscall_64+0x33/0x40 [ 1767.373555] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1767.374419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.374489] RIP: 0033:0x7fb25f64db19 [ 1767.374512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1767.380386] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.381774] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1767.383073] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1767.384387] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1767.385683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1767.386975] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1767.399604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:19:33 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x4) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000010000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e17e2cfa917e79a2a35bb2b6dbca97391"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB=')\x00\x00 ', @ANYRES16, @ANYBLOB="2ad3d7af45d7a3b436", @ANYRES32, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x8054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x470240, 0x0) [ 1767.479613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1767.496500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.497996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.499272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1767.509775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1767.535316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.537008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.538240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:19:48 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f0000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010d00)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546494c45302a001a0000000000001a0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b31", 0xbf, 0xb800}], 0x0, &(0x7f0000012a00)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) openat(r1, &(0x7f0000000080)='./file1\x00', 0x1, 0x1a4) mknodat$null(r0, &(0x7f0000000040)='./file1\x00', 0x8000, 0x103) 11:19:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:19:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040), &(0x7f0000000180)) 11:19:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2c0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0xfffa, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3a75, &(0x7f0000000380)={0x0, 0x8, 0x7, 0x0, 0x1fa}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x7000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r2, 0x80, &(0x7f0000000140)=@llc={0x1a, 0x103, 0x1, 0x94, 0x3, 0x7f, @multicast}, 0x0, 0x0, 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000280)={0x5, 0x7, 0x9}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000001c0)={'veth0_to_hsr\x00', {0x2, 0x0, @dev}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x4, 0x2, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x55}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet(0x2, 0xa, 0x0) dup2(r8, r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r7, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000040)=0x3ff, 0x4) 11:19:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, 0x0, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040), &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000400)=0x1) 11:19:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:19:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 61) 11:19:48 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) [ 1782.038492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.041806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.047024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.047895] loop1: detected capacity change from 0 to 94208 [ 1782.057982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.063385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.069965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.076474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.096895] FAULT_INJECTION: forcing a failure. [ 1782.096895] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.099653] CPU: 0 PID: 16871 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1782.101258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.103146] Call Trace: [ 1782.103752] dump_stack+0x107/0x167 [ 1782.104584] should_fail.cold+0x5/0xa [ 1782.105478] ? create_object.isra.0+0x3a/0xa30 [ 1782.106541] should_failslab+0x5/0x20 [ 1782.107407] kmem_cache_alloc+0x5b/0x310 [ 1782.108334] ? mark_held_locks+0x9e/0xe0 [ 1782.109280] create_object.isra.0+0x3a/0xa30 [ 1782.110283] kmemleak_alloc_percpu+0xa0/0x100 [ 1782.111309] pcpu_alloc+0x4e2/0x1240 [ 1782.112170] fib_nh_init+0xc1/0x4d0 [ 1782.113010] fib_create_info+0x22b3/0x4a30 [ 1782.114005] ? fib_result_prefsrc+0x4a0/0x4a0 [ 1782.115023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.116206] ? __local_bh_enable_ip+0x9d/0x100 [ 1782.117251] fib_table_insert+0x163/0x19a0 [ 1782.118234] ? fib_route_seq_show+0xeb0/0xeb0 [ 1782.119249] ? mark_held_locks+0x9e/0xe0 [ 1782.120178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.121364] ? __local_bh_enable_ip+0x9d/0x100 [ 1782.122398] ? trace_hardirqs_on+0x5b/0x180 [ 1782.123365] ? fib_new_table+0xfb/0x460 [ 1782.124279] fib_magic+0x32d/0x3b0 [ 1782.125102] ? fib_new_table+0x460/0x460 [ 1782.126042] ? lockdep_rtnl_is_held+0x22/0x30 [ 1782.127060] ? ip_mc_up+0x1ac/0x3a0 [ 1782.127885] fib_add_ifaddr+0x4b9/0x580 [ 1782.128803] fib_netdev_event+0x3ac/0x720 [ 1782.129761] raw_notifier_call_chain+0xb3/0x110 [ 1782.130817] call_netdevice_notifiers_info+0xba/0x130 [ 1782.131978] __dev_notify_flags+0x110/0x2c0 [ 1782.132960] ? dev_change_name+0x6b0/0x6b0 [ 1782.133911] ? __dev_change_flags+0x4cf/0x6e0 [ 1782.134933] ? dev_set_allmulti+0x30/0x30 [ 1782.135877] ? dev_ioctl+0x22e/0xd30 [ 1782.136718] ? lock_acquire+0x197/0x470 [ 1782.137634] ? full_name_hash+0xb5/0xf0 [ 1782.138537] dev_change_flags+0x100/0x160 [ 1782.139482] dev_ifsioc+0x5b9/0xa00 [ 1782.140313] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1782.141504] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1782.142704] dev_ioctl+0x23c/0xd30 [ 1782.143512] sock_do_ioctl+0x17d/0x300 [ 1782.144397] ? compat_ifr_data_ioctl+0x180/0x180 [ 1782.145481] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1782.146785] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1782.147954] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1782.149149] ? generic_block_fiemap+0x60/0x60 [ 1782.150165] ? lock_downgrade+0x6d0/0x6d0 [ 1782.151106] sock_ioctl+0x3ef/0x710 [ 1782.151931] ? dlci_ioctl_set+0x30/0x30 [ 1782.152851] ? selinux_file_ioctl+0xb6/0x270 [ 1782.153850] ? dlci_ioctl_set+0x30/0x30 [ 1782.154757] __x64_sys_ioctl+0x19a/0x210 [ 1782.155678] do_syscall_64+0x33/0x40 [ 1782.156528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.157702] RIP: 0033:0x7fb25f64db19 [ 1782.158544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.162752] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1782.164484] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1782.166111] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1782.167728] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1782.169361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1782.170994] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1782.178866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.197891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.201550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:19:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 62) [ 1782.249674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:19:48 executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000001400)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, @private2}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) [ 1782.286498] FAULT_INJECTION: forcing a failure. [ 1782.286498] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.289916] CPU: 1 PID: 16890 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1782.291392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.293160] Call Trace: [ 1782.293731] dump_stack+0x107/0x167 [ 1782.294506] should_fail.cold+0x5/0xa [ 1782.295325] ? fib_table_insert+0x6b9/0x19a0 [ 1782.296259] should_failslab+0x5/0x20 [ 1782.297077] kmem_cache_alloc+0x5b/0x310 [ 1782.297935] ? fib_find_alias+0x1fc/0x270 [ 1782.298819] fib_table_insert+0x6b9/0x19a0 [ 1782.299741] ? fib_route_seq_show+0xeb0/0xeb0 [ 1782.300700] ? mark_held_locks+0x9e/0xe0 [ 1782.301579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.302694] ? __local_bh_enable_ip+0x9d/0x100 [ 1782.303662] ? trace_hardirqs_on+0x5b/0x180 [ 1782.304577] ? fib_new_table+0xfb/0x460 [ 1782.305434] fib_magic+0x32d/0x3b0 [ 1782.306186] ? fib_new_table+0x460/0x460 [ 1782.307070] ? lockdep_rtnl_is_held+0x22/0x30 [ 1782.308021] ? ip_mc_up+0x1ac/0x3a0 [ 1782.308797] fib_add_ifaddr+0x4b9/0x580 [ 1782.309658] fib_netdev_event+0x3ac/0x720 [ 1782.310546] raw_notifier_call_chain+0xb3/0x110 [ 1782.311543] call_netdevice_notifiers_info+0xba/0x130 [ 1782.312647] __dev_notify_flags+0x110/0x2c0 [ 1782.313570] ? dev_change_name+0x6b0/0x6b0 [ 1782.314468] ? __dev_change_flags+0x4cf/0x6e0 [ 1782.315420] ? dev_set_allmulti+0x30/0x30 [ 1782.316313] ? dev_ioctl+0x22e/0xd30 [ 1782.317113] ? lock_acquire+0x197/0x470 [ 1782.317961] ? full_name_hash+0xb5/0xf0 [ 1782.318811] dev_change_flags+0x100/0x160 [ 1782.319698] dev_ifsioc+0x5b9/0xa00 [ 1782.320474] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1782.321606] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1782.322725] dev_ioctl+0x23c/0xd30 [ 1782.323490] sock_do_ioctl+0x17d/0x300 [ 1782.324318] ? compat_ifr_data_ioctl+0x180/0x180 [ 1782.325339] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1782.326559] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1782.327660] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1782.328776] ? generic_block_fiemap+0x60/0x60 [ 1782.329734] ? lock_downgrade+0x6d0/0x6d0 [ 1782.330623] sock_ioctl+0x3ef/0x710 [ 1782.331402] ? dlci_ioctl_set+0x30/0x30 [ 1782.332257] ? selinux_file_ioctl+0xb6/0x270 [ 1782.333207] ? dlci_ioctl_set+0x30/0x30 [ 1782.334058] __x64_sys_ioctl+0x19a/0x210 [ 1782.334928] do_syscall_64+0x33/0x40 [ 1782.335729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.336816] RIP: 0033:0x7fb25f64db19 [ 1782.337618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.341545] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1782.343168] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1782.344684] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1782.346212] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1782.347725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1782.349247] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1787.241124] Bluetooth: hci2: command 0x0409 tx timeout [ 1789.289095] Bluetooth: hci2: command 0x041b tx timeout [ 1791.337125] Bluetooth: hci2: command 0x040f tx timeout [ 1792.222800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.225141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.230718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1792.282648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.284783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.287410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1792.430821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1792.438577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1792.446386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1793.385212] Bluetooth: hci2: command 0x0419 tx timeout [ 1797.545286] Bluetooth: hci3: command 0x0406 tx timeout 11:20:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:16 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x81, 0x7625, {{0x26, 0x4, 0x0, 0x24, 0x98, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4}, @rr={0x7, 0x17, 0x34, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101]}, @timestamp={0x44, 0xc, 0x8a, 0x0, 0x9, [0x9afb, 0x7]}, @noop, @timestamp_prespec={0x44, 0x54, 0xab, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x36}, 0xa8}, {@local, 0xe5f}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@multicast1, 0xffff0655}, {@loopback, 0x8}, {@empty, 0x101}, {@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0x1ff}]}, @timestamp={0x44, 0x8, 0xf3, 0x0, 0x7, [0x0]}]}}}}}) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000080)=@hci}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r0, r5, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2004, @fd_index=0x3, 0x80000001, 0x0, 0x1, 0x4, 0x1, {0x1}}, 0x2c) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@hci}, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x0, 0x2, @thr={0x0, 0x0}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="1c010000290100010000000104000000070000000000000000000100000000000607002e2f66696c65300203000000070000000000000003000000000000000301002e400200000004000000000000000800000000000000da07002e2f66696c6530010300000007000000000000000200000000000000ff070066ee89956b2e2f66696c65300104000000010000000000000082790000000000000607002e2f66696c65308000000000000000000000000004000000000000000207002e2f66696c65302a03000000010000000000000005000100000000000207002e2f66696c65302002000000010000000000000002000100000000001fedff2e2f66696c6530400000000002000000000000007900000000000000c107002e2f66696c65304c91711d428c2c2486176799504b562f027a95ce8815afa0ab02085009d4cf0dcba1c97c8d25bda452da"], 0x11c) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8a000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80045300, &(0x7f0000000040)) 11:20:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:20:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xb8) ftruncate(r0, 0x1000003) faccessat2(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x0, 0x0) getpgrp(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x1278, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="0100001501000000180000002e4b59f5d2e2c16cbac0c472a75c11939dbbc8f98d12cb23f8198e6b7fd832303a0bc2ddcd631a13b1b0103f2db09c3018ef98ed0302e146fe3d8f0b58c1e058f06c087bd10dbad20d9456173104525711fc77a98c47b792994734f73d385d45e40900000000000000f43b4a1277a434da99f98e771094fab7dc79b7ca9dab50ab6d81b0186fb518af929747db551710b8adc535e565d32668fe9912d7cea1dbfaacb000b00bcc10c3667d49eef6b472e10b1e6d267d3c8e850008000000000000b391dc6ee038f557a25714ab18abc4a48b", @ANYRES32, @ANYBLOB="00100000000000002e2f66696c653000545cd5c72791f74d7b0440d6a1d0637503c6d5c52d8e8162a345b15f1fa4093c130100000000000000e84f1ac7a116ac904bca4953387dab7f9308168f0a9c3f9797a1fbc4e394c6c77814b3d5d3dba54984e7daf969c955019a9525dc6e3d4af5cf6cda70f0933e58a906975bca7ec69a354bf9b3dcc4d191883271ad0900000051a8aee5091abba8ee8938430fff24b8a37f1f4074f9fce6fbe3016e3fbb080000000000000000"]) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) syz_io_uring_setup(0x5045, &(0x7f0000000800)={0x0, 0x3ed, 0x8, 0x2, 0x27a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="351f8cfc0d000000000000"], 0xb) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) fdatasync(0xffffffffffffffff) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x44) 11:20:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 63) 11:20:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040), &(0x7f0000000180)) 11:20:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) [ 1810.697225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.709351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.714972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.718522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.718655] FAULT_INJECTION: forcing a failure. [ 1810.718655] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.723003] CPU: 1 PID: 17361 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1810.724078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.725393] Call Trace: [ 1810.725809] dump_stack+0x107/0x167 [ 1810.726394] should_fail.cold+0x5/0xa [ 1810.726993] ? create_object.isra.0+0x3a/0xa30 [ 1810.727712] should_failslab+0x5/0x20 [ 1810.728306] kmem_cache_alloc+0x5b/0x310 [ 1810.728962] create_object.isra.0+0x3a/0xa30 [ 1810.729666] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1810.730462] kmem_cache_alloc+0x159/0x310 [ 1810.731119] ? fib_find_alias+0x1fc/0x270 [ 1810.731774] fib_table_insert+0x6b9/0x19a0 [ 1810.732456] ? fib_route_seq_show+0xeb0/0xeb0 [ 1810.733186] ? mark_held_locks+0x9e/0xe0 [ 1810.733830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.734655] ? __local_bh_enable_ip+0x9d/0x100 [ 1810.735372] ? trace_hardirqs_on+0x5b/0x180 [ 1810.736053] ? fib_new_table+0xfb/0x460 [ 1810.736693] fib_magic+0x32d/0x3b0 [ 1810.737261] ? fib_new_table+0x460/0x460 [ 1810.737916] ? lockdep_rtnl_is_held+0x22/0x30 [ 1810.738622] ? ip_mc_up+0x1ac/0x3a0 [ 1810.739196] fib_add_ifaddr+0x4b9/0x580 [ 1810.739823] fib_netdev_event+0x3ac/0x720 [ 1810.740469] raw_notifier_call_chain+0xb3/0x110 [ 1810.741221] call_netdevice_notifiers_info+0xba/0x130 [ 1810.741861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.742032] __dev_notify_flags+0x110/0x2c0 [ 1810.744724] ? dev_change_name+0x6b0/0x6b0 [ 1810.745412] ? __dev_change_flags+0x4cf/0x6e0 [ 1810.746117] ? dev_set_allmulti+0x30/0x30 [ 1810.746768] ? dev_ioctl+0x22e/0xd30 [ 1810.747348] ? lock_acquire+0x197/0x470 [ 1810.747964] ? full_name_hash+0xb5/0xf0 [ 1810.748581] dev_change_flags+0x100/0x160 [ 1810.749241] dev_ifsioc+0x5b9/0xa00 [ 1810.749516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.749813] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1810.752633] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1810.753482] dev_ioctl+0x23c/0xd30 [ 1810.754051] sock_do_ioctl+0x17d/0x300 [ 1810.754680] ? compat_ifr_data_ioctl+0x180/0x180 [ 1810.755445] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1810.756374] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1810.757215] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1810.758057] ? generic_block_fiemap+0x60/0x60 [ 1810.758781] ? lock_downgrade+0x6d0/0x6d0 [ 1810.759461] sock_ioctl+0x3ef/0x710 [ 1810.760047] ? dlci_ioctl_set+0x30/0x30 [ 1810.760694] ? selinux_file_ioctl+0xb6/0x270 [ 1810.761420] ? dlci_ioctl_set+0x30/0x30 [ 1810.762064] __x64_sys_ioctl+0x19a/0x210 [ 1810.762721] do_syscall_64+0x33/0x40 [ 1810.763331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.764170] RIP: 0033:0x7fb25f64db19 [ 1810.764767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.764926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.767716] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.767732] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1810.767741] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1810.767750] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1810.767758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1810.767767] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1810.782663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.790957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.805975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.808743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 64) 11:20:16 executing program 0: ptrace(0x11, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x11204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') syz_open_dev$hiddev(0x0, 0x0, 0x200200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x1) mprotect(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/121, 0x79}, {&(0x7f0000000200)=""/246, 0xf6}], 0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7a24f1d68a8ffffffffffff86dd60d0ff4700140600fe8000000000000000000000000000aaff030000000000000000000000000001000000004962609caa89f076e86bb45da80da0f3878630d8dd0e998159fc5c0cc835306e22a0a35fe8c17a36902eaa0e05e16bec0d081d664d4198c655cf9b49a715c5590114a70df33d78fb80f2921bab4347e3ebfc072b869d71be91f14cda4bf150e6a674ea8d6f8f25ad", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) io_submit(0x0, 0x1, &(0x7f0000019380)=[0x0]) r2 = fcntl$getown(r1, 0x9) prlimit64(r2, 0x0, &(0x7f0000000100)={0x6, 0x9}, &(0x7f0000000140)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000000c0)=0x20, 0x3ff, 0x1) getpgrp(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001d00210c00000000000000000400020004000f00bb8e6c3d81f91d48878f326a77b5ea7c16fc0582fdd9dc0b24d3"], 0x18}}, 0x0) [ 1810.852687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.884808] FAULT_INJECTION: forcing a failure. [ 1810.884808] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.886696] CPU: 1 PID: 17382 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1810.887737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.888990] Call Trace: [ 1810.889403] dump_stack+0x107/0x167 [ 1810.889958] should_fail.cold+0x5/0xa [ 1810.890535] ? __alloc_skb+0x6d/0x5b0 [ 1810.891108] should_failslab+0x5/0x20 [ 1810.891674] kmem_cache_alloc_node+0x55/0x330 [ 1810.892348] ? create_object.isra.0+0x3ad/0xa30 [ 1810.893056] __alloc_skb+0x6d/0x5b0 [ 1810.893615] rtmsg_fib+0x1b2/0xf40 [ 1810.894154] ? fib_dump_info+0x1e80/0x1e80 [ 1810.894792] ? trace_hardirqs_on+0x5b/0x180 [ 1810.895438] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1810.896172] ? kmem_cache_alloc+0x2a6/0x310 [ 1810.896821] ? fib_find_alias+0x1fc/0x270 [ 1810.897454] fib_table_insert+0xa43/0x19a0 [ 1810.898106] ? fib_route_seq_show+0xeb0/0xeb0 [ 1810.898781] ? mark_held_locks+0x9e/0xe0 [ 1810.899393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.900172] ? __local_bh_enable_ip+0x9d/0x100 [ 1810.900852] ? trace_hardirqs_on+0x5b/0x180 [ 1810.901513] ? fib_new_table+0xfb/0x460 [ 1810.902113] fib_magic+0x32d/0x3b0 [ 1810.902641] ? fib_new_table+0x460/0x460 [ 1810.903264] ? lockdep_rtnl_is_held+0x22/0x30 [ 1810.903932] ? ip_mc_up+0x1ac/0x3a0 [ 1810.904479] fib_add_ifaddr+0x4b9/0x580 [ 1810.905085] fib_netdev_event+0x3ac/0x720 [ 1810.905708] raw_notifier_call_chain+0xb3/0x110 [ 1810.906412] call_netdevice_notifiers_info+0xba/0x130 [ 1810.907181] __dev_notify_flags+0x110/0x2c0 [ 1810.907824] ? dev_change_name+0x6b0/0x6b0 [ 1810.908453] ? __dev_change_flags+0x4cf/0x6e0 [ 1810.909126] ? dev_set_allmulti+0x30/0x30 [ 1810.909734] ? dev_ioctl+0x22e/0xd30 [ 1810.910289] ? lock_acquire+0x197/0x470 [ 1810.910874] ? full_name_hash+0xb5/0xf0 [ 1810.911460] dev_change_flags+0x100/0x160 [ 1810.912076] dev_ifsioc+0x5b9/0xa00 [ 1810.912612] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1810.913394] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1810.914172] dev_ioctl+0x23c/0xd30 [ 1810.914700] sock_do_ioctl+0x17d/0x300 [ 1810.915278] ? compat_ifr_data_ioctl+0x180/0x180 [ 1810.915987] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1810.916834] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1810.917606] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1810.918380] ? generic_block_fiemap+0x60/0x60 [ 1810.919044] ? lock_downgrade+0x6d0/0x6d0 [ 1810.919661] sock_ioctl+0x3ef/0x710 [ 1810.920201] ? dlci_ioctl_set+0x30/0x30 [ 1810.920793] ? selinux_file_ioctl+0xb6/0x270 [ 1810.921452] ? dlci_ioctl_set+0x30/0x30 [ 1810.922043] __x64_sys_ioctl+0x19a/0x210 [ 1810.922650] do_syscall_64+0x33/0x40 [ 1810.923205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.923960] RIP: 0033:0x7fb25f64db19 [ 1810.924508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.927209] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.928317] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1810.929363] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1810.930403] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1810.931446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1810.932487] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:20:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfd9e}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="f27e13ed587a98a10a4b1d12061400000039e7698c71f857751027f21b587efbb55d50df250300"], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r3, r2, 0xffffffffffffffff], 0x7, 0x0, 0x0, {0x0, r4}}, 0x7) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0xa, 0x0) dup2(r7, r6) sendfile(r7, r2, &(0x7f0000000040)=0x4000000000000b, 0x80000001) r8 = getpgrp(0x0) r9 = pidfd_open(r8, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1', "e4fa85079f93c3a457afea5301c4e559d0bb4abe0ab3240355b34746efefdb6ccdb7aa29b84a4354f38f8a259f1bbaa8314a8783b81577c5edcd5fa95cd7afa26e0c7fd6b7b33514cfbbe4fa548b066fd1a61076ffaa3a0ceb5144301f92e42430c28dd64f46041a7bcb0b348be20c657a53bd1d2e706849cac89cfdeba4ba76da7a344820db633bd1d0ddf83a434210ef9566892a54e069cc2dc532deb794e9dfd266c4128b9d74d122d537f2971ec91946ee4198ef37a74080cd4022ca2ad029e642de8ff44317f1ab281cc716328092e12b8b771de1c61e337f6a90e59c1627d580cbd3fd42fe76b112f5efa45380bd5bd9b2042993"}, 0xfb) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r9, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 11:20:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 65) [ 1811.038569] FAULT_INJECTION: forcing a failure. [ 1811.038569] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.040363] CPU: 1 PID: 17392 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1811.041326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1811.042470] Call Trace: [ 1811.042838] dump_stack+0x107/0x167 [ 1811.043345] should_fail.cold+0x5/0xa [ 1811.043880] ? __alloc_skb+0x6d/0x5b0 [ 1811.044407] should_failslab+0x5/0x20 [ 1811.044934] kmem_cache_alloc_node+0x55/0x330 [ 1811.045569] ? create_object.isra.0+0x3ad/0xa30 [ 1811.046220] __alloc_skb+0x6d/0x5b0 [ 1811.046729] rtmsg_fib+0x1b2/0xf40 [ 1811.047226] ? fib_dump_info+0x1e80/0x1e80 [ 1811.047809] ? trace_hardirqs_on+0x5b/0x180 [ 1811.048402] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1811.049094] ? kmem_cache_alloc+0x2a6/0x310 [ 1811.049688] ? fib_find_alias+0x1fc/0x270 [ 1811.050262] fib_table_insert+0xa43/0x19a0 [ 1811.050873] ? fib_route_seq_show+0xeb0/0xeb0 [ 1811.051499] ? mark_held_locks+0x9e/0xe0 [ 1811.052066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1811.052791] ? __local_bh_enable_ip+0x9d/0x100 [ 1811.053432] ? trace_hardirqs_on+0x5b/0x180 [ 1811.054029] ? fib_new_table+0xfb/0x460 [ 1811.054578] fib_magic+0x32d/0x3b0 [ 1811.055067] ? fib_new_table+0x460/0x460 [ 1811.055637] ? lockdep_rtnl_is_held+0x22/0x30 [ 1811.056255] ? ip_mc_up+0x1ac/0x3a0 [ 1811.056755] fib_add_ifaddr+0x4b9/0x580 [ 1811.057321] fib_netdev_event+0x3ac/0x720 [ 1811.057898] raw_notifier_call_chain+0xb3/0x110 [ 1811.058541] call_netdevice_notifiers_info+0xba/0x130 [ 1811.059247] __dev_notify_flags+0x110/0x2c0 [ 1811.059845] ? dev_change_name+0x6b0/0x6b0 [ 1811.060421] ? __dev_change_flags+0x4cf/0x6e0 [ 1811.061045] ? dev_set_allmulti+0x30/0x30 [ 1811.061625] ? dev_ioctl+0x22e/0xd30 [ 1811.062139] ? lock_acquire+0x197/0x470 [ 1811.062690] ? full_name_hash+0xb5/0xf0 [ 1811.063238] dev_change_flags+0x100/0x160 [ 1811.063812] dev_ifsioc+0x5b9/0xa00 [ 1811.064312] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1811.065038] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1811.065768] dev_ioctl+0x23c/0xd30 [ 1811.066264] sock_do_ioctl+0x17d/0x300 [ 1811.066802] ? compat_ifr_data_ioctl+0x180/0x180 [ 1811.067464] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1811.068251] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1811.068955] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1811.069683] ? generic_block_fiemap+0x60/0x60 [ 1811.070291] ? lock_downgrade+0x6d0/0x6d0 [ 1811.070857] sock_ioctl+0x3ef/0x710 [ 1811.071360] ? dlci_ioctl_set+0x30/0x30 [ 1811.071907] ? selinux_file_ioctl+0xb6/0x270 [ 1811.072508] ? dlci_ioctl_set+0x30/0x30 [ 1811.073053] __x64_sys_ioctl+0x19a/0x210 [ 1811.073625] do_syscall_64+0x33/0x40 [ 1811.074132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1811.074833] RIP: 0033:0x7fb25f64db19 [ 1811.075345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1811.077845] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.078886] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1811.079850] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1811.080827] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1811.081805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1811.082768] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:20:17 executing program 0: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x90) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) r2 = fsopen(&(0x7f0000000340)='ecryptfs\x00', 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x0, 0xb2, 0x81, 0x20, 0x9, 0x6, 0x0, 0x8001, 0x1002, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x3ff}, 0x800, 0x49e, 0x3d3, 0x3, 0x6, 0x101, 0x8, 0x0, 0x2, 0x0, 0x4}, r3, 0xc, r0, 0x8) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8990}}, './file0\x00'}) accept4$unix(r5, &(0x7f00000003c0)=@abs, &(0x7f0000000200)=0x6e, 0x80800) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b5700000001019c8068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec46065bf6e5c2fd748b7382cb035aee7d07675"]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) unshare(0x48020200) 11:20:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) [ 1811.117473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1811.123369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 66) [ 1811.182729] FAULT_INJECTION: forcing a failure. [ 1811.182729] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.184336] CPU: 1 PID: 17403 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1811.185212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1811.186250] Call Trace: [ 1811.186584] dump_stack+0x107/0x167 [ 1811.187035] should_fail.cold+0x5/0xa [ 1811.187518] should_failslab+0x5/0x20 [ 1811.188003] __kmalloc_node_track_caller+0x74/0x3b0 [ 1811.188634] ? rtmsg_fib+0x1b2/0xf40 [ 1811.189109] ? create_object.isra.0+0x3ad/0xa30 [ 1811.189703] __alloc_skb+0xb1/0x5b0 [ 1811.190174] rtmsg_fib+0x1b2/0xf40 [ 1811.190621] ? fib_dump_info+0x1e80/0x1e80 [ 1811.191146] ? trace_hardirqs_on+0x5b/0x180 [ 1811.191675] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1811.192288] ? kmem_cache_alloc+0x2a6/0x310 [ 1811.192815] ? fib_find_alias+0x1fc/0x270 [ 1811.193348] fib_table_insert+0xa43/0x19a0 [ 1811.193882] ? fib_route_seq_show+0xeb0/0xeb0 [ 1811.194442] ? mark_held_locks+0x9e/0xe0 [ 1811.194942] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1811.195609] ? __local_bh_enable_ip+0x9d/0x100 [ 1811.196171] ? trace_hardirqs_on+0x5b/0x180 [ 1811.196702] ? fib_new_table+0xfb/0x460 [ 1811.197216] fib_magic+0x32d/0x3b0 [ 1811.197660] ? fib_new_table+0x460/0x460 [ 1811.198180] ? lockdep_rtnl_is_held+0x22/0x30 [ 1811.198748] ? ip_mc_up+0x1ac/0x3a0 [ 1811.199220] fib_add_ifaddr+0x4b9/0x580 [ 1811.199717] fib_netdev_event+0x3ac/0x720 [ 1811.200231] raw_notifier_call_chain+0xb3/0x110 [ 1811.200806] call_netdevice_notifiers_info+0xba/0x130 [ 1811.201460] __dev_notify_flags+0x110/0x2c0 [ 1811.201988] ? dev_change_name+0x6b0/0x6b0 [ 1811.202517] ? __dev_change_flags+0x4cf/0x6e0 [ 1811.203073] ? dev_set_allmulti+0x30/0x30 [ 1811.203584] ? dev_ioctl+0x22e/0xd30 [ 1811.204042] ? lock_acquire+0x197/0x470 [ 1811.204543] ? full_name_hash+0xb5/0xf0 [ 1811.205030] dev_change_flags+0x100/0x160 [ 1811.205567] dev_ifsioc+0x5b9/0xa00 [ 1811.206023] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1811.206663] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1811.207317] dev_ioctl+0x23c/0xd30 [ 1811.207758] sock_do_ioctl+0x17d/0x300 [ 1811.208238] ? compat_ifr_data_ioctl+0x180/0x180 [ 1811.208825] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1811.209541] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1811.210174] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1811.210818] ? generic_block_fiemap+0x60/0x60 [ 1811.211379] ? lock_downgrade+0x6d0/0x6d0 [ 1811.211890] sock_ioctl+0x3ef/0x710 [ 1811.212352] ? dlci_ioctl_set+0x30/0x30 [ 1811.212857] ? selinux_file_ioctl+0xb6/0x270 [ 1811.213408] ? dlci_ioctl_set+0x30/0x30 [ 1811.213898] __x64_sys_ioctl+0x19a/0x210 [ 1811.214405] do_syscall_64+0x33/0x40 [ 1811.214863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1811.215488] RIP: 0033:0x7fb25f64db19 [ 1811.215956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1811.218209] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.219148] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1811.220010] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1811.220883] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1811.221758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1811.222638] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:20:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:29 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_tables_targets\x00') socket$packet(0x11, 0x3, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10086}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 67) 11:20:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040), &(0x7f0000000180)) 11:20:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:20:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x0) dup2(r2, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r1, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x7, 0x6, @buffer={0x0, 0x2b, &(0x7f0000000040)=""/43}, &(0x7f0000000080)="a1d13e095be417", &(0x7f00000000c0)=""/149, 0x400, 0x8014, 0x5b409397, &(0x7f0000000180)}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000380)={{r0}, "ebd3ee30a9771f051f955a9b9013e236195fa435601f5a050f67e8a049fcda1af52b736587bf119f9a9de1d797452a25f856a60b6d143472784f9b3f20458cfc7d4fc86132d4d663b4e86f4a8c008302c8d630223c9bf5d6c0308518650bc4f2d810efce6c0a0c1602dd2f5315bc92db566d83c503b3cb6b04378640544aa59411f4ea021bea38ef8fb73d7676d6ca16b0063ca9d5f3ea058ee2b27df550e92ad7e5e0971cbc80b2094e420e506c4031d81b6d561984dfc7aea5c476bb32191e46ad37d3bac30302165b92d4369a994ae3f30c42b4537a99d4fe9f1565f3a217f1e7b9687ebba1f15ccf5f92f62ea1412c096fff6977ed8b6fed160254cf6a2ab658793bf51735005038c846bbae0d1bdee2c6b742ff7c4e0d19cea48754444eac643b195034fe930ca91edb483127b83e6cea89db26e15cb75b0a8f65776d82fcd80b696b647d89fd9823f01fb8eab6724f08297c78ba4e53101ffaa37989bfa2ede538af3e4ba1c9eff868fe88a846e33133e075b6cc18c1b04baf46a9e52640422ba6c42b7fad16e55314e41af197aac37ececa2673201bd71ccb41684644ce9fc1732d5b0ec5991038bcd187e0e5f62f91885afacb1e28e3f4cc76276e156d1861600b154f4873c4a55a6d5c4e9c114332c32d8fd2ede6e7818ab3b2cfe6cc21b8dfd1ac7964c28eab974b4ec1e53709cc1d26221c1b41340c6f992d9890d1b6deff1f66ff21e9c46db97dc55ee8c95d4e2ffde10189b38679354e999bb0fe7f61f1e24095699972238e960e2f9b09e33a7d26a19037c9f13ec7cdfee07ef868b0b8ffbcc39c8bf1c0463af2c2d56629adfe80cbd90cc006a90a0aa836d6896180b2a09b7edae4adacaf0e86b0a21f462346570a445b09b1904264d8a29e725796bb9f875566b6a387e2f471cfdd7de64d98baf89df8fdb225745970176ee67325b0a3a18928098b21a9cbc46b0f1bffc2fe0f2331cff51e289ec89679b9f6e5fdfe936710cefb58360a890903c583f1de6513d781547ff904faa413f05f91fc464dae657e62a4245ef7617ec880ed08cb8ed3bcb10847750ca1e8357999cb17a1e9daa6d4256984435cdbd95e71ab3f0df884ff2eaec6ae3a29eb96e4a496013109f201e418e4455bb0cfe8e47ea40ac216455cda69673987898139262183c34cb938c792ed06288334f66f3f0c8767681930ec483389a1f41516a41c792ddf65a216b5cb2a44884c64b818c415b85018c2b11dea8cf3b251330353d45c075a5f737a559d5004288dd8738b90e10a5ce072e181e40dc2c132ed5a62f3ccb6884fb9fd38819b9021a3452c43278abeee9da1295df0dc382886c52254840efd0037713c5ac5fbbfee86262771dc5cea2ac573b55f80d17e46077db36e304308ae97a29193859739d20de91596aa9b230fca117321869a39c1ef9f5fa8c3971fae7cf9e9e2814a187f31dd28c91a6fc85ca0fbe3a6c5fd085e51ba844aefcc8a0d9f190ed348a1726b08a8863933f5e8c8c45e98c5efca0065cf0f629fcfb0a05cea93c2bfc19cf813d1d3d8431e5d2a50e073db55e2d32112971d628fff11c26667887f2f0d32f7f75b71db748de6d67c0e6284173f7fb1bebd9bfd54c9c2951a42fa03478684fe1740e84233efdd4042d886140b8c664143f05bd65309894abb15df2fa51d6ffe83076ce01c3759f56387d084d74442a13a2baeed6319b1eb3fa13e3da737d58ae4d8944bd3f7a35420478f7b80b5ceac4f31ebfeca0f4eb481e565fa0ac536750629fcee824bad2a5647529b2f8b824a5f4766592c05900e48c06eb2fd498f255b6aba63cbb7de97e2ad8b1c1bb17769411dfa73a1821054c65b3363f375c1563f68dac4870f72bd6973b2f08f27c79a7765adbb7699c4f22e1673c4162793ef5e5c308d2a1fbcb96bebbd4f74c7081204b4b90851dce975cc39ba1ab07a4c58656e73f6c101ab50d05eeb87aeded3e032214607bf1823e708850164683023c40c6e8d84e2d26dcd57308757ddb0eebe86a0c221685472a08dfb114da6f8928fc578e7ca166091f1b2d445cc78d8a711f3981d11fc9665395a069d86500189cbee9ee4c6b179d2010401525b27332b87dc18dce71f2ffffeb493c2e419d1baf73a28a4768fab1aab95f4c6e7de1787f7a8f4845fe24e02367a0f448a1dcb1ca3eda473a981b7c47fabe9e9cca3da82b8ab208d0fe8d9b4dfcf54e9e5e2167165ef67446b50fe6c3a1a391193e3c5f4085ebd1b48f4cb1821550c05467627619aa8607a436512bcd3bc3f8a944bb06055defebcd950c23f6b3665d49fd0bedf8743e1dc8222c0a54615c81c61dfae83aaa91ff2bee68d8cb8f0e96cbfcf4f503ee8daa7803bb500ecac671dc653333088941cd02c549273cab7ebf346187aa9018f59780640c67fc38100d766307a1aa527e2da76c92722f7593a5475d9aad09e6c6474919ee26ce147bd8bb5c5cfb347898a9c388f740eec44ff0599e2ab3242c8c45a0fd6fd7041d63aa7ce718012fde795fef88019f5d5c174236b044d160afe14d4a0963b4465bd4a931ccf606c56cf9b91d7c232a20320ea269103786467903f6b60068b2ed4275ed06a9ab1c3c196da660e7a9fb2ee2080331b58193afa325aac9e93a1f56e68a7a734d1f871c0e10ebaa749f62004942bf288dedbd5bcbf996287902f592118c182f051482720a53d557d0433156ba2492b0fd6a004c31383e47acd584bf52ca3dafce797e9c8a496961d19ffa72f021f2c34eee7228fe4c5a9fb4c114cdeb5753a670e218cadb64961c9e3293c4bfc3c1b88e17cd280149ad99b787578f35545c20353ad8a03bfb36c33aac1ca75664922f3e5e894c0b6160f7e0afc41651dcc56e24ad169b8e28be6c364499efd3de7884ec7040fd875ce601458110ba8aa06419b44ac5f09a31c26d037fc759f6c5bd0e31e582b5bf5b36243519434a70473454ec52f00417f6c278b900589e268e943e93c55a8fee93b51f6ba954b48e2e6671133e010e2eeb6b98eed96d8707dad31c5ffee9c5e6555b83b5e0d76ccee7df79562609381dc4da84a61440e287602a66407c2ad1788e9a9a67c716e30a4b3dc0ed5caa962812fcbd846e579a00131e95023483291281fd9fb2fd5d3646f8db477e44e3c018da19efabd8c7c824489150b25eda9d08f92cb848a88705214189dfb3664277ba00759c029042d69dcc2059152a4eb73de6634a7e8abae77dc840f7527167028dc864363117dc6f95010136f5cf3d3f9115b92268ae40c1ffe144eb8c9e1a936bb50452a3c7b0965e3ff7c1a46154acc6e17adc4b3a4ddbd5df81095b3d1a0b4e592ebf1b75f8178a6090d28faf771c905da7cfd880047601d0fb7b4694e528f94e733d210b06b0cbc06526c5f4aeb0ff7c25750ca31fb96ba10ca01256c446bfaf72d7b6e011097b6150ffb0ec7c723c147adafd58f193587466d4115ca8344f1eff824452f608eb0d7cf35270fc5dbbd2dcd5f7a3c54e247a965bb49940914a0e3c622f250da678f61159252ba0bfc9aef292e2a17ad9444c67a66534d0e4e0ee410d0b8a0f3129b3f28749c3b283aff8481271874fa590cb6bfec293c6d900974844ea78fdab19608b8fd5c49a555ed858290745e5c7c6f8b772190e9a089427324754fc630085c1a9d2f359b62bdd195ebbd9fb56e5faaa502d0c7d0180a80db4b58867e1944067febf57d479156caf511f6eef9c59e45fcec57f963af5454eb9de14727fe8448a65e7eb97927c85df4fc8be41b581613fea19618bf538f2c1d938e4c3fd168f18bf4e85950c73a1e5c3a7e0fa2a8150afc63d42a0f084790e8d33eb45f72811fca2fa997bdc96c8043e5b2b99077427518e8021638f2b49177bcbaf552acd190796f65a9e5f36f6a581e2430681dc8e586f778f3e63be74943398a7338402497eb2a812901659638b78b8c4226d097c6784dfd3e459ea969cb5cc80d9215fb8af507e2355bce96afe370b3247af3493e4b809d4c984b32f68c80401cf0e1a00684979d0e39b9301b0df8affdc0184421f915d3945c1702c42a5514c2cd1e4a22af375575b344f771b482330334f5f6c815f5120bee6f6ddd0e582274b5f316af586c494bcc5cc1afe71127c55447fd99965f276062b0e218a31f3906ed813c168f18e7ac638bc2a7d9e247322afc2e600120a7b9fa05adcc0a4ef2de911b4e1f17255dcb9bd80e210ce65b3efcc09091d67f99f8ea4d5d54b315f563259c3449c784484c0248ea77e8c786ecf1e867e15a7a94d2ee50ee6697d38c2640ffd3ddf482063fbb0afc2ff7f30f198d6ec76a042d3f4cac46578530dbd0bba3b5816e95ad750d03205bd7372bd60461755da5f0b150773e6f6e7975066204fee183ab54ddd3575795e62120bbaa57ca85256680eaebeb1c87c8142cdeb04ff0d3b4844a6eb10fbc96178646516d89bc272a01e19c6191e2444e6bf5032ac3dde58cff8113515cb1445df35f9ecc81d13162a22679fc32ec559e35d45c61edf55ca31737c694c3c22081770460beee754c2ce2195fe0b8c56d0c9df23268c54b6e02ae4cf79eee4b50cfa2dd003ceca430604b0b6f1ec17bf02df9bfed2d823d810836ef5538121fb2aa51503ff911bb3bb032ea5e9d07a09174070a7614c6bd5ad9f2d642d4e599286f4aa016e32fce550ad041c8ac1548029ae50235a86f8c0e8d919aadc4fd1519c69a6be3956132e52a9a5798c4aeffb8b1d393f12128b13205d614565a356baed9c7979a36cb21c7c70aa2ccd1ba933fdf295baa2ee398ee1c10910114ed50b3c07fa0b821d72088992cd247acf6ad6600e2e20f5e009fb7b22009c3d1bd5f78f332dba927a4b72724d77f1e5feaa7e33ae9749fbabd627237e739c48836ec1c71ac2d835921063a7e9d2c0a5af1dbc5e5accc19228c0cbf6edb1a6ed494fdbcdfc12026359dba413718a35f038c5db92edefb0074f2dfbadfb9b754bbeb1e3d9f140be6b381c93a1b9f9517b69ac301cb4d708946e793f8523f4ad20b009363394eea52a83ec3ecbbda127dfccfeb47f5799893f5754a1d7422f59e9448ed5624a7cb5e74a42f1ca0641033a5ae4a726d7ab06046bafe662ff21e9fe4c6f7e92f9a9b1ade131118146051a92848865914719a24c076cbf5a4bb8ca80b8cc4906ed61d6ac4bb515f58213dd14dc033a738f05b7074c48ca2f72eda4754b016093e370db913c076fc5da2d1593b102ccdf169383ead26863bd278b45375b7808d055ba41ff7844387d9b7d225afa5bdb4319d8bddd34af4babec80bdd191787f24b2cfe3aa3deb337c14f787bffb7d84c27d4c44aea13824640b82bf4bbb4d0bbad8d7cc8824623425d0633b487a741bc7273706dd4a9de6d5152652ada79bb4579d0ae2f78bb33bfda6b9f2b8bd06e9f002b805218f4adc69a08d1b16c4720bbead379d57f99a5ab68809214600f381b4fe395f9e0b125375290ba4946c561f5c4bebaaa7202f6ae991a50bba685586cf13a10afe19c6dea0aeaa2258fc271f5a3b4887e538fccd6c5e68338be538f5e75700cc5da50cadff1f2cf01ce63dafa42a3d4f0d2a7aab73c4ec69ef65468c8dcd2292fe2c5f27bd271f92c8fa6be069589046e09ceed4d457544860d09f65fb76005d3028f7260986ab9e612ff597d34d156adb4f4d38ee79010b8d3c77d88d42e3b5d3b42966558ca1349385f2fcb7e037eebefa13aa61ec0d78bdf63970ba4212d3685e4b85a2a96cabcea74c4b3699ff6ca8edbe35d0a7d5dbf1bb53ea0"}) 11:20:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x803, 0xff) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000280)="a683ae7d0000e30000000000000000000000000200000000", 0x18}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local}}}], 0x20}, 0x0) [ 1823.790440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.792480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.796960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.799338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.809582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.817022] FAULT_INJECTION: forcing a failure. [ 1823.817022] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.820432] CPU: 0 PID: 17417 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1823.822393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.824734] Call Trace: [ 1823.825503] dump_stack+0x107/0x167 [ 1823.826531] should_fail.cold+0x5/0xa [ 1823.827607] ? create_object.isra.0+0x3a/0xa30 [ 1823.828890] should_failslab+0x5/0x20 [ 1823.829978] kmem_cache_alloc+0x5b/0x310 [ 1823.831126] create_object.isra.0+0x3a/0xa30 [ 1823.832358] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.833816] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1823.835247] ? rtmsg_fib+0x1b2/0xf40 [ 1823.836295] ? create_object.isra.0+0x3ad/0xa30 [ 1823.837634] __alloc_skb+0xb1/0x5b0 [ 1823.838657] rtmsg_fib+0x1b2/0xf40 [ 1823.839665] ? fib_dump_info+0x1e80/0x1e80 [ 1823.840844] ? trace_hardirqs_on+0x5b/0x180 [ 1823.842060] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1823.843423] ? kmem_cache_alloc+0x2a6/0x310 [ 1823.844617] ? fib_find_alias+0x1fc/0x270 [ 1823.845788] fib_table_insert+0xa43/0x19a0 [ 1823.846997] ? fib_route_seq_show+0xeb0/0xeb0 [ 1823.848239] ? mark_held_locks+0x9e/0xe0 [ 1823.849390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.850842] ? __local_bh_enable_ip+0x9d/0x100 [ 1823.852108] ? trace_hardirqs_on+0x5b/0x180 [ 1823.853322] ? fib_new_table+0xfb/0x460 [ 1823.854437] fib_magic+0x32d/0x3b0 [ 1823.855433] ? fib_new_table+0x460/0x460 [ 1823.856587] ? lockdep_rtnl_is_held+0x22/0x30 [ 1823.857857] ? ip_mc_up+0x1ac/0x3a0 [ 1823.858877] fib_add_ifaddr+0x4b9/0x580 [ 1823.860001] fib_netdev_event+0x3ac/0x720 [ 1823.861148] raw_notifier_call_chain+0xb3/0x110 [ 1823.862455] call_netdevice_notifiers_info+0xba/0x130 [ 1823.863873] __dev_notify_flags+0x110/0x2c0 [ 1823.865051] ? dev_change_name+0x6b0/0x6b0 [ 1823.866229] ? __dev_change_flags+0x4cf/0x6e0 [ 1823.867460] ? dev_set_allmulti+0x30/0x30 [ 1823.868607] ? dev_ioctl+0x22e/0xd30 [ 1823.869643] ? lock_acquire+0x197/0x470 [ 1823.870740] ? full_name_hash+0xb5/0xf0 [ 1823.871836] dev_change_flags+0x100/0x160 [ 1823.872980] dev_ifsioc+0x5b9/0xa00 [ 1823.874194] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1823.875622] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1823.877056] dev_ioctl+0x23c/0xd30 [ 1823.878026] sock_do_ioctl+0x17d/0x300 [ 1823.878904] ? compat_ifr_data_ioctl+0x180/0x180 [ 1823.879971] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1823.881273] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1823.882428] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1823.883602] ? generic_block_fiemap+0x60/0x60 [ 1823.884613] ? lock_downgrade+0x6d0/0x6d0 [ 1823.885556] sock_ioctl+0x3ef/0x710 [ 1823.886380] ? dlci_ioctl_set+0x30/0x30 [ 1823.887278] ? selinux_file_ioctl+0xb6/0x270 [ 1823.887773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.888268] ? dlci_ioctl_set+0x30/0x30 [ 1823.888297] __x64_sys_ioctl+0x19a/0x210 [ 1823.891282] do_syscall_64+0x33/0x40 [ 1823.891423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.892119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.892133] RIP: 0033:0x7fb25f64db19 [ 1823.892155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.892175] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1823.901159] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1823.901170] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1823.901181] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.901201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.901212] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1823.919505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.930029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:30 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x0) dup2(r2, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r1, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) 11:20:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x400240, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r2, 0x8800000) r3 = accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000140)=0x2) preadv(r2, &(0x7f0000000400), 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000340)='\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x22) ftruncate(r4, 0x8800000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0000001003002e2f66696c503000c04326c01c3f9797913fe1ceec1e66493e024c1e99ce53f8030535191412c2c9f6e969b949231b7cdb48ae157767e06c099db71a71f1a2d5b9d6435a202f73dbb8114249789a14c1219a75884e9d879fa310218072734e6ee4e5eb9e92b6acbf6a0c3bcc44807389a7ef7055f81207a5f47d1f550777e9b79e550146dd46b03fd5fdd7d4fc2139ae7bd4135161bd664aa2a2476955eaa71c998f181eb368e252ff"]) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000500)={'filter\x00', 0xb7, "814182427226181620594f69c9909c272db06dad2baecd0b19d42394f71b4494d048d1ad85eba85147bea5d866395e16106283ef4019b26e40decb61605adf5295ddccbb051d5476c4ae026ab1810d1d5e6c3ad8cc25ff4b68fb40469c1722d5c237aa2ca6913156a4c36abd5af94f364a349cc1f6c6f4610b56d6b705dbd083a8aa4b9c6421e0ae75140ba716e733272e2dcf5eb4c13cf9b87e35351766348f05682822afd80cf1d5a8430c015f828e1818f1f162e9b0"}, &(0x7f0000000600)=0xdb) 11:20:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 68) [ 1824.043540] FAULT_INJECTION: forcing a failure. [ 1824.043540] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.045295] CPU: 1 PID: 17446 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1824.046205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1824.047257] Call Trace: [ 1824.047604] dump_stack+0x107/0x167 [ 1824.048072] should_fail.cold+0x5/0xa [ 1824.048549] ? memset+0x20/0x50 [ 1824.048970] should_failslab+0x5/0x20 [ 1824.049469] __kmalloc_node_track_caller+0x74/0x3b0 [ 1824.050098] ? netlink_trim+0x1ee/0x250 [ 1824.050602] ? memcpy+0x39/0x60 [ 1824.051116] pskb_expand_head+0x15a/0x1040 [ 1824.051705] ? fib_nexthop_info+0x32c/0xa60 [ 1824.052367] netlink_trim+0x1ee/0x250 [ 1824.052887] netlink_broadcast_filtered+0x62/0xf50 [ 1824.053671] ? fib_create_info+0x4a30/0x4a30 [ 1824.054346] ? rtmsg_fib+0x1b2/0xf40 [ 1824.054912] nlmsg_notify+0x94/0x290 [ 1824.055476] ? rtnl_notify+0xa9/0xf0 [ 1824.056038] rtmsg_fib+0x399/0xf40 [ 1824.056592] ? fib_dump_info+0x1e80/0x1e80 [ 1824.057237] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1824.057974] ? kmem_cache_alloc+0x2a6/0x310 [ 1824.058615] ? fib_find_alias+0x1fc/0x270 [ 1824.059242] fib_table_insert+0xa43/0x19a0 [ 1824.059903] ? fib_route_seq_show+0xeb0/0xeb0 [ 1824.060583] ? mark_held_locks+0x9e/0xe0 [ 1824.061209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1824.061864] ? __local_bh_enable_ip+0x9d/0x100 [ 1824.062548] ? trace_hardirqs_on+0x5b/0x180 [ 1824.063148] ? fib_new_table+0xfb/0x460 [ 1824.063745] fib_magic+0x32d/0x3b0 [ 1824.064231] ? fib_new_table+0x460/0x460 [ 1824.064860] ? lockdep_rtnl_is_held+0x22/0x30 [ 1824.065551] ? ip_mc_up+0x1ac/0x3a0 [ 1824.066107] fib_add_ifaddr+0x4b9/0x580 [ 1824.066714] fib_netdev_event+0x3ac/0x720 [ 1824.067336] raw_notifier_call_chain+0xb3/0x110 [ 1824.068045] call_netdevice_notifiers_info+0xba/0x130 [ 1824.068825] __dev_notify_flags+0x110/0x2c0 [ 1824.069484] ? dev_change_name+0x6b0/0x6b0 [ 1824.070128] ? __dev_change_flags+0x4cf/0x6e0 [ 1824.070807] ? dev_set_allmulti+0x30/0x30 [ 1824.071425] ? dev_ioctl+0x22e/0xd30 [ 1824.071987] ? lock_acquire+0x197/0x470 [ 1824.072584] ? full_name_hash+0xb5/0xf0 [ 1824.073176] dev_change_flags+0x100/0x160 [ 1824.073816] dev_ifsioc+0x5b9/0xa00 [ 1824.074359] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1824.075138] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1824.075927] dev_ioctl+0x23c/0xd30 [ 1824.076467] sock_do_ioctl+0x17d/0x300 [ 1824.077047] ? compat_ifr_data_ioctl+0x180/0x180 [ 1824.077765] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1824.078621] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1824.079394] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1824.080183] ? generic_block_fiemap+0x60/0x60 [ 1824.080847] ? lock_downgrade+0x6d0/0x6d0 [ 1824.081474] sock_ioctl+0x3ef/0x710 [ 1824.082019] ? dlci_ioctl_set+0x30/0x30 [ 1824.082622] ? selinux_file_ioctl+0xb6/0x270 [ 1824.083281] ? dlci_ioctl_set+0x30/0x30 [ 1824.083880] __x64_sys_ioctl+0x19a/0x210 [ 1824.084493] do_syscall_64+0x33/0x40 [ 1824.085046] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1824.085812] RIP: 0033:0x7fb25f64db19 [ 1824.086375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1824.089099] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1824.090246] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1824.091301] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1824.092362] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1824.093427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1824.094488] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:20:30 executing program 0: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1000, 0x400, &(0x7f0000000980)) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xdd) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000840)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid}, {@posixacl}, {@access_any}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r0}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000240), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001c80)={0x20, 0x12, 0x1, 0x0, 0x0, {}, [@generic="8cbb4f357ef3cdd1d4"]}, 0x20}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) openat(r1, &(0x7f0000000200)='./file1\x00', 0x642140, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00001d1d0021f540855cf5e5a820970000000000"], 0x1c}}, 0x0) 11:20:30 executing program 6: syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) timer_delete(0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000100)) timer_gettime(r0, &(0x7f00000002c0)) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0xaa5, 0x9, 0x9, 0xfffffffd, 0x11b2}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private0, r1}, 0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/machinecheck', 0x6281, 0x19) timer_delete(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clone3(&(0x7f0000000880)={0x100, &(0x7f0000000640), &(0x7f0000000440), &(0x7f0000000600), {0x80041}, &(0x7f0000001e00)=""/102400, 0x19000, &(0x7f0000000980)=""/231, &(0x7f0000000840)}, 0x58) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f00000001c0)={0xc8182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1824.129577] SELinux: duplicate or incompatible mount options 11:20:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 69) 11:20:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:20:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) [ 1824.192009] FAULT_INJECTION: forcing a failure. [ 1824.192009] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.193726] CPU: 1 PID: 17453 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1824.194705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1824.195881] Call Trace: [ 1824.196251] dump_stack+0x107/0x167 [ 1824.196764] should_fail.cold+0x5/0xa [ 1824.197314] ? create_object.isra.0+0x3a/0xa30 [ 1824.197961] should_failslab+0x5/0x20 [ 1824.198496] kmem_cache_alloc+0x5b/0x310 [ 1824.199074] create_object.isra.0+0x3a/0xa30 [ 1824.199692] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1824.200409] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1824.201117] ? netlink_trim+0x1ee/0x250 [ 1824.201685] ? memcpy+0x39/0x60 [ 1824.202158] pskb_expand_head+0x15a/0x1040 [ 1824.202749] ? fib_nexthop_info+0x32c/0xa60 [ 1824.203366] netlink_trim+0x1ee/0x250 [ 1824.203905] netlink_broadcast_filtered+0x62/0xf50 [ 1824.204601] ? fib_create_info+0x4a30/0x4a30 [ 1824.205215] ? rtmsg_fib+0x1b2/0xf40 [ 1824.205740] nlmsg_notify+0x94/0x290 [ 1824.206258] ? rtnl_notify+0xa9/0xf0 [ 1824.206784] rtmsg_fib+0x399/0xf40 [ 1824.207292] ? fib_dump_info+0x1e80/0x1e80 [ 1824.207885] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1824.208571] ? kmem_cache_alloc+0x2a6/0x310 [ 1824.209173] ? fib_find_alias+0x1fc/0x270 [ 1824.209767] fib_table_insert+0xa43/0x19a0 [ 1824.210373] ? fib_route_seq_show+0xeb0/0xeb0 [ 1824.211009] ? mark_held_locks+0x9e/0xe0 [ 1824.211587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1824.212323] ? __local_bh_enable_ip+0x9d/0x100 [ 1824.212964] ? trace_hardirqs_on+0x5b/0x180 [ 1824.213575] ? fib_new_table+0xfb/0x460 [ 1824.214137] fib_magic+0x32d/0x3b0 [ 1824.214469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1824.214635] ? fib_new_table+0x460/0x460 [ 1824.214663] ? lockdep_rtnl_is_held+0x22/0x30 [ 1824.214686] ? ip_mc_up+0x1ac/0x3a0 [ 1824.218388] fib_add_ifaddr+0x4b9/0x580 [ 1824.218949] fib_netdev_event+0x3ac/0x720 [ 1824.219527] raw_notifier_call_chain+0xb3/0x110 [ 1824.220180] call_netdevice_notifiers_info+0xba/0x130 [ 1824.220912] __dev_notify_flags+0x110/0x2c0 [ 1824.221524] ? dev_change_name+0x6b0/0x6b0 [ 1824.222117] ? __dev_change_flags+0x4cf/0x6e0 [ 1824.222749] ? dev_set_allmulti+0x30/0x30 [ 1824.222855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1824.223332] ? dev_ioctl+0x22e/0xd30 [ 1824.223344] ? lock_acquire+0x197/0x470 [ 1824.223355] ? full_name_hash+0xb5/0xf0 [ 1824.223368] dev_change_flags+0x100/0x160 [ 1824.223381] dev_ifsioc+0x5b9/0xa00 [ 1824.223403] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1824.228837] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1824.229588] dev_ioctl+0x23c/0xd30 [ 1824.230091] sock_do_ioctl+0x17d/0x300 [ 1824.230636] ? compat_ifr_data_ioctl+0x180/0x180 [ 1824.231302] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1824.232108] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1824.232827] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1824.233500] ? generic_block_fiemap+0x60/0x60 [ 1824.234016] ? lock_downgrade+0x6d0/0x6d0 [ 1824.234471] sock_ioctl+0x3ef/0x710 [ 1824.234893] ? dlci_ioctl_set+0x30/0x30 [ 1824.235346] ? selinux_file_ioctl+0xb6/0x270 [ 1824.235857] ? dlci_ioctl_set+0x30/0x30 [ 1824.236310] __x64_sys_ioctl+0x19a/0x210 [ 1824.236788] do_syscall_64+0x33/0x40 [ 1824.237236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1824.237838] RIP: 0033:0x7fb25f64db19 [ 1824.238256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1824.240394] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1824.241297] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1824.242075] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1824.242848] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1824.243615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1824.244392] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1824.248868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1824.253405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.617757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r0, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind(r3, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @private=0xa010101}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0x2, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/,\x00'}]}]}]}]}, 0x34}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe2(&(0x7f00000001c0), 0x80800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/sky2', 0x100, 0x42) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x800081, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',version=9p2000.L,debug=0x0000000000008000,access=user,nodevmap,nodevmap,subj_user=syz_tun\x00,func=POLICY_CHECK,fowner>', @ANYRESDEC=r7, @ANYBLOB="8f7296cc8b63ecac12a8ef5cd5e3836c2c004bb59bbf65506d85b61b17b7868705205cac349cabac6f9b316f71afe124722830dffd8efa32b6add2585e2e34a98584aa462e70c2320801b9d51498f657d93c8eddd990f839b817ffb51ff45c1e83b57d2b572491ced368a552744b77ae9dff791a56be59a4ba60b0020c7a804d2f55a3aa05a2fcd555b9a0697d91e212a8419fd2bcf859f9eca6f62b"]) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r9 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) io_uring_enter(r9, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000180)=0x4) 11:20:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:20:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 70) 11:20:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) 11:20:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = dup2(r1, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000840)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYRESOCT]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/tcp6\x00') r5 = eventfd2(0x4, 0x800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0xa, 0x0) dup2(r7, r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r6, 0x0) r8 = syz_io_uring_setup(0x3862, &(0x7f0000000880), &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) io_uring_enter(r8, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet(0x2, 0xa, 0x0) dup2(r10, r9) r11 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x40400, 0x120) io_submit(r0, 0x8, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xfffb, 0xffffffffffffffff, &(0x7f0000000000)="52fe5f02fd19fb1370f95428e91cb4e7fa2a9d625e972e71c5668d3efca39e8c9044df0055ff875173ebc249c9aff0b016719c84ba46a76a4fe99fb8be3ab33f028dae4095b2c2792c0d1a33a41861f7171febf13a40", 0x56, 0x9, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f00000000c0)="b51a07d85f16c8f364bd301150059ba46a0547fa31b237d5fac36d9d474c156c2dc0e332dbb9328043efa6d32b66b2e3a13a3ca9bba626f7fa1464f2f001cc19d65dc95a578a7e35fb715f926a24dde6a2966aec5dfca24fe3574b168f680c8c9c927ceeb76364b7128b31146f2c924051da84657f125c7ff6b2036ecab4a9f96696e59890be79b75048741b5112a64c2fec87d658e18e2338b514db978344a868b7744fdaf153b991b9ca67a6bf999d378869dbfb346dcf9426741d1764faaff23873", 0xc3, 0x1, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000000240)="d72c729a3c7be22a80301e6eec3e93729da7901a50156c65df26fb56c61d7482d5c4d19d8c0bdd10f5c62291ba7eb65ed1d64d3963a129088e8dc317d28fd613e36e1205cb5ac02805021c844798f6d51bdce0d3bcbf5eefebac3518598d4994d1fd17ba0ef6d38913552c0fdf7ce3c70ceaed9aac", 0x75, 0xac, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000300), 0x0, 0x9, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2, r3, &(0x7f0000000380)="13edb5b6a3cf4e50becb0a011acc1d587ea6811f7c28e93dfc446591ac13b9aeae6b798f", 0x24, 0xfffffffffffffffd, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f0000000440)="3aa584d84eaf75ab9bf52308a424c8ff571cda99a141efc42f0c1ad0cec29cf86e18e1062419f5a8f23d34510b5b66f47de7fabaf8c1376f1bfd6c5259eef305883b450b7b1cb5f357a9b4cc1c43eff8716aaaf97cef1215c0d7998df53381acac3bef277fb70f99678cabc788aa236bda043af5339b7d745859bfdf7de08738e90c45f4ec43ec57eef8dcb622", 0x8d, 0x76, 0x0, 0x0, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x1393, r8, &(0x7f0000000540)="26560e4a25b88ff1053950e7afbf020ff15e53de2aadb878f2c765046f7e431758ece5bc8fac691eff4eaf2fea02ef72e3896b6e6d5b78f1dea6782c3a4b3573e64c31afb8d6f603556e8bd38a7d117b2d059e45063a13734ae11b0980d6399a838ff4dafb2d874e18b5022aeaaf18b63c963a00c60757d14d03ec0c818d48149abfd210df77dbdea209b43eefec22a08ecd932442c2a41da7c65083f68c", 0x9e, 0x3, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x5, r10, &(0x7f0000000740)="53898af4bae38efc6016b1de26fe9566fb39f5a0872371f84958b8c0e7a42e6f2966ed2ce878f23f7b1f37690559419d6c0f6d9b80b1f3247bdd450907d2dfa8c1f4d2603689ce85645ec511104e538fb04e0a65898231ebb0f04d029a2bdbb330b4911a226594fc4194e2dabbf4e5470b88ce615785e49a1e066700832976cfe8540397af0fc769c38da1e43f0e0e3900069e0eaa5eff94302d9407d7dc0a2c85b9c53c5978aa58666f92aacf957a0aeefab62b67b026f310747f802ed731c29ffb77ab36632d40611051495218d12341dd8af649409a31f45f0500efb882cd0d833b37effd964234b0a6cfc91c30", 0xef, 0x8, 0x0, 0x1, r11}]) 11:20:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:43 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0xa, 0x0) dup2(r4, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r3, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000e0}, 0x84) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) sendfile(r1, r5, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) [ 1837.623835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.625167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.629002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.637500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.664840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.673459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.707849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.722879] FAULT_INJECTION: forcing a failure. [ 1837.722879] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.726386] CPU: 1 PID: 17481 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1837.728044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1837.730136] Call Trace: [ 1837.730812] dump_stack+0x107/0x167 [ 1837.731582] should_fail.cold+0x5/0xa [ 1837.732473] ? ___slab_alloc+0x360/0x700 [ 1837.733461] ? create_object.isra.0+0x3a/0xa30 [ 1837.734423] should_failslab+0x5/0x20 [ 1837.735217] kmem_cache_alloc+0x5b/0x310 [ 1837.736079] create_object.isra.0+0x3a/0xa30 [ 1837.737000] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1837.738082] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1837.739146] ? netlink_trim+0x1ee/0x250 [ 1837.740011] pskb_expand_head+0x15a/0x1040 [ 1837.740892] ? fib_nexthop_info+0x32c/0xa60 [ 1837.741818] netlink_trim+0x1ee/0x250 [ 1837.742618] netlink_broadcast_filtered+0x62/0xf50 [ 1837.743727] ? fib_create_info+0x4a30/0x4a30 [ 1837.744740] ? rtmsg_fib+0x1b2/0xf40 [ 1837.745688] ? create_object.isra.0+0x3ad/0xa30 [ 1837.746908] nlmsg_notify+0x94/0x290 [ 1837.747767] ? rtnl_notify+0xa9/0xf0 [ 1837.748544] rtmsg_fib+0x399/0xf40 [ 1837.749303] ? fib_dump_info+0x1e80/0x1e80 [ 1837.750204] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1837.751236] ? kmem_cache_alloc+0x2a6/0x310 [ 1837.752175] ? fib_find_alias+0x1fc/0x270 [ 1837.753109] fib_table_insert+0xa43/0x19a0 [ 1837.754044] ? fib_route_seq_show+0xeb0/0xeb0 [ 1837.755128] ? mark_held_locks+0x9e/0xe0 [ 1837.756188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1837.757378] ? __local_bh_enable_ip+0x9d/0x100 [ 1837.758442] ? trace_hardirqs_on+0x5b/0x180 [ 1837.759350] ? fib_new_table+0xfb/0x460 [ 1837.760188] fib_magic+0x32d/0x3b0 [ 1837.760960] ? fib_new_table+0x460/0x460 [ 1837.762133] ? lockdep_rtnl_is_held+0x22/0x30 [ 1837.763127] ? ip_mc_up+0x1ac/0x3a0 [ 1837.763957] fib_add_ifaddr+0x4b9/0x580 [ 1837.764807] fib_netdev_event+0x3ac/0x720 [ 1837.765941] raw_notifier_call_chain+0xb3/0x110 [ 1837.766982] call_netdevice_notifiers_info+0xba/0x130 [ 1837.768097] __dev_notify_flags+0x110/0x2c0 [ 1837.769076] ? dev_change_name+0x6b0/0x6b0 [ 1837.770184] ? __dev_change_flags+0x4cf/0x6e0 [ 1837.771231] ? dev_set_allmulti+0x30/0x30 [ 1837.772195] ? dev_ioctl+0x22e/0xd30 [ 1837.772977] ? lock_acquire+0x197/0x470 [ 1837.773930] ? full_name_hash+0xb5/0xf0 [ 1837.774982] dev_change_flags+0x100/0x160 [ 1837.775859] dev_ifsioc+0x5b9/0xa00 [ 1837.776659] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1837.777891] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1837.779277] dev_ioctl+0x23c/0xd30 [ 1837.780104] sock_do_ioctl+0x17d/0x300 [ 1837.781033] ? compat_ifr_data_ioctl+0x180/0x180 [ 1837.782153] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1837.783571] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1837.784734] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1837.785876] ? generic_block_fiemap+0x60/0x60 [ 1837.787043] ? lock_downgrade+0x6d0/0x6d0 [ 1837.787923] sock_ioctl+0x3ef/0x710 [ 1837.788691] ? dlci_ioctl_set+0x30/0x30 [ 1837.789650] ? selinux_file_ioctl+0xb6/0x270 [ 1837.790576] ? dlci_ioctl_set+0x30/0x30 [ 1837.791413] __x64_sys_ioctl+0x19a/0x210 [ 1837.792439] do_syscall_64+0x33/0x40 [ 1837.793384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1837.794466] RIP: 0033:0x7fb25f64db19 [ 1837.795329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1837.799597] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1837.801276] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1837.803040] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1837.804811] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1837.806469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1837.808063] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:20:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) epoll_create(0x1c) fallocate(r3, 0x21, 0xfffffffffffffc00, 0x6) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$eventfd(r4, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000015c0), &(0x7f0000001600)='./file0\x00', 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x7, @tid=r5}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x220000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 1837.829279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:43 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$FIOCLEX(r2, 0x5451) fcntl$dupfd(r1, 0x0, r2) r3 = mq_open(&(0x7f00000000c0)='&!\x00', 0x40, 0x10, &(0x7f0000000100)={0x1, 0x7f, 0x3, 0xffffffff}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x800}) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x2, 0x214d41) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) r6 = dup2(r3, r5) r7 = socket$inet6(0xa, 0x80000, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x400200, 0x0) pread64(r8, &(0x7f00000002c0)=""/83, 0x53, 0x5) dup(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0xbb8, 0x0, 0xff, 0xffffffff}, {0x2, 0x1, 0x3, 0x6}, {0x3f, 0x51, 0x3, 0xfff}, {0x8, 0x3, 0x3, 0x4}, {0x6, 0x1, 0x65, 0x1}, {0x8, 0xff, 0xd5}]}) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff000}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r9, &(0x7f00000005c0)=@known='trusted.syz\x00', &(0x7f0000000600)=""/68, 0x44) 11:20:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 71) 11:20:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x8001, 0x0, 0x1}]}) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@hci}, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) r3 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) pwritev2(r4, &(0x7f00000005c0)=[{&(0x7f0000000040)="f8ce5a2ac32e8efdb63891374a898fb4cf2f", 0x12}, {&(0x7f0000000100)="93f4498188ebf1f85e25be7ba2a62b7901de69d696d313f2a0ef15a29582b5db2393e0e13f807ecce3c7a2ecb1432c41d32d09ceac2a66a54f92dc3e4f9dc67dc760c23f743408772124869a570ff9da9bd9bf5deb39fab201229ddbb8438b36b7deaae12e801c9743011e528ebd4a01187a11", 0x73}, {&(0x7f0000000380)="3d151b4693487177fc60e931372d5b34569451dd23d781f2344a91ced376b6c7ad478b2f89fe075ea3561086e149ad7225d0813998fc9d098c628600fb096a319bf2781eec6772878ace30b39ad72fc6cf14defd10eed51a165b2c288261236b41def36aaceef60e0a30d4cf1c7b5eef16c056b8c3b09a70585ba7df3e12610abbe4993d71a03453ea94cdc858896f3fd9490da831a6cd5817acb194977ed0fd4159e1aba519e106563bb0a863b7e168037330596126efb1f263503f648155a9fd43f7528545140cc17403f8f39ea24a601a1fd52ba2328fc2719bb0e65d03", 0xdf}, {&(0x7f0000000240)="108f6595114da0370a6583ee537436ddbad27bd01f5189b91af2c8b593a8554f54dad1cf8e388c68f056fad7b54ba6784a4d64879192198b4bd28ad9972ed5c9e66c1d9ef3a97c2c13e41856314335c9d8", 0x51}, {&(0x7f0000000480)="229b37407ad0acccbb6147bb3c05b1a6bb5edc9bd4916c180bfba3ca6f8f53afc4794f022e9ce2d2dd8be281427927cf463905f8d302fa7bf315dd8a30be70ced8aaef72a8a28a8ee8a171ca754d0702", 0x50}, {&(0x7f0000000500)="569a2204ce1be9e83ccd0c194a7a3f54fba9880ec32f0bf2c7251ad9e476031bea59c09f0e4bd950f9d4e909d14da95a4a07690fff1b5892f891206fafa8d27d1fae41f9e9ef9d72485a094a53a03ed0f00200af2b30da94eaaad3a45b8017025566e4326f48f4cfa776cf0b083c3dc7a116733b19c16667d6cdd0751053d42dac4dfad4083611743817f7c68312bb7a60", 0x91}], 0x6, 0x2, 0xf58, 0x4) fsync(r3) 11:20:44 executing program 6: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) syz_io_uring_complete(0x0) r1 = epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) syz_io_uring_setup(0x79ee, &(0x7f0000001500)={0x0, 0xf802, 0x2, 0x0, 0xa0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440), &(0x7f00000014c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)=ANY=[@ANYBLOB="8f4275dc21060000002c816ff3d6000c4b2e4cd045cf81ff0fa59cf523ad5fd4dd1dc7a00924a45531026fc44a1646d37e518212e8", @ANYRES32, @ANYRES64=r0]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0000003}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x800, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = clone3(&(0x7f0000000580)={0x48000, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000240), {0x2}, &(0x7f00000002c0)=""/158, 0x9e, &(0x7f0000000480)=""/224, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) wait4(r2, 0x0, 0x2, 0x0) syz_open_procfs(r2, &(0x7f0000000100)='task\x00') 11:20:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) [ 1838.062940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1838.078628] FAULT_INJECTION: forcing a failure. [ 1838.078628] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.080114] CPU: 0 PID: 17514 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1838.080956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.081981] Call Trace: [ 1838.082310] dump_stack+0x107/0x167 [ 1838.082762] should_fail.cold+0x5/0xa [ 1838.083227] ? create_object.isra.0+0x3a/0xa30 [ 1838.083781] should_failslab+0x5/0x20 [ 1838.084256] kmem_cache_alloc+0x5b/0x310 [ 1838.084758] create_object.isra.0+0x3a/0xa30 [ 1838.085290] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1838.085921] __kmalloc+0x16e/0x390 [ 1838.086366] fib_create_info+0x769/0x4a30 [ 1838.086880] ? fib_dump_info+0x1e80/0x1e80 [ 1838.087400] ? fib_result_prefsrc+0x4a0/0x4a0 [ 1838.087952] ? kmem_cache_alloc+0x2a6/0x310 [ 1838.088471] ? fib_find_alias+0x1fc/0x270 [ 1838.088975] fib_table_insert+0x163/0x19a0 [ 1838.089507] ? fib_route_seq_show+0xeb0/0xeb0 [ 1838.090053] ? mark_held_locks+0x9e/0xe0 [ 1838.090550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1838.091183] ? __local_bh_enable_ip+0x9d/0x100 [ 1838.091735] ? trace_hardirqs_on+0x5b/0x180 [ 1838.092264] ? fib_new_table+0xfb/0x460 [ 1838.092748] fib_magic+0x32d/0x3b0 [ 1838.093180] ? fib_new_table+0x460/0x460 [ 1838.093689] ? lockdep_rtnl_is_held+0x22/0x30 [ 1838.094233] ? ip_mc_up+0x1ac/0x3a0 [ 1838.094676] fib_add_ifaddr+0x4e3/0x580 [ 1838.095163] fib_netdev_event+0x3ac/0x720 [ 1838.095673] raw_notifier_call_chain+0xb3/0x110 [ 1838.096278] call_netdevice_notifiers_info+0xba/0x130 [ 1838.096416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1838.096904] __dev_notify_flags+0x110/0x2c0 [ 1838.096915] ? dev_change_name+0x6b0/0x6b0 [ 1838.096924] ? __dev_change_flags+0x4cf/0x6e0 [ 1838.096937] ? dev_set_allmulti+0x30/0x30 [ 1838.096947] ? dev_ioctl+0x22e/0xd30 [ 1838.096958] ? lock_acquire+0x197/0x470 [ 1838.096967] ? full_name_hash+0xb5/0xf0 [ 1838.096980] dev_change_flags+0x100/0x160 [ 1838.096993] dev_ifsioc+0x5b9/0xa00 [ 1838.097004] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1838.097014] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1838.097030] dev_ioctl+0x23c/0xd30 [ 1838.097043] sock_do_ioctl+0x17d/0x300 [ 1838.097053] ? compat_ifr_data_ioctl+0x180/0x180 [ 1838.097068] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1838.097079] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1838.097091] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1838.097102] ? generic_block_fiemap+0x60/0x60 [ 1838.097112] ? lock_downgrade+0x6d0/0x6d0 [ 1838.097126] sock_ioctl+0x3ef/0x710 [ 1838.097136] ? dlci_ioctl_set+0x30/0x30 [ 1838.097151] ? selinux_file_ioctl+0xb6/0x270 [ 1838.097163] ? dlci_ioctl_set+0x30/0x30 [ 1838.097175] __x64_sys_ioctl+0x19a/0x210 [ 1838.097189] do_syscall_64+0x33/0x40 [ 1838.097200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.097207] RIP: 0033:0x7fb25f64db19 [ 1838.097218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.097224] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1838.097235] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1838.097241] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1838.097247] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.097253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.097259] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1838.100288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1838.100787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1838.102364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1838.124900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1851.659440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.663611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:57 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='projid_map\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = dup2(r1, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x88001, 0x21) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 11:20:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:20:57 executing program 1: rt_sigtimedwait(&(0x7f0000000440)={[0x7]}, &(0x7f0000000580), &(0x7f0000000600)={0x0, 0x989680}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x560a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="041f003dcf60f0ecb91000008d6df69a91d005020001075810fb6740210e06f50735ca24c12fafe45631b38aedb3bf87b3ab3abc669485420a752e21fb48332744467a969b72982a5faec242d2ed232bd4c2178e64be184b3449"], 0x108) setsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, 0x0) socket$inet(0xa, 0x3, 0xff) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in6=@private2, 0x4e20, 0x0, 0x4e22, 0xffff, 0x2, 0x20, 0x20, 0x2c, 0x0, 0xee00}, {0xffffffffffffffff, 0x8, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff9, 0xffffffffffffff00, 0x7, 0xffffffffffffff01}, {0x78, 0x1ff, 0xfd, 0x3}, 0x7fff, 0x6e6bbc, 0x0, 0x1, 0x2, 0x3}, {{@in=@multicast2, 0x4d3, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x2, 0x6, 0xffffff81, 0x3f, 0x6}}, 0xe8) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000000101010000f8ff00000000070000010c0018800800024000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8050) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) rt_sigtimedwait(&(0x7f0000000280)={[0x8]}, &(0x7f0000000500), &(0x7f00000007c0)={0x77359400}, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x800012d, 0x4, 0x0, 0x0, 0x0) 11:20:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 72) 11:20:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:20:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r0, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000400)=0x1) [ 1851.673928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.673977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.681525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.689353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.697709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.705371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.728913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.730278] FAULT_INJECTION: forcing a failure. [ 1851.730278] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.732774] CPU: 1 PID: 17549 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1851.733692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1851.734759] Call Trace: [ 1851.735108] dump_stack+0x107/0x167 [ 1851.735521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.735588] should_fail.cold+0x5/0xa [ 1851.738245] ? create_object.isra.0+0x3a/0xa30 [ 1851.738838] should_failslab+0x5/0x20 [ 1851.739338] kmem_cache_alloc+0x5b/0x310 [ 1851.739875] create_object.isra.0+0x3a/0xa30 [ 1851.740453] kmemleak_alloc_percpu+0xa0/0x100 [ 1851.741048] pcpu_alloc+0x4e2/0x1240 [ 1851.741560] fib_nh_init+0xc1/0x4d0 [ 1851.742038] fib_create_info+0x22b3/0x4a30 [ 1851.742608] ? fib_result_prefsrc+0x4a0/0x4a0 [ 1851.743195] ? kmem_cache_alloc+0x2a6/0x310 [ 1851.743743] ? fib_find_alias+0x1fc/0x270 [ 1851.744280] fib_table_insert+0x163/0x19a0 [ 1851.744841] ? fib_route_seq_show+0xeb0/0xeb0 [ 1851.745424] ? mark_held_locks+0x9e/0xe0 [ 1851.745961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1851.746405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.746632] ? __local_bh_enable_ip+0x9d/0x100 [ 1851.746650] ? trace_hardirqs_on+0x5b/0x180 [ 1851.749933] ? fib_new_table+0xfb/0x460 [ 1851.750444] fib_magic+0x32d/0x3b0 [ 1851.750899] ? fib_new_table+0x460/0x460 [ 1851.751442] ? lockdep_rtnl_is_held+0x22/0x30 [ 1851.752027] ? ip_mc_up+0x1ac/0x3a0 [ 1851.752495] fib_add_ifaddr+0x4e3/0x580 [ 1851.753023] fib_netdev_event+0x3ac/0x720 [ 1851.753568] raw_notifier_call_chain+0xb3/0x110 [ 1851.754175] call_netdevice_notifiers_info+0xba/0x130 [ 1851.754844] __dev_notify_flags+0x110/0x2c0 [ 1851.755409] ? dev_change_name+0x6b0/0x6b0 [ 1851.755960] ? __dev_change_flags+0x4cf/0x6e0 [ 1851.756536] ? dev_set_allmulti+0x30/0x30 [ 1851.757076] ? dev_ioctl+0x22e/0xd30 [ 1851.757572] ? lock_acquire+0x197/0x470 [ 1851.758096] ? full_name_hash+0xb5/0xf0 [ 1851.758627] dev_change_flags+0x100/0x160 [ 1851.759160] dev_ifsioc+0x5b9/0xa00 [ 1851.759631] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1851.760312] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1851.760999] dev_ioctl+0x23c/0xd30 [ 1851.761466] sock_do_ioctl+0x17d/0x300 [ 1851.761966] ? compat_ifr_data_ioctl+0x180/0x180 [ 1851.762587] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1851.763315] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1851.763986] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1851.764659] ? generic_block_fiemap+0x60/0x60 [ 1851.765236] ? lock_downgrade+0x6d0/0x6d0 [ 1851.765777] sock_ioctl+0x3ef/0x710 [ 1851.766239] ? dlci_ioctl_set+0x30/0x30 [ 1851.766746] ? selinux_file_ioctl+0xb6/0x270 [ 1851.767307] ? dlci_ioctl_set+0x30/0x30 [ 1851.767828] __x64_sys_ioctl+0x19a/0x210 [ 1851.768360] do_syscall_64+0x33/0x40 [ 1851.768842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1851.769517] RIP: 0033:0x7fb25f64db19 [ 1851.770004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1851.772372] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1851.773335] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1851.774298] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1851.775205] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1851.776124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1851.777041] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:20:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 73) 11:20:57 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x10001}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c0000000000069078ac1e0001ac1414bb44241803ac1e00010000000000000000000000000000000000000000ffffffff0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="6e8e581e1336", @random="79a4e7558d9f", @void, {@arp={0x806, @generic={0x204, 0x884c, 0x6, 0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, "4019d7c178cb0ecf74ef", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, "5ae6b4e7c26ee8d5df2b"}}}}, &(0x7f0000000040)={0x1, 0x2, [0x523, 0x149, 0x8aa, 0x7a]}) [ 1851.910056] FAULT_INJECTION: forcing a failure. [ 1851.910056] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.913468] CPU: 0 PID: 17561 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1851.915072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1851.916976] Call Trace: [ 1851.917600] dump_stack+0x107/0x167 [ 1851.918436] should_fail.cold+0x5/0xa [ 1851.919308] ? create_object.isra.0+0x3a/0xa30 [ 1851.920360] should_failslab+0x5/0x20 [ 1851.921233] kmem_cache_alloc+0x5b/0x310 [ 1851.922169] ? mark_held_locks+0x9e/0xe0 [ 1851.923109] create_object.isra.0+0x3a/0xa30 11:20:58 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x0) dup2(r2, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) dup2(0xffffffffffffffff, r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0xa, 0x0) dup2(r4, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x10, r3, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x0, 0x4, 0x200, 0x4, r6}) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x13) creat(&(0x7f0000000040)='./file0\x00', 0x10b) [ 1851.924133] kmemleak_alloc_percpu+0xa0/0x100 [ 1851.925277] pcpu_alloc+0x4e2/0x1240 [ 1851.926161] fib_nh_init+0xc1/0x4d0 [ 1851.927000] fib_create_info+0x22b3/0x4a30 [ 1851.928002] ? fib_result_prefsrc+0x4a0/0x4a0 [ 1851.929029] ? kmem_cache_alloc+0x2a6/0x310 [ 1851.930028] ? fib_find_alias+0x1fc/0x270 [ 1851.930978] fib_table_insert+0x163/0x19a0 [ 1851.931986] ? fib_route_seq_show+0xeb0/0xeb0 [ 1851.933024] ? mark_held_locks+0x9e/0xe0 [ 1851.933975] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1851.935175] ? __local_bh_enable_ip+0x9d/0x100 [ 1851.936224] ? trace_hardirqs_on+0x5b/0x180 [ 1851.937204] ? fib_new_table+0xfb/0x460 [ 1851.938134] fib_magic+0x32d/0x3b0 [ 1851.938952] ? fib_new_table+0x460/0x460 [ 1851.939901] ? lockdep_rtnl_is_held+0x22/0x30 [ 1851.940927] ? ip_mc_up+0x1ac/0x3a0 [ 1851.941779] fib_add_ifaddr+0x4e3/0x580 [ 1851.942708] fib_netdev_event+0x3ac/0x720 [ 1851.943662] raw_notifier_call_chain+0xb3/0x110 [ 1851.944750] call_netdevice_notifiers_info+0xba/0x130 [ 1851.945941] __dev_notify_flags+0x110/0x2c0 [ 1851.946925] ? dev_change_name+0x6b0/0x6b0 [ 1851.947888] ? __dev_change_flags+0x4cf/0x6e0 [ 1851.948921] ? dev_set_allmulti+0x30/0x30 [ 1851.949878] ? dev_ioctl+0x22e/0xd30 [ 1851.950730] ? lock_acquire+0x197/0x470 [ 1851.951644] ? full_name_hash+0xb5/0xf0 [ 1851.952562] dev_change_flags+0x100/0x160 [ 1851.953516] dev_ifsioc+0x5b9/0xa00 [ 1851.954352] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1851.955554] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1851.956757] dev_ioctl+0x23c/0xd30 [ 1851.957590] sock_do_ioctl+0x17d/0x300 [ 1851.958481] ? compat_ifr_data_ioctl+0x180/0x180 [ 1851.959583] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1851.960903] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1851.962114] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1851.963314] ? generic_block_fiemap+0x60/0x60 [ 1851.964340] ? lock_downgrade+0x6d0/0x6d0 [ 1851.965313] sock_ioctl+0x3ef/0x710 [ 1851.966166] ? dlci_ioctl_set+0x30/0x30 [ 1851.967082] ? selinux_file_ioctl+0xb6/0x270 [ 1851.968106] ? dlci_ioctl_set+0x30/0x30 [ 1851.969010] __x64_sys_ioctl+0x19a/0x210 [ 1851.969948] do_syscall_64+0x33/0x40 [ 1851.970816] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1851.971996] RIP: 0033:0x7fb25f64db19 [ 1851.972846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1851.977073] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1851.978828] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1851.980462] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1851.982110] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1851.983743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1851.985367] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:20:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:20:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 74) 11:20:58 executing program 0: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x45, 0x8, 0xb91}) r2 = socket$inet(0x2, 0xa, 0x0) dup2(r2, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@hci}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0xa, 0x0) dup2(r7, r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r6, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet(0x2, 0xa, 0x0) dup2(r9, r8) io_submit(0x0, 0x6, &(0x7f0000000680)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x40, 0xffffffffffffffff, &(0x7f0000000080)="b216a08e02a3a08cb676435399becd45541060439361e2abfd4cde82a383d9", 0x1f, 0x2, 0x0, 0x1, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x20, 0xffffffffffffffff, &(0x7f00000001c0)="a492ef99fd5705339e3a06e205f2dfdda7271945bed11eb65b1d10bb25841954afd00e5d351cb759a4f5dd01a77dc272001aa1ca8d41be5904", 0x39, 0x5, 0x0, 0x1, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, &(0x7f0000000340)="4dc087222713ef026fb14bb792626e6d0686cf89b383dfbac803a36894a1dc57a22807827781a83df36d5970771247e5d59d4edfe057730930943488b38199e2a481b47bf1549ff9f6dce217d4462e7d69daa5bcb199b5b7835e9725aeb6917b099f4a6896855ddd38ea51a6bba40178b7ba8b5102e3738679f47241053b066bb98e2310c15884a4b09d5e99e3fe7f7a1e4c0a8517e3c4144d1c5ab63eacf77b3fe2f34f5ccbc12e74583fd2089da2e22fbfe57f76f2c26208bd37318905b27748fcf9120eaa563f9eb7de74fa6b667f6f5bdc8f0fab07d972d2d4764661895c8b3434da471e4f61043c15b411f9838b6874c88cde4d8e8d", 0xf8, 0x3, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xad0d, r0, &(0x7f0000000280)="85b6b662560802dc5ac298c1486427b59d6a53d9b552085d064e0e24e806b4e488af9ff167f6d58dfa5503a06db1315dbee8d551005845b7a3da4a2445041ce88c240b74d5b3babab071b583765f81ae7bda5c27d3ec6330531841977ff30119068c", 0x62, 0x81, 0x0, 0x2, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x8000, r5, &(0x7f0000000500)="5876c3716fc6c91177952e97bf6f88bc2f8c173326304f0020df099aa473aef1d07d8f665bcbe6d466e79027c7820f68df3a86e89d01275f", 0x38, 0x5, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0xb4c1, r9, &(0x7f0000000580)="3d5bf36978d8d8d67a0f31cd1ebe00e221ac560cd9fd8c5a465bbcbba01ed7c88b553645c695c309c13366a58d0229cb130bc5a236b6128ed8826cec684d1fcff788b23ef2c8619ff6e6fc7f5963e6d2f615f89c08199fd221a5341ae9168bbb16a539254ca40e95d5ce46f9ae1b43cce0e971ea62758a1cfa669d02e270b2d5393909315dfb410eb0e911", 0x8b, 0x3}]) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1852.060761] FAULT_INJECTION: forcing a failure. [ 1852.060761] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.062315] CPU: 1 PID: 17570 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1852.063155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1852.064145] Call Trace: [ 1852.064468] dump_stack+0x107/0x167 [ 1852.064908] should_fail.cold+0x5/0xa [ 1852.065365] ? fib_table_insert+0x6b9/0x19a0 [ 1852.065899] should_failslab+0x5/0x20 [ 1852.066360] kmem_cache_alloc+0x5b/0x310 [ 1852.066608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.066833] ? fib_find_alias+0x1fc/0x270 [ 1852.066848] fib_table_insert+0x6b9/0x19a0 [ 1852.066882] ? fib_route_seq_show+0xeb0/0xeb0 [ 1852.070415] ? mark_held_locks+0x9e/0xe0 [ 1852.070902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1852.071525] ? __local_bh_enable_ip+0x9d/0x100 [ 1852.072062] ? trace_hardirqs_on+0x5b/0x180 [ 1852.072566] ? fib_new_table+0xfb/0x460 [ 1852.073037] fib_magic+0x32d/0x3b0 [ 1852.073461] ? fib_new_table+0x460/0x460 [ 1852.073957] ? lockdep_rtnl_is_held+0x22/0x30 [ 1852.074488] ? ip_mc_up+0x1ac/0x3a0 [ 1852.074919] fib_add_ifaddr+0x4e3/0x580 [ 1852.075393] fib_netdev_event+0x3ac/0x720 [ 1852.075885] raw_notifier_call_chain+0xb3/0x110 [ 1852.076451] call_netdevice_notifiers_info+0xba/0x130 [ 1852.077062] __dev_notify_flags+0x110/0x2c0 [ 1852.077596] ? dev_change_name+0x6b0/0x6b0 [ 1852.078095] ? __dev_change_flags+0x4cf/0x6e0 [ 1852.078634] ? dev_set_allmulti+0x30/0x30 [ 1852.079129] ? dev_ioctl+0x22e/0xd30 [ 1852.079574] ? lock_acquire+0x197/0x470 [ 1852.080040] ? full_name_hash+0xb5/0xf0 [ 1852.080517] dev_change_flags+0x100/0x160 [ 1852.081016] dev_ifsioc+0x5b9/0xa00 [ 1852.081456] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1852.082078] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1852.082704] dev_ioctl+0x23c/0xd30 [ 1852.083131] sock_do_ioctl+0x17d/0x300 [ 1852.083590] ? compat_ifr_data_ioctl+0x180/0x180 [ 1852.084154] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1852.084831] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1852.085449] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1852.086066] ? generic_block_fiemap+0x60/0x60 [ 1852.086594] ? lock_downgrade+0x6d0/0x6d0 [ 1852.087085] sock_ioctl+0x3ef/0x710 [ 1852.087512] ? dlci_ioctl_set+0x30/0x30 [ 1852.087982] ? selinux_file_ioctl+0xb6/0x270 [ 1852.088499] ? dlci_ioctl_set+0x30/0x30 [ 1852.088970] __x64_sys_ioctl+0x19a/0x210 [ 1852.089458] do_syscall_64+0x33/0x40 [ 1852.089905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1852.090508] RIP: 0033:0x7fb25f64db19 [ 1852.090945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1852.093116] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1852.094015] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1852.094858] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1852.095707] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1852.096543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.097378] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1852.107736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:58 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:20:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r0, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1852.160760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.164353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.168173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.173879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.181487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.207536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.245932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:58 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 75) 11:20:58 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@hci={0x1f, 0x0, 0x1}}, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) [ 1852.273276] FAULT_INJECTION: forcing a failure. [ 1852.273276] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.274877] CPU: 1 PID: 17588 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1852.275688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1852.276637] Call Trace: [ 1852.276947] dump_stack+0x107/0x167 [ 1852.277369] should_fail.cold+0x5/0xa [ 1852.277851] ? create_object.isra.0+0x3a/0xa30 [ 1852.278385] should_failslab+0x5/0x20 [ 1852.278826] kmem_cache_alloc+0x5b/0x310 [ 1852.279303] create_object.isra.0+0x3a/0xa30 [ 1852.279813] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1852.280410] kmem_cache_alloc+0x159/0x310 [ 1852.280894] ? fib_find_alias+0x1fc/0x270 [ 1852.281376] fib_table_insert+0x6b9/0x19a0 [ 1852.281890] ? fib_route_seq_show+0xeb0/0xeb0 [ 1852.282419] ? mark_held_locks+0x9e/0xe0 [ 1852.282893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1852.283513] ? __local_bh_enable_ip+0x9d/0x100 [ 1852.284041] ? trace_hardirqs_on+0x5b/0x180 [ 1852.284540] ? fib_new_table+0xfb/0x460 [ 1852.285005] fib_magic+0x32d/0x3b0 [ 1852.285424] ? fib_new_table+0x460/0x460 [ 1852.285919] ? lockdep_rtnl_is_held+0x22/0x30 [ 1852.286440] ? ip_mc_up+0x1ac/0x3a0 [ 1852.286881] fib_add_ifaddr+0x4e3/0x580 [ 1852.287348] fib_netdev_event+0x3ac/0x720 [ 1852.287830] raw_notifier_call_chain+0xb3/0x110 [ 1852.288371] call_netdevice_notifiers_info+0xba/0x130 [ 1852.288972] __dev_notify_flags+0x110/0x2c0 [ 1852.289477] ? dev_change_name+0x6b0/0x6b0 [ 1852.289970] ? __dev_change_flags+0x4cf/0x6e0 [ 1852.290485] ? dev_set_allmulti+0x30/0x30 [ 1852.290965] ? dev_ioctl+0x22e/0xd30 [ 1852.291397] ? lock_acquire+0x197/0x470 [ 1852.291855] ? full_name_hash+0xb5/0xf0 [ 1852.292321] dev_change_flags+0x100/0x160 [ 1852.292810] dev_ifsioc+0x5b9/0xa00 [ 1852.293235] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1852.293840] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1852.294455] dev_ioctl+0x23c/0xd30 [ 1852.294868] sock_do_ioctl+0x17d/0x300 [ 1852.295315] ? compat_ifr_data_ioctl+0x180/0x180 [ 1852.295870] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1852.296540] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1852.297143] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1852.297756] ? generic_block_fiemap+0x60/0x60 [ 1852.298273] ? lock_downgrade+0x6d0/0x6d0 [ 1852.298760] sock_ioctl+0x3ef/0x710 [ 1852.299181] ? dlci_ioctl_set+0x30/0x30 [ 1852.299645] ? selinux_file_ioctl+0xb6/0x270 [ 1852.300156] ? dlci_ioctl_set+0x30/0x30 [ 1852.300626] __x64_sys_ioctl+0x19a/0x210 [ 1852.301099] do_syscall_64+0x33/0x40 [ 1852.301545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1852.302154] RIP: 0033:0x7fb25f64db19 [ 1852.302585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1852.304725] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1852.305613] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1852.306433] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1852.307252] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1852.308079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.308905] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1852.319202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.328434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 76) 11:20:58 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@msize={'msize', 0x3d, 0x3}}], [{@smackfshat={'smackfshat', 0x3d, '#*'}}, {@dont_appraise}, {@euid_lt={'euid<', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x36, 0x63, 0x30, 0x5a, 0x62, 0x36, 0x36], 0x2d, [0x32, 0x7, 0x32, 0x33], 0x2d, [0x31, 0x64, 0x57, 0x62], 0x2d, [0x66, 0x5ffef1c19dc394ca, 0x31, 0x63], 0x2d, [0x64, 0x34, 0x64, 0x38, 0x31, 0x36, 0x34, 0x39]}}}]}}) dup2(r0, r1) 11:20:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r0, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000400)=0x1) 11:20:58 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1852.578845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:20:58 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x82800, 0x145, 0x5}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xcd}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000001) write(r0, &(0x7f0000000180)="69ac353e60cea4ddcf365f79cbc7ef7890a8deb1e6746bc4cc4a10a1929373fbf6850d703a6b4eb5ba5c1241b748d0a7c71a0affbcc7ea01eae7d7d36b638053b1cfba6acbbee6882fd89e26b2b288def74a938d5fd091df1e6f4cfd1b116d90a7a52a799bdc41b51ec5823d11756a9d6f68f36d6e3be2725e19e73ada7a1366e0b5c88122c5e0bad6dcf83a6c613f38ab9b4d5a7d9be8c8516892a4520830a86cb3fe7ff6198148e823d9c38d0656be564dac28aaa71fdc286ad1265e18f217a6455c5e42394f1d72ed277afa072eac7ca45f83574c80487d48ee5eb688b609e9b16d80054028fee26af231db57bbd492dc", 0xf2) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101000, 0x11) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x7, 0x408000) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r1) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2d0a000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}}, 0x4000010) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) sendfile(r4, r2, &(0x7f0000000480)=0x9, 0x6) r5 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) ioctl(r5, 0x0, &(0x7f0000000500)="107e7cfe86671979ee6bd72e38691d731e1f08fc9cd703fefb8ff9a363fa505ffa4568a2ebff5e0628a18738b503fca085b4bd4b2a54b209efd76f0c855bd86e2b5a66d01bb4e12faeb0bce493d4c037b5b59906cbcd14bedf362d7330652325d2b0") sendfile(r0, r1, 0x0, 0xfffffffffffffffc) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000580)) socketpair(0x22, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r7 = syz_open_dev$loop(&(0x7f00000017c0), 0x7ff, 0x101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001800)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001840)={{0x1, 0x1, 0x18, r4, {0xee00, 0x0}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001880)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000001980)=0xe8) clock_gettime(0x0, &(0x7f0000003100)) sendmsg$netlink(r6, &(0x7f0000003240)={&(0x7f0000000600), 0xc, &(0x7f0000001780)=[{&(0x7f0000000640)={0x1114, 0x2f, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x76, 0x0, 0x0, @u32}, @nested={0x7c, 0x66, 0x0, 0x1, [@typed={0x69, 0x50, 0x0, 0x0, @binary="dfe7b1c21329c4bcc3ccba17c6fb04b36d06270d73a2264efae0f0d4676898c8188a0a66813492f7afb343bae9da88e63a5829d70132c08d8919583f3c86defb2c7d4d98d5d886678c8d43df0e361ce6366974b7c9db05277b682d83a6d53aff620de877ee"}, @typed={0x4, 0x93}, @typed={0x8, 0x13, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="480c698131f29501dcd9de8fe34b8ebb6a0301e416b2fdbf417f73ec4479debdba242300beea154c1caf7f0ddae7062f32a159d5df9dbc5a561977bb81ef4367b1dd0d3845c4b1525f2f6f6ccc1c2fc42ddeff6baafbd87ea83ce07766ec0431fbbd0ff91e", @generic="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", @typed={0xa, 0x2e, 0x0, 0x0, @str='/*]]-\x00'}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0x6}]}, 0x1114}], 0x1, &(0x7f0000003180)=[@rights={{0x28, 0x1, 0x1, [r4, r2, r5, r2, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x88, 0x80}, 0x40040) [ 1852.605265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.622736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.676921] FAULT_INJECTION: forcing a failure. [ 1852.676921] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.679833] CPU: 0 PID: 17607 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1852.681431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1852.683364] Call Trace: [ 1852.683975] dump_stack+0x107/0x167 [ 1852.684824] should_fail.cold+0x5/0xa [ 1852.685715] ? __alloc_skb+0x6d/0x5b0 [ 1852.686599] should_failslab+0x5/0x20 [ 1852.687470] kmem_cache_alloc_node+0x55/0x330 [ 1852.688501] ? create_object.isra.0+0x3ad/0xa30 [ 1852.689590] __alloc_skb+0x6d/0x5b0 [ 1852.690433] rtmsg_fib+0x1b2/0xf40 [ 1852.691264] ? fib_dump_info+0x1e80/0x1e80 [ 1852.692240] ? trace_hardirqs_on+0x5b/0x180 [ 1852.693229] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1852.694366] ? fib_find_alias+0x1fc/0x270 [ 1852.695319] fib_table_insert+0xa43/0x19a0 [ 1852.696315] ? fib_route_seq_show+0xeb0/0xeb0 [ 1852.697355] ? mark_held_locks+0x9e/0xe0 [ 1852.698303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1852.699505] ? __local_bh_enable_ip+0x9d/0x100 [ 1852.700530] ? trace_hardirqs_on+0x5b/0x180 [ 1852.701522] ? fib_new_table+0xfb/0x460 [ 1852.702449] fib_magic+0x32d/0x3b0 [ 1852.703255] ? fib_new_table+0x460/0x460 [ 1852.704201] ? lockdep_rtnl_is_held+0x22/0x30 [ 1852.705214] ? ip_mc_up+0x1ac/0x3a0 [ 1852.706068] fib_add_ifaddr+0x4e3/0x580 [ 1852.707018] fib_netdev_event+0x3ac/0x720 [ 1852.708227] raw_notifier_call_chain+0xb3/0x110 [ 1852.709604] call_netdevice_notifiers_info+0xba/0x130 [ 1852.711112] __dev_notify_flags+0x110/0x2c0 [ 1852.712374] ? dev_change_name+0x6b0/0x6b0 [ 1852.713621] ? __dev_change_flags+0x4cf/0x6e0 [ 1852.714800] ? dev_set_allmulti+0x30/0x30 [ 1852.715757] ? dev_ioctl+0x22e/0xd30 [ 1852.716612] ? lock_acquire+0x197/0x470 [ 1852.717546] ? full_name_hash+0xb5/0xf0 [ 1852.718454] dev_change_flags+0x100/0x160 [ 1852.719562] dev_ifsioc+0x5b9/0xa00 [ 1852.720394] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1852.721629] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1852.722868] dev_ioctl+0x23c/0xd30 [ 1852.723701] sock_do_ioctl+0x17d/0x300 [ 1852.724583] ? compat_ifr_data_ioctl+0x180/0x180 [ 1852.725679] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1852.726984] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1852.727419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1852.728152] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1852.728178] ? generic_block_fiemap+0x60/0x60 [ 1852.731437] ? lock_downgrade+0x6d0/0x6d0 [ 1852.732389] sock_ioctl+0x3ef/0x710 [ 1852.733209] ? dlci_ioctl_set+0x30/0x30 [ 1852.734134] ? selinux_file_ioctl+0xb6/0x270 [ 1852.735127] ? dlci_ioctl_set+0x30/0x30 [ 1852.736034] __x64_sys_ioctl+0x19a/0x210 [ 1852.736960] do_syscall_64+0x33/0x40 [ 1852.737827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1852.738980] RIP: 0033:0x7fb25f64db19 [ 1852.739815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1852.743999] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1852.745739] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1852.747357] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1852.748973] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1852.750589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.752207] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1857.385147] Bluetooth: hci2: command 0x0409 tx timeout [ 1859.433157] Bluetooth: hci2: command 0x041b tx timeout [ 1861.482142] Bluetooth: hci2: command 0x040f tx timeout [ 1862.613603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.615878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.618868] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1862.646806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.648607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.651162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1862.833674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1862.842704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1862.850724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.529132] Bluetooth: hci2: command 0x0419 tx timeout [ 1867.177114] Bluetooth: hci0: command 0x0406 tx timeout 11:21:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r0, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000400)=0x1) 11:21:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:21:26 executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:21:26 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:21:26 executing program 0: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x6) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00006f5000/0x4000)=nil, 0x4000, 0x4, 0x13, r3, 0xa205e000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x541b, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r4) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x1f, 0x7, 0x3a, 0x0, 0x5, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x13, 0x2, 0x6, 0x4, 0x23, 0x1f, 0x20, 0x0, 0x7, 0x0, 0xbf4}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r2, 0xffffffffffffffff, 0x2) fallocate(r1, 0x0, 0x0, 0x1000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) 11:21:26 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:21:26 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3873, &(0x7f00000001c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000080)=@hci}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x10001) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0xa, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0xf79e) syz_io_uring_setup(0x12e6, &(0x7f0000000140)={0x0, 0xb52d, 0x0, 0x1, 0x229, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x64f4, &(0x7f0000000300)={0x0, 0xe5ae, 0x1, 0x1, 0x398, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000400)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x23, 0x1, {0x1}}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r12, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 77) [ 1880.105672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1880.112647] FAULT_INJECTION: forcing a failure. [ 1880.112647] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.115357] CPU: 0 PID: 18083 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1880.115911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1880.116728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.116735] Call Trace: [ 1880.116760] dump_stack+0x107/0x167 [ 1880.116785] should_fail.cold+0x5/0xa [ 1880.122393] ? __alloc_skb+0x6d/0x5b0 [ 1880.123165] should_failslab+0x5/0x20 [ 1880.123580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1880.123922] kmem_cache_alloc_node+0x55/0x330 [ 1880.123948] ? create_object.isra.0+0x3ad/0xa30 [ 1880.127645] __alloc_skb+0x6d/0x5b0 [ 1880.128386] rtmsg_fib+0x1b2/0xf40 [ 1880.129112] ? fib_dump_info+0x1e80/0x1e80 [ 1880.129976] ? trace_hardirqs_on+0x5b/0x180 [ 1880.130825] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1880.131798] ? fib_find_alias+0x1fc/0x270 [ 1880.132625] fib_table_insert+0xa43/0x19a0 [ 1880.133482] ? fib_route_seq_show+0xeb0/0xeb0 [ 1880.134391] ? mark_held_locks+0x9e/0xe0 [ 1880.135192] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.136226] ? __local_bh_enable_ip+0x9d/0x100 [ 1880.137114] ? trace_hardirqs_on+0x5b/0x180 [ 1880.137978] ? fib_new_table+0xfb/0x460 [ 1880.138788] fib_magic+0x32d/0x3b0 [ 1880.139500] ? fib_new_table+0x460/0x460 [ 1880.139733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1880.140321] ? lockdep_rtnl_is_held+0x22/0x30 [ 1880.140346] ? ip_mc_up+0x1ac/0x3a0 [ 1880.143822] fib_add_ifaddr+0x4e3/0x580 [ 1880.144624] fib_netdev_event+0x3ac/0x720 [ 1880.145457] raw_notifier_call_chain+0xb3/0x110 [ 1880.146402] call_netdevice_notifiers_info+0xba/0x130 [ 1880.147430] __dev_notify_flags+0x110/0x2c0 [ 1880.148283] ? dev_change_name+0x6b0/0x6b0 [ 1880.148830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1880.149121] ? __dev_change_flags+0x4cf/0x6e0 [ 1880.149143] ? dev_set_allmulti+0x30/0x30 [ 1880.149160] ? dev_ioctl+0x22e/0xd30 [ 1880.149177] ? lock_acquire+0x197/0x470 [ 1880.149192] ? full_name_hash+0xb5/0xf0 [ 1880.149214] dev_change_flags+0x100/0x160 [ 1880.149235] dev_ifsioc+0x5b9/0xa00 [ 1880.149254] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1880.149279] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1880.158642] dev_ioctl+0x23c/0xd30 [ 1880.159345] sock_do_ioctl+0x17d/0x300 [ 1880.160119] ? compat_ifr_data_ioctl+0x180/0x180 [ 1880.161059] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1880.162199] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1880.163205] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1880.164244] ? generic_block_fiemap+0x60/0x60 [ 1880.165125] ? lock_downgrade+0x6d0/0x6d0 [ 1880.165953] sock_ioctl+0x3ef/0x710 [ 1880.166673] ? dlci_ioctl_set+0x30/0x30 [ 1880.167135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1880.167475] ? selinux_file_ioctl+0xb6/0x270 [ 1880.170231] ? dlci_ioctl_set+0x30/0x30 [ 1880.171004] __x64_sys_ioctl+0x19a/0x210 [ 1880.171797] do_syscall_64+0x33/0x40 [ 1880.172528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1880.173530] RIP: 0033:0x7fb25f64db19 [ 1880.174270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.177842] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1880.179341] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1880.180734] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1880.182123] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.183510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.184894] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1880.204206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1880.230023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4306, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x600880, 0x80) r1 = socket$inet(0x2, 0xa, 0x300) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = dup2(r2, r1) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000001380)='devices.deny\x00', 0x2, 0x0) preadv2(r4, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/33, 0x21}, {&(0x7f0000001400)=""/31, 0x1f}, {&(0x7f0000001440)=""/98, 0x62}, {&(0x7f00000014c0)=""/14, 0xe}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x5, 0xe749, 0x850, 0x18) r5 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$inet(0x2, 0x3, 0x6) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmmsg$inet(r7, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)="825282993d1c8e37413d4e860df6d60050e335781c208268f8d7b0312b05c29b969d59533e9834f53eb05d6db6a8271893dd0af10c2637b30acef3e4732b35dc8438d9218407c56a15648fce98b3bfeb13ae4b28df59dfb55bfe446be83aae2381d01c8323c4a3b7981fefe91e22e454492cc8ef317b30617a8f56928236e5569324d3679da1a11ae1cb35233ffe347da149a0f601dd6dddb2977dc14d75dd91085150b7daa401561ce0b937c7c400d1c0be0725ab2d7985bb37c2a1a7d8e6a34cac739613b611e32067d01ae08e5b915bfa0e3ebbec7cc0bbac546f553a39d90a1382f306cfc62e25a516ecc3990808cc", 0xf1}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="ce42cf35d1a726f977ea5c3b55a147da354d9bc2ee1eb562366f6685933b616d97d72f5a85dff197d056031b5f0f37ece00b12156a73ebcfb386f1da13f009fcb4e0f71fbc5ae11a06577cab20ff84ac27f603577614fda617773a27d209778a31f056479318788868aefc5d930331f646a7895ff07fe6d89b57c2a2fdc9ad2288637a92b17ed828df253fa3f2615c02af1b8adce72a28b9e86f469921df797f7d79f2f2a9bec0ca554b0445169f800c9900d16171f3d3aa4c40c19864a44d2bdd8b52fada5ade2da6494dc1ddfa97d18a451d8d8be80706eb0a26161bb82589defe48737158719a95bb36ac27a8bd1db01f3accee", 0xf5}], 0x3}}], 0x1, 0x4c005) sendmmsg$inet(r6, &(0x7f0000000000), 0x400000d, 0x0) 11:21:26 executing program 1: fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000380)=ANY=[@ANYBLOB="0412db8164ac452b83b40fc5b09c843fdcc70600000000000000c25df6094d05c69ad6b2dd77a08c8585b33dbafd9b14"], 0x14, 0x3) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0xa2, 0x0, 0x0, 0x0, 0x4, 0xfffffffa, 0x0, 0x0, 0x5961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x21, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="106307265f080000e4ff1e97976b9d5ae0e15735a0a400000000000013e800"/42], 0xb0, 0x0, &(0x7f00000005c0)="df81213e21c417f228cbe89d8bc44e607be8a6517f0d6adc3cb6e7126f7e6ced8bdea51f0af23414b8e39cfeaf2c4e14e220241d2d40624e9fc5dc00401f2f150218b8abaef0ec1679f6d73a30eab2cc29b151d4fe6a0070dd3583ebb8741aa6e92cfca99605bb9ca6b9f04034c5d1cc8a572285c0b8f7068b2d1e419b38478abd89143cd8143871b06282c0a5a1a6c4c4cf3b5ae3d71fde3d08cb2fea4e25cfd1f92b59a41d6512d20016aeede03331"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRES64, @ANYRESHEX=r0, @ANYRES64]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000100801000088bf569ab825ba5b5be85c12000000000016ef73acb6bdd6640005000080480000008a32c6e3ecae21a3bddbb409068d01097af335119604b60fd14f28008b8e8705a082763f6b427cf92eb2142807c05423310000000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40000002}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @fixed}, &(0x7f0000000580)=0xe, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000200)) 11:21:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x0) io_uring_setup(0x6a32, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x4000201f}) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0xa, 0x0) dup2(r3, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'batadv_slave_1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="9e3e8f8be3300000"]}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x200) r4 = epoll_create(0x3ff) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)={0x20000001}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) dup2(r5, r2) waitid(0x2, r1, 0x0, 0x20000000, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x2c) [ 1880.379412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=18113 comm=syz-executor.1 11:21:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 78) [ 1880.410485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.412215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1880.415107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1880.420981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=18113 comm=syz-executor.1 [ 1880.504061] FAULT_INJECTION: forcing a failure. [ 1880.504061] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.506686] CPU: 0 PID: 18122 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1880.507749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.509037] Call Trace: [ 1880.509446] dump_stack+0x107/0x167 [ 1880.510011] should_fail.cold+0x5/0xa [ 1880.510607] should_failslab+0x5/0x20 [ 1880.511204] __kmalloc_node_track_caller+0x74/0x3b0 [ 1880.511966] ? rtmsg_fib+0x1b2/0xf40 [ 1880.512528] ? create_object.isra.0+0x3ad/0xa30 [ 1880.513251] __alloc_skb+0xb1/0x5b0 [ 1880.513823] rtmsg_fib+0x1b2/0xf40 [ 1880.514359] ? fib_dump_info+0x1e80/0x1e80 [ 1880.515001] ? trace_hardirqs_on+0x5b/0x180 [ 1880.515669] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1880.516403] ? fib_find_alias+0x1fc/0x270 [ 1880.517038] fib_table_insert+0xa43/0x19a0 [ 1880.517705] ? fib_route_seq_show+0xeb0/0xeb0 [ 1880.518390] ? mark_held_locks+0x9e/0xe0 [ 1880.519013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.519818] ? __local_bh_enable_ip+0x9d/0x100 [ 1880.520524] ? trace_hardirqs_on+0x5b/0x180 [ 1880.521188] ? fib_new_table+0xfb/0x460 [ 1880.521790] fib_magic+0x32d/0x3b0 [ 1880.522318] ? fib_new_table+0x460/0x460 [ 1880.522929] ? lockdep_rtnl_is_held+0x22/0x30 [ 1880.523612] ? ip_mc_up+0x1ac/0x3a0 [ 1880.524176] fib_add_ifaddr+0x4e3/0x580 [ 1880.524772] fib_netdev_event+0x3ac/0x720 [ 1880.525409] raw_notifier_call_chain+0xb3/0x110 [ 1880.526117] call_netdevice_notifiers_info+0xba/0x130 [ 1880.526908] __dev_notify_flags+0x110/0x2c0 [ 1880.527553] ? dev_change_name+0x6b0/0x6b0 [ 1880.528179] ? __dev_change_flags+0x4cf/0x6e0 [ 1880.528854] ? dev_set_allmulti+0x30/0x30 [ 1880.529462] ? dev_ioctl+0x22e/0xd30 [ 1880.530019] ? lock_acquire+0x197/0x470 [ 1880.530600] ? full_name_hash+0xb5/0xf0 [ 1880.531206] dev_change_flags+0x100/0x160 [ 1880.531826] dev_ifsioc+0x5b9/0xa00 [ 1880.532383] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1880.533160] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1880.533947] dev_ioctl+0x23c/0xd30 [ 1880.534466] sock_do_ioctl+0x17d/0x300 [ 1880.535033] ? compat_ifr_data_ioctl+0x180/0x180 [ 1880.535727] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1880.536583] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1880.537363] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1880.538140] ? generic_block_fiemap+0x60/0x60 [ 1880.538791] ? lock_downgrade+0x6d0/0x6d0 [ 1880.539405] sock_ioctl+0x3ef/0x710 [ 1880.539937] ? dlci_ioctl_set+0x30/0x30 [ 1880.540522] ? selinux_file_ioctl+0xb6/0x270 [ 1880.541173] ? dlci_ioctl_set+0x30/0x30 [ 1880.541765] __x64_sys_ioctl+0x19a/0x210 [ 1880.542361] do_syscall_64+0x33/0x40 [ 1880.542908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1880.543652] RIP: 0033:0x7fb25f64db19 [ 1880.544204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.546896] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1880.548005] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1880.549041] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1880.550076] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.551103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.552144] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:21:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {0xe}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x3}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x244000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x1) syz_genetlink_get_family_id$ipvs(0x0, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) lseek(r0, 0x1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fe1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x403f}) fallocate(r0, 0x20, 0x400, 0xfffffffffffffffd) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000005c0)={0x1, 0x1, 0x1000, 0xa1, &(0x7f0000000300)="8f5fe45076579a27474308f84a78398f8be4c22ec9ba63239f84e305e5e3ccd93faaf084b1d45d1f193a0437fb70f6e2abc9049ca0d30a197209c2154a0decd49e491a0ba26ed813b299578fe9d09e1c6886338449eb24a3e5e8ac232059d13209d94d1c2472f058be84afbd8e4bb7943f8b10ea04c1977532419403197e2555f908a1e7bcf04bfae7dc54c41bb81478b78407d5d0336bc3596b11a136ceb8cac6", 0x53, 0x0, &(0x7f0000000500)="3a54f46a74a03e2e67982124846bb1ef39b246cdec1c7b3c3ff7b1615a39a9951c5f3264e29d75c7d7f670f965f19001bc0d6d2e313d388e956fbe83d726fdccd9e81da2eab9fd94f8b134ea60e80f39d97fb5"}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) unshare(0x48020200) 11:21:26 executing program 1: listen(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x1079) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x1, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x41) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000016a59650fdfd7f16d9b", @ANYRES32=r2, @ANYBLOB="fd00fc3bd04f3ded3be9f7"]) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x40, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}]}, 0x40}}, 0x0) [ 1880.601757] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1880.653501] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1880.654931] CPU: 0 PID: 18125 Comm: syz-executor.1 Not tainted 5.10.242 #1 [ 1880.655869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.656985] Call Trace: [ 1880.657349] dump_stack+0x107/0x167 [ 1880.657850] sysfs_warn_dup.cold+0x1c/0x29 [ 1880.658433] sysfs_do_create_link_sd+0x122/0x140 [ 1880.659083] sysfs_create_link+0x5f/0xc0 [ 1880.659635] device_add+0x703/0x1c50 [ 1880.660147] ? devlink_add_symlinks+0x970/0x970 [ 1880.660777] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1880.661491] wiphy_register+0x1da6/0x2850 [ 1880.662069] ? wiphy_unregister+0xb90/0xb90 [ 1880.662663] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1880.663381] ieee80211_register_hw+0x23c5/0x38b0 [ 1880.664040] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1880.664704] ? net_generic+0xdb/0x2b0 [ 1880.665247] ? lockdep_init_map_type+0x2c7/0x780 [ 1880.665966] ? memset+0x20/0x50 [ 1880.666428] ? __hrtimer_init+0x12c/0x270 [ 1880.667009] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1880.667708] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1880.668358] ? hwsim_new_radio_nl+0x967/0x1080 [ 1880.669003] ? memcpy+0x39/0x60 [ 1880.669466] hwsim_new_radio_nl+0x991/0x1080 [ 1880.670108] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1880.670841] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1880.671752] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1880.672657] genl_family_rcv_msg_doit+0x22d/0x330 [ 1880.673329] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1880.674248] ? cap_capable+0x1cd/0x230 [ 1880.674801] ? ns_capable+0xe2/0x110 [ 1880.675317] genl_rcv_msg+0x36a/0x5a0 [ 1880.675851] ? genl_get_cmd+0x480/0x480 [ 1880.676402] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1880.677116] ? genl_get_cmd+0x480/0x480 [ 1880.677704] netlink_rcv_skb+0x14b/0x430 [ 1880.678269] ? genl_get_cmd+0x480/0x480 [ 1880.678818] ? netlink_ack+0xab0/0xab0 [ 1880.679366] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1880.680003] ? is_vmalloc_addr+0x7b/0xb0 [ 1880.680567] genl_rcv+0x24/0x40 [ 1880.681033] netlink_unicast+0x6ce/0xa00 [ 1880.681604] ? netlink_attachskb+0xab0/0xab0 [ 1880.682234] netlink_sendmsg+0x90f/0xe00 [ 1880.682804] ? netlink_unicast+0xa00/0xa00 [ 1880.683403] ? netlink_unicast+0xa00/0xa00 [ 1880.683986] __sock_sendmsg+0x154/0x190 [ 1880.684548] ____sys_sendmsg+0x70d/0x870 [ 1880.685114] ? sock_write_iter+0x3d0/0x3d0 [ 1880.685711] ? do_recvmmsg+0x6d0/0x6d0 [ 1880.686258] ? SOFTIRQ_verbose+0x10/0x10 [ 1880.686824] ___sys_sendmsg+0xf3/0x170 [ 1880.687390] ? sendmsg_copy_msghdr+0x160/0x160 [ 1880.688029] ? __fget_files+0x2cf/0x520 [ 1880.688579] ? lock_downgrade+0x6d0/0x6d0 [ 1880.689164] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1880.689916] ? trace_hardirqs_on+0x5b/0x180 [ 1880.690539] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1880.691288] ? __fget_files+0x2f8/0x520 [ 1880.691847] ? __fget_light+0xea/0x290 [ 1880.692387] __sys_sendmsg+0xe5/0x1b0 [ 1880.692907] ? __sys_sendmsg_sock+0x40/0x40 [ 1880.693507] ? io_schedule_timeout+0x140/0x140 [ 1880.694163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.694875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.695599] ? trace_hardirqs_on+0x5b/0x180 [ 1880.696197] do_syscall_64+0x33/0x40 [ 1880.696721] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1880.697432] RIP: 0033:0x7fea2746db19 [ 1880.697959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.700497] RSP: 002b:00007fea249e3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1880.701543] RAX: ffffffffffffffda RBX: 00007fea27580f60 RCX: 00007fea2746db19 [ 1880.702562] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 1880.703549] RBP: 00007fea274c7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1880.704537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1880.705540] R13: 00007ffc90d72a7f R14: 00007fea249e3300 R15: 0000000000022000 [ 1880.767372] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1880.768620] CPU: 0 PID: 18130 Comm: syz-executor.1 Not tainted 5.10.242 #1 [ 1880.769532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.770637] Call Trace: [ 1880.770989] dump_stack+0x107/0x167 [ 1880.771477] sysfs_warn_dup.cold+0x1c/0x29 [ 1880.772044] sysfs_do_create_link_sd+0x122/0x140 [ 1880.772660] sysfs_create_link+0x5f/0xc0 [ 1880.773205] device_add+0x703/0x1c50 [ 1880.773721] ? devlink_add_symlinks+0x970/0x970 [ 1880.774333] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1880.775034] wiphy_register+0x1da6/0x2850 [ 1880.775583] ? wiphy_unregister+0xb90/0xb90 [ 1880.776165] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1880.776870] ieee80211_register_hw+0x23c5/0x38b0 [ 1880.777511] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1880.778143] ? net_generic+0xdb/0x2b0 [ 1880.778664] ? lockdep_init_map_type+0x2c7/0x780 [ 1880.779284] ? memset+0x20/0x50 [ 1880.779726] ? __hrtimer_init+0x12c/0x270 [ 1880.780280] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1880.780942] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1880.781531] ? hwsim_new_radio_nl+0x967/0x1080 [ 1880.782148] ? memcpy+0x39/0x60 [ 1880.782575] hwsim_new_radio_nl+0x991/0x1080 [ 1880.783161] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1880.783841] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1880.784693] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1880.785547] genl_family_rcv_msg_doit+0x22d/0x330 [ 1880.786192] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1880.787047] ? cap_capable+0x1cd/0x230 [ 1880.787559] ? ns_capable+0xe2/0x110 [ 1880.788047] genl_rcv_msg+0x36a/0x5a0 [ 1880.788567] ? genl_get_cmd+0x480/0x480 [ 1880.789086] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1880.789775] ? lock_release+0x680/0x680 [ 1880.790294] ? netlink_deliver_tap+0xf4/0xcc0 [ 1880.790871] netlink_rcv_skb+0x14b/0x430 [ 1880.791396] ? genl_get_cmd+0x480/0x480 [ 1880.791908] ? netlink_ack+0xab0/0xab0 [ 1880.792407] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1880.793000] ? is_vmalloc_addr+0x7b/0xb0 [ 1880.793521] genl_rcv+0x24/0x40 [ 1880.793960] netlink_unicast+0x6ce/0xa00 [ 1880.794478] ? netlink_attachskb+0xab0/0xab0 [ 1880.795057] netlink_sendmsg+0x90f/0xe00 [ 1880.795590] ? netlink_unicast+0xa00/0xa00 [ 1880.796138] ? netlink_unicast+0xa00/0xa00 [ 1880.796692] __sock_sendmsg+0x154/0x190 [ 1880.797208] ____sys_sendmsg+0x70d/0x870 [ 1880.797747] ? sock_write_iter+0x3d0/0x3d0 [ 1880.798287] ? do_recvmmsg+0x6d0/0x6d0 [ 1880.798785] ? SOFTIRQ_verbose+0x10/0x10 [ 1880.799325] ___sys_sendmsg+0xf3/0x170 [ 1880.799827] ? sendmsg_copy_msghdr+0x160/0x160 [ 1880.800423] ? __fget_files+0x2cf/0x520 [ 1880.800940] ? lock_downgrade+0x6d0/0x6d0 [ 1880.801473] ? SOFTIRQ_verbose+0x10/0x10 [ 1880.802010] ? __fget_files+0x2f8/0x520 [ 1880.802515] ? __fget_light+0xea/0x290 [ 1880.803009] __sys_sendmsg+0xe5/0x1b0 [ 1880.803490] ? __sys_sendmsg_sock+0x40/0x40 [ 1880.804046] ? kfree+0x1ab/0x340 [ 1880.804472] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.805148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.805830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.806479] ? trace_hardirqs_on+0x5b/0x180 [ 1880.807023] do_syscall_64+0x33/0x40 [ 1880.807493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1880.808140] RIP: 0033:0x7fea2746db19 [ 1880.808610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.810970] RSP: 002b:00007fea249a1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1880.811952] RAX: ffffffffffffffda RBX: 00007fea275810e0 RCX: 00007fea2746db19 [ 1880.812846] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 1880.813781] RBP: 00007fea274c7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1880.814676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1880.815597] R13: 00007ffc90d72a7f R14: 00007fea249a1300 R15: 0000000000022000 [ 1885.481161] Bluetooth: hci2: command 0x0409 tx timeout [ 1887.529129] Bluetooth: hci2: command 0x041b tx timeout [ 1889.577114] Bluetooth: hci2: command 0x040f tx timeout [ 1890.444557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.446434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1890.449152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1890.509430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.511273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1890.513724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1890.672572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1890.680013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1890.689722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1891.626191] Bluetooth: hci2: command 0x0419 tx timeout 11:21:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r0, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000400)=0x1) 11:21:51 executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:21:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4c20, 0x7e, @ipv4={'\x00', '\xff\xff', @remote}, 0x20000}, 0x1c) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x600000f, 0x50, 0xffffffffffffffff, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x2, 0x583, 0x30, @loopback, @remote, 0x10, 0x7800, 0x1fffe, 0x9}}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4e20, 0x3ff, 0x4e24, 0xf7, 0x2, 0x80, 0x0, 0x11, r6, r7}, {0x7, 0x7, 0x86e8, 0x7ff, 0x28, 0x2, 0x6, 0xdb}, {0x200, 0x1ff}, 0xb1, 0x6e6bbb, 0x1, 0x1, 0x3, 0x3}, {{@in=@private=0xa010102, 0x4d5, 0xff}, 0xa, @in6=@private2, 0x0, 0x2, 0x3, 0x7, 0x1, 0x7, 0x7fff}}, 0xe8) dup2(r5, r4) syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x0, 0xa}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000080)=@hci}, 0x0) syz_io_uring_submit(r8, r1, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r2}}, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xffffc232, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) 11:21:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:21:51 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:21:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 79) [ 1905.710394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1905.718532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1905.726675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:21:51 executing program 1: syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) timer_delete(0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000240)=0x0) timer_gettime(r0, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f00000002c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vcsa(&(0x7f0000000080), 0x10001, 0x40000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x7fff, 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0xaa5, 0x9, 0x9, 0xfffffffd, 0x11b2}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private0, r3}, 0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/machinecheck', 0x6281, 0x19) timer_delete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clone3(&(0x7f0000000880)={0x100, &(0x7f0000000640), &(0x7f0000000440), &(0x7f0000000600), {0x80041}, &(0x7f0000001e00)=""/102400, 0x19000, &(0x7f0000000980)=""/231, &(0x7f0000000840)}, 0x58) clone3(&(0x7f00000001c0)={0xc8182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1905.733497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1905.740741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1905.743582] FAULT_INJECTION: forcing a failure. [ 1905.743582] name failslab, interval 1, probability 0, space 0, times 0 [ 1905.745011] CPU: 0 PID: 18601 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1905.745866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1905.746905] Call Trace: [ 1905.747233] dump_stack+0x107/0x167 [ 1905.747684] should_fail.cold+0x5/0xa [ 1905.748158] ? create_object.isra.0+0x3a/0xa30 [ 1905.748728] should_failslab+0x5/0x20 [ 1905.749202] kmem_cache_alloc+0x5b/0x310 [ 1905.749706] create_object.isra.0+0x3a/0xa30 [ 1905.750253] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1905.750884] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1905.751512] ? rtmsg_fib+0x1b2/0xf40 [ 1905.751969] ? create_object.isra.0+0x3ad/0xa30 [ 1905.752547] __alloc_skb+0xb1/0x5b0 [ 1905.753001] rtmsg_fib+0x1b2/0xf40 [ 1905.753444] ? fib_dump_info+0x1e80/0x1e80 [ 1905.753971] ? trace_hardirqs_on+0x5b/0x180 [ 1905.754499] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1905.755108] ? fib_find_alias+0x1fc/0x270 [ 1905.755618] fib_table_insert+0xa43/0x19a0 [ 1905.756152] ? fib_route_seq_show+0xeb0/0xeb0 [ 1905.756708] ? mark_held_locks+0x9e/0xe0 [ 1905.757212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1905.757856] ? __local_bh_enable_ip+0x9d/0x100 [ 1905.758424] ? trace_hardirqs_on+0x5b/0x180 [ 1905.758950] ? fib_new_table+0xfb/0x460 [ 1905.759442] fib_magic+0x32d/0x3b0 [ 1905.759890] ? fib_new_table+0x460/0x460 [ 1905.760409] ? lockdep_rtnl_is_held+0x22/0x30 [ 1905.760965] ? ip_mc_up+0x1ac/0x3a0 [ 1905.761419] fib_add_ifaddr+0x4e3/0x580 [ 1905.761922] fib_netdev_event+0x3ac/0x720 [ 1905.762445] raw_notifier_call_chain+0xb3/0x110 [ 1905.763050] call_netdevice_notifiers_info+0xba/0x130 [ 1905.763687] __dev_notify_flags+0x110/0x2c0 [ 1905.764223] ? dev_change_name+0x6b0/0x6b0 [ 1905.764742] ? __dev_change_flags+0x4cf/0x6e0 [ 1905.765304] ? dev_set_allmulti+0x30/0x30 [ 1905.765826] ? dev_ioctl+0x22e/0xd30 [ 1905.766292] ? lock_acquire+0x197/0x470 [ 1905.766777] ? full_name_hash+0xb5/0xf0 [ 1905.767268] dev_change_flags+0x100/0x160 [ 1905.767788] dev_ifsioc+0x5b9/0xa00 [ 1905.768239] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1905.768894] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1905.769565] dev_ioctl+0x23c/0xd30 [ 1905.770017] sock_do_ioctl+0x17d/0x300 [ 1905.770500] ? compat_ifr_data_ioctl+0x180/0x180 [ 1905.771097] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1905.771810] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1905.772459] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1905.773120] ? generic_block_fiemap+0x60/0x60 [ 1905.773674] ? lock_downgrade+0x6d0/0x6d0 [ 1905.774199] sock_ioctl+0x3ef/0x710 [ 1905.774656] ? dlci_ioctl_set+0x30/0x30 [ 1905.775156] ? selinux_file_ioctl+0xb6/0x270 [ 1905.775700] ? dlci_ioctl_set+0x30/0x30 [ 1905.776195] __x64_sys_ioctl+0x19a/0x210 [ 1905.776701] do_syscall_64+0x33/0x40 [ 1905.777164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1905.777799] RIP: 0033:0x7fb25f64db19 [ 1905.778265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1905.780530] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1905.781467] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1905.782355] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1905.783235] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.784119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1905.784993] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1905.798445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1905.807666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1905.816651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1905.836359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:21:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 80) 11:21:51 executing program 0: r0 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="158f93d625ef7ece881c252572ecdaa97c34bb2d06abd97851211975e191e76d33eecb7155041ba7ab93fc17303f819c24b827f820a19779130ec0953f804efe9654be6ec09695d6c9cf09e9", 0x4c, 0x3}], 0x0, &(0x7f00000001c0)={[{'('}, {'[$\'-'}, {'*'}, {'#'}, {}, {}, {}, {'^%%\xf2'}, {'}'}], [{@subj_user={'subj_user', 0x3d, '#.(-'}}]}) openat(r0, &(0x7f0000000200)='./file0\x00', 0x200, 0x80) creat(&(0x7f0000000240)='./file1\x00', 0xc1) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x5}}, './file1\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="3ca7050e30696a7f469f7ba50ece2c28b6eec187ac74af46a1987403dc9b7438197d368af8b005421148c9e500cfb435c36496083e97e97651144e31fb16205da55ce2639fa213dea149318f2dd9b00b62cf192738f84a51a29e0d10491d31309155d1f4f0c6c0a82504d6aac20feb6cdc6446b830e9df6c8c554b37a936218249bd0eb6540f1bfed349f25946fa5cf4f9bdf8096693ee3571736eae549dbfa6c788cd92b047440896543ef38991c8c3a25bd8f828dd8f459505e44337398fa76637", @ANYRESOCT], 0x120}}, 0x0) 11:21:51 executing program 1: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) unlink(&(0x7f0000000300)='./file0\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) signalfd4(r4, &(0x7f0000000340)={[0xfb]}, 0x8, 0x80000) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x733}]) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1905.917250] FAULT_INJECTION: forcing a failure. [ 1905.917250] name failslab, interval 1, probability 0, space 0, times 0 [ 1905.918853] CPU: 0 PID: 18618 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1905.919697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1905.920735] Call Trace: [ 1905.921067] dump_stack+0x107/0x167 [ 1905.921529] should_fail.cold+0x5/0xa [ 1905.922013] ? memset+0x20/0x50 [ 1905.922429] should_failslab+0x5/0x20 [ 1905.922907] __kmalloc_node_track_caller+0x74/0x3b0 [ 1905.923529] ? netlink_trim+0x1ee/0x250 [ 1905.924026] ? memcpy+0x39/0x60 [ 1905.924444] pskb_expand_head+0x15a/0x1040 [ 1905.924975] ? fib_nexthop_info+0x32c/0xa60 [ 1905.925522] netlink_trim+0x1ee/0x250 [ 1905.926009] netlink_broadcast_filtered+0x62/0xf50 [ 1905.926625] ? fib_create_info+0x4a30/0x4a30 [ 1905.927172] ? rtmsg_fib+0x1b2/0xf40 [ 1905.927639] nlmsg_notify+0x94/0x290 [ 1905.928104] ? rtnl_notify+0xa9/0xf0 [ 1905.928568] rtmsg_fib+0x399/0xf40 [ 1905.929017] ? fib_dump_info+0x1e80/0x1e80 [ 1905.929548] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1905.930213] ? fib_find_alias+0x1fc/0x270 [ 1905.930731] fib_table_insert+0xa43/0x19a0 [ 1905.931274] ? fib_route_seq_show+0xeb0/0xeb0 [ 1905.931836] ? mark_held_locks+0x9e/0xe0 [ 1905.932353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1905.933010] ? __local_bh_enable_ip+0x9d/0x100 [ 1905.933581] ? trace_hardirqs_on+0x5b/0x180 [ 1905.934125] ? fib_new_table+0xfb/0x460 [ 1905.934628] fib_magic+0x32d/0x3b0 [ 1905.935075] ? fib_new_table+0x460/0x460 [ 1905.935597] ? lockdep_rtnl_is_held+0x22/0x30 [ 1905.936160] ? ip_mc_up+0x1ac/0x3a0 [ 1905.936614] fib_add_ifaddr+0x4e3/0x580 [ 1905.937116] fib_netdev_event+0x3ac/0x720 [ 1905.937643] raw_notifier_call_chain+0xb3/0x110 [ 1905.938238] call_netdevice_notifiers_info+0xba/0x130 [ 1905.938889] __dev_notify_flags+0x110/0x2c0 [ 1905.939432] ? dev_change_name+0x6b0/0x6b0 [ 1905.939963] ? __dev_change_flags+0x4cf/0x6e0 [ 1905.940527] ? dev_set_allmulti+0x30/0x30 [ 1905.941047] ? dev_ioctl+0x22e/0xd30 [ 1905.941514] ? lock_acquire+0x197/0x470 [ 1905.942016] ? full_name_hash+0xb5/0xf0 [ 1905.942519] dev_change_flags+0x100/0x160 [ 1905.943037] dev_ifsioc+0x5b9/0xa00 [ 1905.943496] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1905.944149] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1905.944814] dev_ioctl+0x23c/0xd30 [ 1905.945266] sock_do_ioctl+0x17d/0x300 [ 1905.945752] ? compat_ifr_data_ioctl+0x180/0x180 [ 1905.946378] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1905.947135] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1905.947814] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1905.948507] ? generic_block_fiemap+0x60/0x60 [ 1905.949089] ? lock_downgrade+0x6d0/0x6d0 [ 1905.949648] sock_ioctl+0x3ef/0x710 [ 1905.950126] ? dlci_ioctl_set+0x30/0x30 [ 1905.950657] ? selinux_file_ioctl+0xb6/0x270 [ 1905.951243] ? dlci_ioctl_set+0x30/0x30 [ 1905.951764] __x64_sys_ioctl+0x19a/0x210 [ 1905.952310] do_syscall_64+0x33/0x40 [ 1905.952799] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1905.953471] RIP: 0033:0x7fb25f64db19 [ 1905.953965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1905.956409] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1905.957423] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1905.958388] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1905.959331] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.960279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1905.961214] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:21:52 executing program 0: r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaaaaaaaaaad94, &(0x7f00000000c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='seclabel,defcontext=root,euid<', @ANYRESDEC=0xee01, @ANYBLOB=',euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c005ec337b955d49165f9528f8ceb26ea68c31f600af17dab4043c3b351a76b306b29233a54b75140b02bbaeb0342db952b70da7453a761e1c70e65195c32929fe2061f06bf00adc35b215246acd02c0fb7f531ed8077e2de861e0f19bb524f160904c4913060ab489c12f2fc9fb7ff8a7be9e1bdde44d75f921e7f5a272cb6479a5755053eed4f81660fb3e263fbb7f21a34d30c310c1e077add4abc641afda50fff7f000000000000ab05235f378671149ba25dbe21c6bd08dc608fbb1dc1249a579a4d"]) move_mount(r0, &(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@loose}], [{@smackfshat={'smackfshat', 0x3d, 'nfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nfs\x00'}}, {@obj_role={'obj_role', 0x3d, 'nfs\x00'}}]}}) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000280)) r3 = socket$inet(0x2, 0xa, 0x0) dup2(r3, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r2, 0x0) syz_io_uring_setup(0x717c, &(0x7f00000002c0)={0x0, 0x52e3, 0x20, 0x1, 0x154, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) openat(r2, &(0x7f0000000000)='./file0/file0\x00', 0x2000, 0x0) 11:21:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 81) 11:21:52 executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:21:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1906.147896] FAULT_INJECTION: forcing a failure. [ 1906.147896] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.150765] CPU: 1 PID: 18629 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1906.152345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1906.154247] Call Trace: [ 1906.154851] dump_stack+0x107/0x167 [ 1906.155683] should_fail.cold+0x5/0xa [ 1906.156555] ? create_object.isra.0+0x3a/0xa30 [ 1906.157592] should_failslab+0x5/0x20 [ 1906.158473] kmem_cache_alloc+0x5b/0x310 [ 1906.159406] create_object.isra.0+0x3a/0xa30 [ 1906.160410] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1906.161576] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1906.162739] ? netlink_trim+0x1ee/0x250 [ 1906.163637] ? memcpy+0x39/0x60 [ 1906.164400] pskb_expand_head+0x15a/0x1040 [ 1906.165359] ? fib_nexthop_info+0x32c/0xa60 [ 1906.166363] netlink_trim+0x1ee/0x250 [ 1906.167234] netlink_broadcast_filtered+0x62/0xf50 [ 1906.168347] ? fib_create_info+0x4a30/0x4a30 [ 1906.169333] ? rtmsg_fib+0x1b2/0xf40 [ 1906.170180] ? create_object.isra.0+0x3ad/0xa30 [ 1906.171232] nlmsg_notify+0x94/0x290 [ 1906.172055] ? rtnl_notify+0xa9/0xf0 [ 1906.172877] rtmsg_fib+0x399/0xf40 [ 1906.173674] ? fib_dump_info+0x1e80/0x1e80 [ 1906.174615] ? fib_insert_alias.isra.0+0x19c/0xd80 [ 1906.175697] ? fib_find_alias+0x1fc/0x270 [ 1906.176613] fib_table_insert+0xa43/0x19a0 [ 1906.177570] ? fib_route_seq_show+0xeb0/0xeb0 [ 1906.178571] ? mark_held_locks+0x9e/0xe0 [ 1906.179473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1906.180622] ? __local_bh_enable_ip+0x9d/0x100 [ 1906.181626] ? trace_hardirqs_on+0x5b/0x180 [ 1906.182578] ? fib_new_table+0xfb/0x460 [ 1906.183461] fib_magic+0x32d/0x3b0 [ 1906.184247] ? fib_new_table+0x460/0x460 [ 1906.185168] ? lockdep_rtnl_is_held+0x22/0x30 [ 1906.186199] ? ip_mc_up+0x1ac/0x3a0 [ 1906.186996] fib_add_ifaddr+0x4e3/0x580 [ 1906.187873] fib_netdev_event+0x3ac/0x720 [ 1906.188786] raw_notifier_call_chain+0xb3/0x110 [ 1906.189820] call_netdevice_notifiers_info+0xba/0x130 [ 1906.190956] __dev_notify_flags+0x110/0x2c0 [ 1906.191897] ? dev_change_name+0x6b0/0x6b0 [ 1906.192815] ? __dev_change_flags+0x4cf/0x6e0 [ 1906.193804] ? dev_set_allmulti+0x30/0x30 [ 1906.194723] ? dev_ioctl+0x22e/0xd30 [ 1906.195538] ? lock_acquire+0x197/0x470 [ 1906.196404] ? full_name_hash+0xb5/0xf0 [ 1906.197281] dev_change_flags+0x100/0x160 [ 1906.198200] dev_ifsioc+0x5b9/0xa00 [ 1906.198998] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1906.200140] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1906.201296] dev_ioctl+0x23c/0xd30 [ 1906.202083] sock_do_ioctl+0x17d/0x300 [ 1906.202928] ? compat_ifr_data_ioctl+0x180/0x180 [ 1906.203962] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1906.205207] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1906.206336] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1906.207468] ? generic_block_fiemap+0x60/0x60 [ 1906.208439] ? lock_downgrade+0x6d0/0x6d0 [ 1906.209344] sock_ioctl+0x3ef/0x710 [ 1906.210141] ? dlci_ioctl_set+0x30/0x30 [ 1906.211006] ? selinux_file_ioctl+0xb6/0x270 [ 1906.211964] ? dlci_ioctl_set+0x30/0x30 [ 1906.212831] __x64_sys_ioctl+0x19a/0x210 [ 1906.213720] do_syscall_64+0x33/0x40 [ 1906.214534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1906.215634] RIP: 0033:0x7fb25f64db19 [ 1906.216444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1906.220427] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1906.222073] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1906.223601] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1906.225128] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1906.226662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1906.228189] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:21:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004074, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000010000000000972a4d3317f9b95d83dd928a7970fd75dfc75b112d21f0d925b9c9696f6e2c00400000000000"]) [ 1906.258605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1906.264393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1906.294835] EXT4-fs (sda): Unrecognized mount option "" or missing value 11:21:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:21:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1906.324668] EXT4-fs (sda): Unrecognized mount option "" or missing value [ 1906.328444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1906.334676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1906.337686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1906.353682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1906.370946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:22:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:06 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:06 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:06 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x81) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0xb, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x419}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}, @dstopts={{0x78, 0x29, 0x37, {0x33, 0xc, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x35, 0x34, "6c68b924845d5e97374bfe429674f542584e0870b85b38cf5d9ec0f9519f7e996ed3092f451c148f0eb7610c4ad1661939e2fb9c"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0xb8}}], 0x2, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1800004, 0x2010, r1, 0x8f7bc000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="3c03000000000000040103c110fc0200000000004f5ce07cfc0a971b0000e4ff0001000001000000"], 0x28) 11:22:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 82) 11:22:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1920.786960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1920.787826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1920.794469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1920.805489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1920.808509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1920.818675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1920.842939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1920.845839] FAULT_INJECTION: forcing a failure. [ 1920.845839] name failslab, interval 1, probability 0, space 0, times 0 [ 1920.847441] CPU: 0 PID: 18664 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1920.848403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1920.849560] Call Trace: [ 1920.849926] dump_stack+0x107/0x167 [ 1920.850439] should_fail.cold+0x5/0xa [ 1920.850974] ? ipv6_add_addr+0x368/0x1fa0 [ 1920.851554] should_failslab+0x5/0x20 [ 1920.852087] kmem_cache_alloc_trace+0x55/0x320 [ 1920.852719] ? blocking_notifier_call_chain+0x13a/0x190 [ 1920.853468] ipv6_add_addr+0x368/0x1fa0 [ 1920.854020] ? mark_lock+0xf5/0x2df0 [ 1920.854554] ? lock_chain_count+0x20/0x20 [ 1920.855133] ? lock_chain_count+0x20/0x20 [ 1920.855711] ? inet6_dump_ifaddr+0x20/0x20 [ 1920.856302] ? find_held_lock+0x2c/0x110 [ 1920.856876] add_addr+0xcf/0x2c0 [ 1920.857364] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1920.858068] ? mark_held_locks+0x9e/0xe0 [ 1920.858636] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1920.859370] ? __local_bh_enable_ip+0x9d/0x100 [ 1920.860007] ? trace_hardirqs_on+0x5b/0x180 [ 1920.860605] ? ipv6_find_idev+0x174/0x220 [ 1920.861189] addrconf_notify+0xf7c/0x2390 [ 1920.861779] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1920.862504] ? inet6_ifinfo_notify+0x150/0x150 [ 1920.863136] ? failover_register+0x530/0x530 [ 1920.863748] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1920.864505] ? igmp_netdev_event+0x31/0x810 [ 1920.865108] ? ipmr_device_event+0x192/0x1f0 [ 1920.865723] raw_notifier_call_chain+0xb3/0x110 [ 1920.866385] call_netdevice_notifiers_info+0xba/0x130 [ 1920.867099] __dev_notify_flags+0x110/0x2c0 [ 1920.867695] ? dev_change_name+0x6b0/0x6b0 [ 1920.868276] ? __dev_change_flags+0x4cf/0x6e0 [ 1920.868900] ? dev_set_allmulti+0x30/0x30 [ 1920.869469] ? dev_ioctl+0x22e/0xd30 [ 1920.869985] ? lock_acquire+0x197/0x470 [ 1920.870540] ? full_name_hash+0xb5/0xf0 11:22:06 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) r0 = syz_io_uring_complete(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setown(r1, 0x8, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x70bd28, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x804) accept4$unix(0xffffffffffffffff, &(0x7f0000004800)=@abs, &(0x7f0000004880)=0x6e, 0x80800) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000008140)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000008100)}, 0x0, 0x0, 0x3, 0x4, 0xbe, 0x200, 0x100, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$nfs(&(0x7f00000081c0), 0x0, 0x9, 0x3, &(0x7f00000083c0)=[{&(0x7f0000008240)="82a05b6ed5728d16bf0a00869ae6e995f90ad373b8cde0f2fc14f0d0320b965c4b5ada339a5304502549a124bcb84f1449f2d450506088f1df02", 0x3a, 0x2}, {0x0, 0x0, 0x1}, {&(0x7f0000008300)="9ebfa9186f1cdc482816bd71230d62816661e38e6da1dd21177e54e0cca564e2225d595d9654ef016381a1f95ec04e2009160d64aaf2e3bd0e04266b48d2751d1a0cfd4e9beda112535d8008e29d8eba819d042c4319cb717408aa399a909ba64aee7095127cfe3916281baad2094abaeb6c3a4bf1fca15586e5afde2f1b57b64148e470d75b474c2ee610de3c430fc239af956f464f3ad8c1bc4de52529b61243aa248a5c36a739ffb44c7ea4f6bbc3612fe0", 0xb3, 0x7ff}], 0x1000032, &(0x7f0000008440)={[{'\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, {'syz1\x00'}, {'@&%#&}'}, {}, {')$%'}, {'\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, {'\'-'}, {}, {'syz1\x00'}], [{@euid_gt}, {@uid_gt}, {@euid_lt}, {@appraise_type}, {@audit}, {@dont_hash}, {@fsname={'fsname', 0x3d, '$+'}}]}) syz_io_uring_setup(0x2e5f, &(0x7f0000008580)={0x0, 0x22ca, 0x4, 0x3, 0xf8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000008600), &(0x7f0000008640)) [ 1920.871096] dev_change_flags+0x100/0x160 [ 1920.871873] dev_ifsioc+0x5b9/0xa00 [ 1920.872375] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1920.873099] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1920.873826] dev_ioctl+0x23c/0xd30 [ 1920.874332] sock_do_ioctl+0x17d/0x300 [ 1920.874873] ? compat_ifr_data_ioctl+0x180/0x180 [ 1920.875530] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1920.876328] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1920.877044] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1920.877766] ? generic_block_fiemap+0x60/0x60 [ 1920.878401] ? lock_downgrade+0x6d0/0x6d0 [ 1920.878975] sock_ioctl+0x3ef/0x710 [ 1920.879476] ? dlci_ioctl_set+0x30/0x30 [ 1920.880030] ? selinux_file_ioctl+0xb6/0x270 [ 1920.880641] ? dlci_ioctl_set+0x30/0x30 [ 1920.881193] __x64_sys_ioctl+0x19a/0x210 [ 1920.881761] do_syscall_64+0x33/0x40 [ 1920.882280] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1920.882985] RIP: 0033:0x7fb25f64db19 [ 1920.883493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1920.886006] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1920.887061] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1920.888039] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1920.889014] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1920.889996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1920.890977] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1920.897103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1920.912873] loop1: detected capacity change from 0 to 3584 11:22:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 83) 11:22:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f00082c0020010078000000000000000000000000ff0200000000000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205fc6de9848ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd7eccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f636259dd752ed823a3b6cb04eeae71035a8446ef221d39d3504136905c2a58700000000000020ae67b64fea2e305f45ed9c0102c04c8552bf719cb84ff6184a3628d3f783650e140ce6b1c3d2a80c0a55f178d30fd2907bf084450fa09588a1b4eb194cf178fffc77509cc2d4ed7f"], 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xaf2) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r1}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd_index=0x7, 0x1e, &(0x7f0000000000)=""/25, 0x19, 0x1b, 0x1, {0x0, r1}}, 0x0) syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x43}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) [ 1921.003793] FAULT_INJECTION: forcing a failure. [ 1921.003793] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.005365] CPU: 0 PID: 18685 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1921.006273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.007361] Call Trace: [ 1921.007698] dump_stack+0x107/0x167 [ 1921.008193] should_fail.cold+0x5/0xa [ 1921.008684] ? create_object.isra.0+0x3a/0xa30 [ 1921.009285] should_failslab+0x5/0x20 [ 1921.009779] kmem_cache_alloc+0x5b/0x310 [ 1921.010329] create_object.isra.0+0x3a/0xa30 [ 1921.010898] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1921.011570] kmem_cache_alloc_trace+0x151/0x320 [ 1921.012179] ? blocking_notifier_call_chain+0x13a/0x190 [ 1921.012874] ipv6_add_addr+0x368/0x1fa0 [ 1921.013400] ? mark_lock+0xf5/0x2df0 [ 1921.013886] ? lock_chain_count+0x20/0x20 [ 1921.014439] ? lock_chain_count+0x20/0x20 [ 1921.014991] ? inet6_dump_ifaddr+0x20/0x20 [ 1921.015549] ? find_held_lock+0x2c/0x110 [ 1921.016086] add_addr+0xcf/0x2c0 [ 1921.016533] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1921.017188] ? mark_held_locks+0x9e/0xe0 [ 1921.017717] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.018402] ? __local_bh_enable_ip+0x9d/0x100 [ 1921.018990] ? trace_hardirqs_on+0x5b/0x180 [ 1921.019533] ? ipv6_find_idev+0x174/0x220 [ 1921.020071] addrconf_notify+0xf7c/0x2390 [ 1921.020615] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1921.021286] ? inet6_ifinfo_notify+0x150/0x150 [ 1921.021873] ? failover_register+0x530/0x530 [ 1921.022447] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1921.023153] ? igmp_netdev_event+0x31/0x810 [ 1921.023714] ? ipmr_device_event+0x192/0x1f0 [ 1921.024282] raw_notifier_call_chain+0xb3/0x110 [ 1921.024884] call_netdevice_notifiers_info+0xba/0x130 [ 1921.025551] __dev_notify_flags+0x110/0x2c0 [ 1921.026117] ? dev_change_name+0x6b0/0x6b0 [ 1921.026662] ? __dev_change_flags+0x4cf/0x6e0 [ 1921.027245] ? dev_set_allmulti+0x30/0x30 [ 1921.027781] ? dev_ioctl+0x22e/0xd30 [ 1921.028261] ? lock_acquire+0x197/0x470 [ 1921.028775] ? full_name_hash+0xb5/0xf0 [ 1921.029292] dev_change_flags+0x100/0x160 [ 1921.029827] dev_ifsioc+0x5b9/0xa00 [ 1921.030307] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1921.030983] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1921.031666] dev_ioctl+0x23c/0xd30 [ 1921.032134] sock_do_ioctl+0x17d/0x300 [ 1921.032630] ? compat_ifr_data_ioctl+0x180/0x180 [ 1921.033238] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1921.033971] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1921.034640] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1921.035309] ? generic_block_fiemap+0x60/0x60 [ 1921.035878] ? lock_downgrade+0x6d0/0x6d0 [ 1921.036414] sock_ioctl+0x3ef/0x710 [ 1921.036883] ? dlci_ioctl_set+0x30/0x30 [ 1921.037394] ? selinux_file_ioctl+0xb6/0x270 [ 1921.037956] ? dlci_ioctl_set+0x30/0x30 [ 1921.038473] __x64_sys_ioctl+0x19a/0x210 [ 1921.038995] do_syscall_64+0x33/0x40 [ 1921.039470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.040122] RIP: 0033:0x7fb25f64db19 [ 1921.040598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.042951] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1921.043928] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1921.044843] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1921.045753] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1921.046671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1921.047583] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:22:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 84) 11:22:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x5, 0x4004, @fd_index=0x9, 0x3, &(0x7f0000000680)="f7d263b7842483b71a8e64ca461975756805969e9da7f6e06dd806d81043473dc3c215127945e02add9165f3665f012a7716119782d49d68ab9bd32467c1e583d14f43e9cd18d2c293223c1a835e929e256cf9f2ead29fc91790fc8cbdc16bd4b90b21ee18156f2a6e1743b387673d027ff5630298090b4a943e8f9b68c666732aa49695d4942c739c6a95b8", 0x8c}, 0x9) r1 = mq_open(&(0x7f00000007c0)='\xc4fdn/\xda\x1ag\x92\x05\xdb\xe7\xf2\xaa5T\xb5\x0e@\xa5\x15M\x1b\xec\xbf\x97\x05\x00\x00\x00\x00\x00\xec\xa6t\xd7\x01\x81\xa7\x81\xc9\x8dNK\x02K\x89\xcc\xfd\xd4n\x06\x8e\xd3{\t\x1d\xf5f\x9e_\xb5sF\x90\xe0\xf4\xfc\xa7\x9a\x16{\x87K<\"\xb9\xea\xb3\xefh\xfd\v$\xda\xe8x\x1e\xe1\x97S)0q\xd3\xa0|\xe5\xd1\xd88\xfcZK.t\xe9\x831\xc9\xd9K\x9a\xfe\x14\x14yu\x86\xb2O\xffOO\xe4/\xb0\xc9\xbbB\x99\v\x19\x06\x95\xb5\xd3r\r\x91d0\x9b\xb8-\xbbx\xaf\x051*\x01\xa7\xfb\\\xc4\x1f\x1f\x81\x98\x9b\x1dz\xbc\xd2\xcdc\xa3\xda\xa0\x85\xccb\xe2\'\x04\xf3>\xc1f\xf0\xc5R\x04C\xbb\x9a\x94\xb6Si\x80\xf9\x02\xcans\xee(\x8f\xf8\xfb\xcf$YhQ\b\xa1:.\xc1O\xc8\x885\xf6V\xb8\xb3\x00}\xe4\x11`[\xda(\x94\xd7\r\x1eJ\xeb\x1f\xa4\xde\xd0\x9bo\x94y\x0e&\x01\x90#\xe2\xb3\b\xb0-\n\x90\xb8\x8a\xca\x95\xd2\xf7f\xbf\xdb\xcb~i\"\x98\xa24\xb4*;\xbb\x9f\xea\xf0}^\x16|5\x7fi\xc8\xb4t\xfbv:R\xec\x8b\x8d\xa6\a\x8e,\x96\x8f|W@{\x99w\x1fD\x90\xc3k\x925\r\xa4T\x91\x1a}\x14\x87Q\xdd\xac@6XOC5\xa5\xdcj\xddG\x16w\xbc\xe1\xb7\x19\xd6n1\x84m\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x83, &(0x7f0000000200)={0x6, 0x4, 0x4, 0x1}) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/658], 0x299) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2d, 0x4, 0x0, 0x7ff, 0x0, @local, @private1, 0x8000, 0x20, 0x1f}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}) inotify_init1(0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x6, @local, 0x9}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1921.108523] FAULT_INJECTION: forcing a failure. [ 1921.108523] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.110113] CPU: 0 PID: 18692 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1921.110992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.112004] Call Trace: [ 1921.112345] dump_stack+0x107/0x167 [ 1921.112807] should_fail.cold+0x5/0xa [ 1921.113292] ? fib6_info_alloc+0x3c/0x110 [ 1921.113812] should_failslab+0x5/0x20 [ 1921.114300] __kmalloc+0x72/0x390 [ 1921.114738] fib6_info_alloc+0x3c/0x110 [ 1921.115240] ip6_route_info_create+0x379/0x1a10 [ 1921.115825] ? fib6_nh_init+0x1a50/0x1a50 [ 1921.116345] ? dev_change_flags+0x100/0x160 [ 1921.116884] ? dev_ifsioc+0x5b9/0xa00 [ 1921.117361] ? dev_ioctl+0x23c/0xd30 [ 1921.117830] ? sock_do_ioctl+0x17d/0x300 [ 1921.118345] ? sock_ioctl+0x3ef/0x710 [ 1921.118838] ? __x64_sys_ioctl+0x19a/0x210 [ 1921.119370] ? do_syscall_64+0x33/0x40 [ 1921.119862] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.120531] addrconf_f6i_alloc+0x28f/0x430 [ 1921.121078] ? ipv6_route_ioctl+0x550/0x550 [ 1921.121637] ? trace_hardirqs_on+0x5b/0x180 [ 1921.122230] ? kasan_unpoison_shadow+0x33/0x50 [ 1921.122800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1921.123443] ipv6_add_addr+0x3ab/0x1fa0 [ 1921.123944] ? mark_lock+0xf5/0x2df0 [ 1921.124415] ? lock_chain_count+0x20/0x20 [ 1921.124936] ? lock_chain_count+0x20/0x20 [ 1921.125462] ? inet6_dump_ifaddr+0x20/0x20 [ 1921.125995] ? find_held_lock+0x2c/0x110 [ 1921.126518] add_addr+0xcf/0x2c0 [ 1921.126943] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1921.127573] ? mark_held_locks+0x9e/0xe0 [ 1921.128090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.128746] ? __local_bh_enable_ip+0x9d/0x100 [ 1921.129322] ? trace_hardirqs_on+0x5b/0x180 [ 1921.129863] ? ipv6_find_idev+0x174/0x220 [ 1921.130395] addrconf_notify+0xf7c/0x2390 [ 1921.130921] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1921.131574] ? inet6_ifinfo_notify+0x150/0x150 [ 1921.132144] ? failover_register+0x530/0x530 [ 1921.132677] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1921.133376] ? igmp_netdev_event+0x31/0x810 [ 1921.133914] ? ipmr_device_event+0x192/0x1f0 [ 1921.134482] raw_notifier_call_chain+0xb3/0x110 [ 1921.135073] call_netdevice_notifiers_info+0xba/0x130 [ 1921.135718] __dev_notify_flags+0x110/0x2c0 [ 1921.136267] ? dev_change_name+0x6b0/0x6b0 [ 1921.136796] ? __dev_change_flags+0x4cf/0x6e0 [ 1921.137362] ? dev_set_allmulti+0x30/0x30 [ 1921.137879] ? dev_ioctl+0x22e/0xd30 [ 1921.138362] ? lock_acquire+0x197/0x470 [ 1921.138860] ? full_name_hash+0xb5/0xf0 [ 1921.139362] dev_change_flags+0x100/0x160 [ 1921.139884] dev_ifsioc+0x5b9/0xa00 [ 1921.140349] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1921.141013] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1921.141671] dev_ioctl+0x23c/0xd30 [ 1921.142130] sock_do_ioctl+0x17d/0x300 [ 1921.142618] ? compat_ifr_data_ioctl+0x180/0x180 [ 1921.143215] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1921.143937] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1921.144581] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1921.145241] ? generic_block_fiemap+0x60/0x60 [ 1921.145801] ? lock_downgrade+0x6d0/0x6d0 [ 1921.146338] sock_ioctl+0x3ef/0x710 [ 1921.146790] ? dlci_ioctl_set+0x30/0x30 [ 1921.147294] ? selinux_file_ioctl+0xb6/0x270 [ 1921.147847] ? dlci_ioctl_set+0x30/0x30 [ 1921.148354] __x64_sys_ioctl+0x19a/0x210 [ 1921.148864] do_syscall_64+0x33/0x40 [ 1921.149335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.149972] RIP: 0033:0x7fb25f64db19 [ 1921.150451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.152762] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1921.153714] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1921.154664] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1921.155564] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1921.156463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1921.157358] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:22:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) clone3(&(0x7f0000000740)={0x404d2340, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x34}, &(0x7f0000000540)=""/201, 0xc9, 0x0, &(0x7f0000001800)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000001880)={'lo\x00', 0x0}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x4ce6, &(0x7f0000000680)={0x0, 0xc91c, 0x20, 0xffffffff, 0x2b0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000700), &(0x7f00000007c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000001a00)={{}, {0x1, 0x6}, [{0x2, 0x3, 0xee01}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0x4}], {}, [{0x8, 0x2}, {0x8, 0x4}, {0x8, 0x3, 0xee01}, {0x8, 0x2, 0xee01}, {0x8, 0x1, 0xee01}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x3}, {}], {0x10, 0x5}, {0x20, 0x4}}, 0x84, 0x3) io_uring_enter(0xffffffffffffffff, 0x2b9d, 0xc5a9, 0x2, &(0x7f0000000640)={[0xacb]}, 0x8) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000340)=""/86, 0x56}, {&(0x7f0000000180)=""/22, 0x16}], 0x3, &(0x7f0000001e00)=""/4096, 0x1000}, 0x0, 0x1, 0x0, {0x1}}, 0x2) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="6bdeb34d1c4713096982d9c6d46b307058ab895276d4106d436c496a9cd882e2452f"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r2, 0x2f, 0xc3, 0x3f, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x40, 0x80000003, 0x4}}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0x40, 0x20000}, {0x8000000, 0x3}]}, 0x14, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x8001, 0x2}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 11:22:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) [ 1935.327924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.340562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.352714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:22:21 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:21 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 85) [ 1935.364914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.367835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.386908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.394105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.398863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.408318] FAULT_INJECTION: forcing a failure. [ 1935.408318] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.409984] CPU: 1 PID: 18711 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1935.410942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.412073] Call Trace: [ 1935.412440] dump_stack+0x107/0x167 [ 1935.412936] should_fail.cold+0x5/0xa [ 1935.413460] ? create_object.isra.0+0x3a/0xa30 [ 1935.414080] should_failslab+0x5/0x20 [ 1935.414610] kmem_cache_alloc+0x5b/0x310 [ 1935.415169] create_object.isra.0+0x3a/0xa30 [ 1935.415762] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1935.416457] __kmalloc+0x16e/0x390 [ 1935.416950] fib6_info_alloc+0x3c/0x110 [ 1935.417492] ip6_route_info_create+0x379/0x1a10 [ 1935.418103] ? fib6_nh_init+0x1a50/0x1a50 [ 1935.418664] ? dev_change_flags+0x100/0x160 [ 1935.419255] ? dev_ifsioc+0x5b9/0xa00 [ 1935.419763] ? dev_ioctl+0x23c/0xd30 [ 1935.420266] ? sock_do_ioctl+0x17d/0x300 [ 1935.420813] ? sock_ioctl+0x3ef/0x710 [ 1935.421321] ? __x64_sys_ioctl+0x19a/0x210 [ 1935.421887] ? do_syscall_64+0x33/0x40 [ 1935.422423] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1935.423111] addrconf_f6i_alloc+0x28f/0x430 [ 1935.423689] ? ipv6_route_ioctl+0x550/0x550 [ 1935.424290] ? trace_hardirqs_on+0x5b/0x180 [ 1935.424873] ? kasan_unpoison_shadow+0x33/0x50 [ 1935.425484] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1935.426173] ipv6_add_addr+0x3ab/0x1fa0 [ 1935.426718] ? mark_lock+0xf5/0x2df0 [ 1935.427219] ? lock_chain_count+0x20/0x20 [ 1935.427780] ? lock_chain_count+0x20/0x20 [ 1935.428345] ? inet6_dump_ifaddr+0x20/0x20 [ 1935.428890] ? find_held_lock+0x2c/0x110 [ 1935.429411] add_addr+0xcf/0x2c0 [ 1935.429844] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1935.430497] ? mark_held_locks+0x9e/0xe0 [ 1935.431023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1935.431693] ? __local_bh_enable_ip+0x9d/0x100 [ 1935.432278] ? trace_hardirqs_on+0x5b/0x180 [ 1935.432835] ? ipv6_find_idev+0x174/0x220 [ 1935.433368] addrconf_notify+0xf7c/0x2390 [ 1935.433905] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1935.434576] ? inet6_ifinfo_notify+0x150/0x150 [ 1935.435156] ? failover_register+0x530/0x530 [ 1935.435718] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1935.436430] ? igmp_netdev_event+0x31/0x810 [ 1935.436980] ? ipmr_device_event+0x192/0x1f0 [ 1935.437548] raw_notifier_call_chain+0xb3/0x110 [ 1935.438154] call_netdevice_notifiers_info+0xba/0x130 [ 1935.438821] __dev_notify_flags+0x110/0x2c0 [ 1935.439372] ? dev_change_name+0x6b0/0x6b0 [ 1935.439907] ? __dev_change_flags+0x4cf/0x6e0 [ 1935.440489] ? dev_set_allmulti+0x30/0x30 [ 1935.441011] ? dev_ioctl+0x22e/0xd30 [ 1935.441482] ? lock_acquire+0x197/0x470 [ 1935.441989] ? full_name_hash+0xb5/0xf0 [ 1935.442505] dev_change_flags+0x100/0x160 [ 1935.443036] dev_ifsioc+0x5b9/0xa00 [ 1935.443501] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1935.444176] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1935.444842] dev_ioctl+0x23c/0xd30 [ 1935.445298] sock_do_ioctl+0x17d/0x300 [ 1935.445794] ? compat_ifr_data_ioctl+0x180/0x180 [ 1935.446411] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1935.447135] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1935.447787] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1935.448461] ? generic_block_fiemap+0x60/0x60 [ 1935.449038] ? lock_downgrade+0x6d0/0x6d0 [ 1935.449575] sock_ioctl+0x3ef/0x710 [ 1935.450037] ? dlci_ioctl_set+0x30/0x30 [ 1935.450557] ? selinux_file_ioctl+0xb6/0x270 [ 1935.451115] ? dlci_ioctl_set+0x30/0x30 [ 1935.451619] __x64_sys_ioctl+0x19a/0x210 [ 1935.452137] do_syscall_64+0x33/0x40 [ 1935.452607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1935.453257] RIP: 0033:0x7fb25f64db19 [ 1935.453734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.456065] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1935.457046] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1935.457946] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1935.458844] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.459742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1935.460633] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:22:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x1) close_range(r1, r0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000000c0)={0x6, 'macvlan0\x00', {0x7}, 0x1}) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) 11:22:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 86) [ 1935.531590] tmpfs: Bad value for 'mpol' [ 1935.535335] tmpfs: Bad value for 'mpol' [ 1935.545516] FAULT_INJECTION: forcing a failure. [ 1935.545516] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.547263] CPU: 1 PID: 18726 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1935.548101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.549089] Call Trace: [ 1935.549409] dump_stack+0x107/0x167 [ 1935.549848] should_fail.cold+0x5/0xa [ 1935.550315] ? create_object.isra.0+0x3a/0xa30 [ 1935.550862] should_failslab+0x5/0x20 [ 1935.551318] kmem_cache_alloc+0x5b/0x310 [ 1935.551809] create_object.isra.0+0x3a/0xa30 [ 1935.552344] kmemleak_alloc_percpu+0xa0/0x100 [ 1935.552898] pcpu_alloc+0x4e2/0x1240 [ 1935.553364] fib_nh_common_init+0x2d/0x160 [ 1935.553875] fib6_nh_init+0x845/0x1a50 [ 1935.554358] ? icmp6_dst_alloc+0x660/0x660 [ 1935.554867] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1935.555425] ? gre_gro_receive+0x1740/0x1740 [ 1935.555957] ? kasan_unpoison_shadow+0x33/0x50 [ 1935.556508] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1935.557123] ip6_route_info_create+0x1199/0x1a10 [ 1935.557696] ? fib6_nh_init+0x1a50/0x1a50 [ 1935.558208] ? dev_change_flags+0x100/0x160 [ 1935.558730] ? dev_ifsioc+0x5b9/0xa00 [ 1935.559184] ? dev_ioctl+0x23c/0xd30 [ 1935.559628] ? sock_do_ioctl+0x17d/0x300 [ 1935.560123] ? sock_ioctl+0x3ef/0x710 [ 1935.560578] ? __x64_sys_ioctl+0x19a/0x210 [ 1935.561097] ? do_syscall_64+0x33/0x40 [ 1935.561566] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1935.562224] addrconf_f6i_alloc+0x28f/0x430 [ 1935.562745] ? ipv6_route_ioctl+0x550/0x550 [ 1935.563278] ? trace_hardirqs_on+0x5b/0x180 [ 1935.563789] ? kasan_unpoison_shadow+0x33/0x50 [ 1935.564338] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1935.564944] ipv6_add_addr+0x3ab/0x1fa0 [ 1935.565415] ? mark_lock+0xf5/0x2df0 [ 1935.565863] ? lock_chain_count+0x20/0x20 [ 1935.566611] ? lock_chain_count+0x20/0x20 [ 1935.567520] ? inet6_dump_ifaddr+0x20/0x20 [ 1935.568438] ? find_held_lock+0x2c/0x110 [ 1935.569310] add_addr+0xcf/0x2c0 [ 1935.570032] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1935.571115] ? mark_held_locks+0x9e/0xe0 [ 1935.571981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1935.573095] ? __local_bh_enable_ip+0x9d/0x100 [ 1935.574063] ? trace_hardirqs_on+0x5b/0x180 [ 1935.574997] ? ipv6_find_idev+0x174/0x220 [ 1935.575891] addrconf_notify+0xf7c/0x2390 [ 1935.576786] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1935.577894] ? inet6_ifinfo_notify+0x150/0x150 [ 1935.578873] ? failover_register+0x530/0x530 [ 1935.579816] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1935.580990] ? igmp_netdev_event+0x31/0x810 [ 1935.581913] ? ipmr_device_event+0x192/0x1f0 [ 1935.582864] raw_notifier_call_chain+0xb3/0x110 [ 1935.583864] call_netdevice_notifiers_info+0xba/0x130 [ 1935.584967] __dev_notify_flags+0x110/0x2c0 [ 1935.585888] ? dev_change_name+0x6b0/0x6b0 [ 1935.586794] ? __dev_change_flags+0x4cf/0x6e0 [ 1935.587758] ? dev_set_allmulti+0x30/0x30 [ 1935.588641] ? dev_ioctl+0x22e/0xd30 [ 1935.589433] ? lock_acquire+0x197/0x470 [ 1935.590289] ? full_name_hash+0xb5/0xf0 [ 1935.591149] dev_change_flags+0x100/0x160 [ 1935.592036] dev_ifsioc+0x5b9/0xa00 [ 1935.592811] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1935.593936] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1935.595071] dev_ioctl+0x23c/0xd30 [ 1935.595829] sock_do_ioctl+0x17d/0x300 [ 1935.596656] ? compat_ifr_data_ioctl+0x180/0x180 [ 1935.597668] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1935.598898] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1935.600002] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1935.601115] ? generic_block_fiemap+0x60/0x60 [ 1935.602072] ? lock_downgrade+0x6d0/0x6d0 [ 1935.602977] sock_ioctl+0x3ef/0x710 [ 1935.603751] ? dlci_ioctl_set+0x30/0x30 [ 1935.604606] ? selinux_file_ioctl+0xb6/0x270 [ 1935.605544] ? dlci_ioctl_set+0x30/0x30 [ 1935.606402] __x64_sys_ioctl+0x19a/0x210 [ 1935.607274] do_syscall_64+0x33/0x40 [ 1935.608069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1935.609155] RIP: 0033:0x7fb25f64db19 [ 1935.609946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.613861] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1935.615483] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1935.617005] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1935.618528] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.620051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1935.621576] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:22:21 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) syz_io_uring_submit(0x0, 0x0, 0x0, 0xe466) umount2(&(0x7f0000000340)='./file0\x00', 0x5) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000400)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) futimesat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) mkdirat(r0, 0x0, 0x0) [ 1935.670645] loop1: detected capacity change from 0 to 262144 11:22:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 87) [ 1935.697936] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1935.716865] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 11:22:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040), &(0x7f0000000180)) [ 1935.821762] FAULT_INJECTION: forcing a failure. [ 1935.821762] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.824742] CPU: 0 PID: 18737 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1935.826371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.828280] Call Trace: [ 1935.828898] dump_stack+0x107/0x167 [ 1935.829748] should_fail.cold+0x5/0xa [ 1935.830645] ? create_object.isra.0+0x3a/0xa30 [ 1935.831706] should_failslab+0x5/0x20 [ 1935.832592] kmem_cache_alloc+0x5b/0x310 [ 1935.833541] ? mark_held_locks+0x9e/0xe0 [ 1935.834500] create_object.isra.0+0x3a/0xa30 [ 1935.835536] kmemleak_alloc_percpu+0xa0/0x100 [ 1935.836588] pcpu_alloc+0x4e2/0x1240 [ 1935.837488] fib_nh_common_init+0x2d/0x160 [ 1935.838496] fib6_nh_init+0x845/0x1a50 [ 1935.839410] ? icmp6_dst_alloc+0x660/0x660 [ 1935.840401] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1935.841468] ? gre_gro_receive+0x1740/0x1740 [ 1935.842504] ? kasan_unpoison_shadow+0x33/0x50 [ 1935.843567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1935.844756] ip6_route_info_create+0x1199/0x1a10 [ 1935.845868] ? fib6_nh_init+0x1a50/0x1a50 [ 1935.846849] ? dev_change_flags+0x100/0x160 [ 1935.847856] ? dev_ifsioc+0x5b9/0xa00 [ 1935.848736] ? dev_ioctl+0x23c/0xd30 [ 1935.849602] ? sock_do_ioctl+0x17d/0x300 [ 1935.850546] ? sock_ioctl+0x3ef/0x710 [ 1935.851431] ? __x64_sys_ioctl+0x19a/0x210 [ 1935.852405] ? do_syscall_64+0x33/0x40 [ 1935.853312] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1935.854560] addrconf_f6i_alloc+0x28f/0x430 [ 1935.855567] ? ipv6_route_ioctl+0x550/0x550 [ 1935.856598] ? trace_hardirqs_on+0x5b/0x180 [ 1935.857603] ? kasan_unpoison_shadow+0x33/0x50 [ 1935.858662] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1935.859849] ipv6_add_addr+0x3ab/0x1fa0 [ 1935.860772] ? mark_lock+0xf5/0x2df0 [ 1935.861632] ? lock_chain_count+0x20/0x20 [ 1935.862610] ? lock_chain_count+0x20/0x20 [ 1935.863581] ? inet6_dump_ifaddr+0x20/0x20 [ 1935.864575] ? find_held_lock+0x2c/0x110 [ 1935.865531] add_addr+0xcf/0x2c0 [ 1935.866330] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1935.867492] ? mark_held_locks+0x9e/0xe0 [ 1935.868445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1935.869667] ? __local_bh_enable_ip+0x9d/0x100 [ 1935.870732] ? trace_hardirqs_on+0x5b/0x180 [ 1935.871738] ? ipv6_find_idev+0x174/0x220 [ 1935.872715] addrconf_notify+0xf7c/0x2390 [ 1935.873675] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1935.874885] ? inet6_ifinfo_notify+0x150/0x150 [ 1935.875944] ? failover_register+0x530/0x530 [ 1935.876953] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1935.878236] ? igmp_netdev_event+0x31/0x810 [ 1935.879221] ? ipmr_device_event+0x192/0x1f0 [ 1935.880253] raw_notifier_call_chain+0xb3/0x110 [ 1935.881344] call_netdevice_notifiers_info+0xba/0x130 [ 1935.882541] __dev_notify_flags+0x110/0x2c0 [ 1935.883539] ? dev_change_name+0x6b0/0x6b0 [ 1935.884523] ? __dev_change_flags+0x4cf/0x6e0 [ 1935.885571] ? dev_set_allmulti+0x30/0x30 [ 1935.886539] ? dev_ioctl+0x22e/0xd30 [ 1935.887405] ? lock_acquire+0x197/0x470 [ 1935.888331] ? full_name_hash+0xb5/0xf0 [ 1935.889260] dev_change_flags+0x100/0x160 [ 1935.890232] dev_ifsioc+0x5b9/0xa00 [ 1935.891074] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1935.892288] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1935.893510] dev_ioctl+0x23c/0xd30 [ 1935.894343] sock_do_ioctl+0x17d/0x300 [ 1935.895244] ? compat_ifr_data_ioctl+0x180/0x180 [ 1935.896347] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1935.897667] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1935.898878] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1935.900087] ? generic_block_fiemap+0x60/0x60 [ 1935.901117] ? lock_downgrade+0x6d0/0x6d0 [ 1935.902082] sock_ioctl+0x3ef/0x710 [ 1935.902932] ? dlci_ioctl_set+0x30/0x30 [ 1935.903862] ? selinux_file_ioctl+0xb6/0x270 [ 1935.904888] ? dlci_ioctl_set+0x30/0x30 [ 1935.905818] __x64_sys_ioctl+0x19a/0x210 [ 1935.906766] do_syscall_64+0x33/0x40 [ 1935.907628] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1935.908814] RIP: 0033:0x7fb25f64db19 [ 1935.909673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.913921] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1935.915680] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1935.917324] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1935.918975] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.920623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1935.922278] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1935.923653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.944016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.947044] loop1: detected capacity change from 0 to 262144 [ 1935.965849] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1935.978201] EXT4-fs: failed to create workqueue [ 1935.979362] EXT4-fs (loop1): mount failed 11:22:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x6e, 0x2e, 0x20, 0x7, 0x3, 0x6, 0xffffffff, 0x1ba, 0x40, 0x4e, 0x1, 0x5, 0x38, 0x2, 0x9, 0x6, 0x7}, [{0x1, 0xca, 0x0, 0x20, 0xc96f, 0xfffffffffffffffc, 0x401, 0x7}], "893bbb5901d95a6615902e59aac43c2ae0d4019e735fd316abc3e867a99da0a76f5183d4f079d1e92dde8722f0ee9a6ae8220ba2a927961d9d88bdbb159e4f7f835b3eb9fab7563545ea77c159a270d7ff0b882fdb8500986beb5a106c57fadf799576fe1c9e185e18dea1ad27e356e31bfbc93129b567922ec72b69f407faf7374f7dd46c45b099f974d8bdd980192bf2c2168c8d984f3940", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x911) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) 11:22:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:38 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:38 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:38 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 88) [ 1952.784394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1952.789095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1952.803601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1952.805375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1952.810248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1952.812452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1952.821894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1952.838819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:22:38 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0xa, 0x0) dup2(r3, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4011, r2, 0x40fa1000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x611381, 0x746259739e274099) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x2010, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000001c0)={0x6, 0x8, '\x00', 0x0, &(0x7f0000000140)=[0x0]}) sendfile(r0, r4, 0x0, 0x20d315) [ 1952.867524] FAULT_INJECTION: forcing a failure. [ 1952.867524] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.869231] CPU: 1 PID: 18767 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1952.870023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.870985] Call Trace: [ 1952.871290] dump_stack+0x107/0x167 [ 1952.871704] should_fail.cold+0x5/0xa [ 1952.872144] ? create_object.isra.0+0x3a/0xa30 [ 1952.872667] should_failslab+0x5/0x20 [ 1952.873099] kmem_cache_alloc+0x5b/0x310 [ 1952.873571] create_object.isra.0+0x3a/0xa30 [ 1952.874079] kmemleak_alloc_percpu+0xa0/0x100 [ 1952.874597] pcpu_alloc+0x4e2/0x1240 [ 1952.875034] fib6_nh_init+0x875/0x1a50 [ 1952.875479] ? icmp6_dst_alloc+0x660/0x660 [ 1952.875961] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1952.876484] ? gre_gro_receive+0x1740/0x1740 [ 1952.876988] ? kasan_unpoison_shadow+0x33/0x50 [ 1952.877506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.878090] ip6_route_info_create+0x1199/0x1a10 [ 1952.878649] ? fib6_nh_init+0x1a50/0x1a50 [ 1952.879125] ? dev_change_flags+0x100/0x160 [ 1952.879617] ? dev_ifsioc+0x5b9/0xa00 [ 1952.880054] ? dev_ioctl+0x23c/0xd30 [ 1952.880476] ? sock_do_ioctl+0x17d/0x300 [ 1952.880937] ? sock_ioctl+0x3ef/0x710 [ 1952.881375] ? __x64_sys_ioctl+0x19a/0x210 [ 1952.881879] ? do_syscall_64+0x33/0x40 [ 1952.882353] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.882993] addrconf_f6i_alloc+0x28f/0x430 [ 1952.883509] ? ipv6_route_ioctl+0x550/0x550 [ 1952.884042] ? trace_hardirqs_on+0x5b/0x180 [ 1952.884555] ? kasan_unpoison_shadow+0x33/0x50 [ 1952.885100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.885707] ipv6_add_addr+0x3ab/0x1fa0 [ 1952.886185] ? mark_lock+0xf5/0x2df0 [ 1952.886638] ? lock_chain_count+0x20/0x20 [ 1952.887135] ? lock_chain_count+0x20/0x20 [ 1952.887631] ? inet6_dump_ifaddr+0x20/0x20 [ 1952.888140] ? find_held_lock+0x2c/0x110 [ 1952.888629] add_addr+0xcf/0x2c0 [ 1952.889034] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1952.889626] ? mark_held_locks+0x9e/0xe0 [ 1952.890116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.890746] ? __local_bh_enable_ip+0x9d/0x100 [ 1952.891289] ? trace_hardirqs_on+0x5b/0x180 [ 1952.891799] ? ipv6_find_idev+0x174/0x220 [ 1952.892298] addrconf_notify+0xf7c/0x2390 [ 1952.892799] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1952.893413] ? inet6_ifinfo_notify+0x150/0x150 [ 1952.893952] ? failover_register+0x530/0x530 [ 1952.894483] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1952.895138] ? igmp_netdev_event+0x31/0x810 [ 1952.895648] ? ipmr_device_event+0x192/0x1f0 [ 1952.896178] raw_notifier_call_chain+0xb3/0x110 [ 1952.896734] call_netdevice_notifiers_info+0xba/0x130 [ 1952.897345] __dev_notify_flags+0x110/0x2c0 [ 1952.897861] ? dev_change_name+0x6b0/0x6b0 [ 1952.898371] ? __dev_change_flags+0x4cf/0x6e0 [ 1952.898906] ? dev_set_allmulti+0x30/0x30 [ 1952.899399] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1952.900041] ? full_name_hash+0xb5/0xf0 [ 1952.900514] dev_change_flags+0x100/0x160 [ 1952.901012] dev_ifsioc+0x5b9/0xa00 [ 1952.901446] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1952.902065] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1952.902699] dev_ioctl+0x23c/0xd30 [ 1952.903123] sock_do_ioctl+0x17d/0x300 [ 1952.903588] ? compat_ifr_data_ioctl+0x180/0x180 [ 1952.904155] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1952.904838] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1952.905455] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1952.906075] ? generic_block_fiemap+0x60/0x60 [ 1952.906614] ? lock_downgrade+0x6d0/0x6d0 [ 1952.907113] sock_ioctl+0x3ef/0x710 [ 1952.907547] ? dlci_ioctl_set+0x30/0x30 [ 1952.908025] ? selinux_file_ioctl+0xb6/0x270 [ 1952.908547] ? dlci_ioctl_set+0x30/0x30 [ 1952.909023] __x64_sys_ioctl+0x19a/0x210 [ 1952.909507] do_syscall_64+0x33/0x40 [ 1952.909951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.910568] RIP: 0033:0x7fb25f64db19 [ 1952.911016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.913207] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1952.914115] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1952.914971] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1952.915819] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.916677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1952.917514] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:22:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 89) [ 1952.980668] FAULT_INJECTION: forcing a failure. [ 1952.980668] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.982171] CPU: 1 PID: 18779 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1952.982972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.983924] Call Trace: [ 1952.984232] dump_stack+0x107/0x167 [ 1952.984651] should_fail.cold+0x5/0xa [ 1952.985100] ? create_object.isra.0+0x3a/0xa30 [ 1952.985636] should_failslab+0x5/0x20 [ 1952.986079] kmem_cache_alloc+0x5b/0x310 [ 1952.986559] ? mark_held_locks+0x9e/0xe0 [ 1952.987035] create_object.isra.0+0x3a/0xa30 [ 1952.987543] kmemleak_alloc_percpu+0xa0/0x100 [ 1952.988058] pcpu_alloc+0x4e2/0x1240 [ 1952.988499] fib6_nh_init+0x875/0x1a50 [ 1952.988947] ? icmp6_dst_alloc+0x660/0x660 [ 1952.989430] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1952.989955] ? gre_gro_receive+0x1740/0x1740 [ 1952.990474] ? kasan_unpoison_shadow+0x33/0x50 [ 1952.990997] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.991580] ip6_route_info_create+0x1199/0x1a10 [ 1952.992128] ? fib6_nh_init+0x1a50/0x1a50 [ 1952.992602] ? dev_change_flags+0x100/0x160 [ 1952.993098] ? dev_ifsioc+0x5b9/0xa00 [ 1952.993536] ? dev_ioctl+0x23c/0xd30 [ 1952.993963] ? sock_do_ioctl+0x17d/0x300 [ 1952.994433] ? sock_ioctl+0x3ef/0x710 [ 1952.994871] ? __x64_sys_ioctl+0x19a/0x210 [ 1952.995356] ? do_syscall_64+0x33/0x40 [ 1952.995801] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.996411] addrconf_f6i_alloc+0x28f/0x430 [ 1952.996911] ? ipv6_route_ioctl+0x550/0x550 [ 1952.997422] ? trace_hardirqs_on+0x5b/0x180 [ 1952.997925] ? kasan_unpoison_shadow+0x33/0x50 [ 1952.998455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.999043] ipv6_add_addr+0x3ab/0x1fa0 [ 1952.999499] ? mark_lock+0xf5/0x2df0 [ 1952.999927] ? lock_chain_count+0x20/0x20 [ 1953.000404] ? lock_chain_count+0x20/0x20 [ 1953.000884] ? inet6_dump_ifaddr+0x20/0x20 [ 1953.001375] ? find_held_lock+0x2c/0x110 [ 1953.001846] add_addr+0xcf/0x2c0 [ 1953.002234] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1953.002812] ? mark_held_locks+0x9e/0xe0 [ 1953.003280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1953.003886] ? __local_bh_enable_ip+0x9d/0x100 [ 1953.004406] ? trace_hardirqs_on+0x5b/0x180 [ 1953.004905] ? ipv6_find_idev+0x174/0x220 [ 1953.005380] addrconf_notify+0xf7c/0x2390 [ 1953.005866] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1953.006465] ? inet6_ifinfo_notify+0x150/0x150 [ 1953.006987] ? failover_register+0x530/0x530 [ 1953.007496] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1953.008127] ? igmp_netdev_event+0x31/0x810 [ 1953.008616] ? ipmr_device_event+0x192/0x1f0 [ 1953.009125] raw_notifier_call_chain+0xb3/0x110 [ 1953.009661] call_netdevice_notifiers_info+0xba/0x130 [ 1953.010258] __dev_notify_flags+0x110/0x2c0 [ 1953.010761] ? dev_change_name+0x6b0/0x6b0 [ 1953.011243] ? __dev_change_flags+0x4cf/0x6e0 [ 1953.011758] ? dev_set_allmulti+0x30/0x30 [ 1953.012232] ? dev_ioctl+0x22e/0xd30 [ 1953.012660] ? lock_acquire+0x197/0x470 [ 1953.013116] ? full_name_hash+0xb5/0xf0 [ 1953.013575] dev_change_flags+0x100/0x160 [ 1953.014053] dev_ifsioc+0x5b9/0xa00 [ 1953.014475] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1953.015070] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1953.015674] dev_ioctl+0x23c/0xd30 [ 1953.016085] sock_do_ioctl+0x17d/0x300 [ 1953.016532] ? compat_ifr_data_ioctl+0x180/0x180 [ 1953.017079] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1953.017736] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1953.018332] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1953.018944] ? generic_block_fiemap+0x60/0x60 [ 1953.019458] ? lock_downgrade+0x6d0/0x6d0 [ 1953.019935] sock_ioctl+0x3ef/0x710 [ 1953.020350] ? dlci_ioctl_set+0x30/0x30 [ 1953.020807] ? selinux_file_ioctl+0xb6/0x270 [ 1953.021312] ? dlci_ioctl_set+0x30/0x30 [ 1953.021765] __x64_sys_ioctl+0x19a/0x210 [ 1953.022235] do_syscall_64+0x33/0x40 [ 1953.022665] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1953.023249] RIP: 0033:0x7fb25f64db19 [ 1953.023672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.025771] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1953.026646] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1953.027461] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1953.028276] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1953.029093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1953.029910] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1966.998452] FAULT_INJECTION: forcing a failure. [ 1966.998452] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.000629] CPU: 0 PID: 18784 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1967.001609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1967.002861] Call Trace: [ 1967.003243] dump_stack+0x107/0x167 [ 1967.003794] should_fail.cold+0x5/0xa [ 1967.004373] ? __alloc_skb+0x6d/0x5b0 [ 1967.004948] should_failslab+0x5/0x20 [ 1967.005521] kmem_cache_alloc_node+0x55/0x330 [ 1967.006166] __alloc_skb+0x6d/0x5b0 [ 1967.006731] inet6_ifa_notify+0x11d/0x230 [ 1967.007345] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1967.007978] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1967.008605] __ipv6_ifa_notify+0x180/0xaa0 [ 1967.009259] ? __fib6_clean_all+0x138/0x2a0 [ 1967.009878] ? modify_prefix_route+0x530/0x530 [ 1967.010589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.011396] ? trace_hardirqs_on+0x5b/0x180 [ 1967.012068] ipv6_ifa_notify+0xd7/0x240 [ 1967.012673] ? __fib6_clean_all+0x2a0/0x2a0 [ 1967.013347] add_addr+0x1c7/0x2c0 [ 1967.013881] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1967.014633] ? mark_held_locks+0x9e/0xe0 [ 1967.015249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.016033] ? __local_bh_enable_ip+0x9d/0x100 [ 1967.016932] ? trace_hardirqs_on+0x5b/0x180 [ 1967.017657] ? ipv6_find_idev+0x174/0x220 [ 1967.018283] addrconf_notify+0xf7c/0x2390 [ 1967.018917] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.019692] ? inet6_ifinfo_notify+0x150/0x150 [ 1967.020382] ? failover_register+0x530/0x530 [ 1967.021032] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1967.021858] ? igmp_netdev_event+0x31/0x810 [ 1967.022525] ? ipmr_device_event+0x192/0x1f0 [ 1967.023207] raw_notifier_call_chain+0xb3/0x110 [ 1967.023916] call_netdevice_notifiers_info+0xba/0x130 [ 1967.024683] __dev_notify_flags+0x110/0x2c0 [ 1967.025343] ? dev_change_name+0x6b0/0x6b0 [ 1967.025982] ? __dev_change_flags+0x4cf/0x6e0 [ 1967.026686] ? dev_set_allmulti+0x30/0x30 [ 1967.027297] ? dev_ioctl+0x22e/0xd30 [ 1967.027856] ? lock_acquire+0x197/0x470 [ 1967.028478] ? full_name_hash+0xb5/0xf0 [ 1967.029070] dev_change_flags+0x100/0x160 [ 1967.029677] dev_ifsioc+0x5b9/0xa00 [ 1967.030218] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1967.031011] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1967.031822] dev_ioctl+0x23c/0xd30 [ 1967.032372] sock_do_ioctl+0x17d/0x300 [ 1967.032979] ? compat_ifr_data_ioctl+0x180/0x180 [ 1967.033708] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1967.034599] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.035392] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1967.036172] ? generic_block_fiemap+0x60/0x60 [ 1967.036867] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1967.037703] sock_ioctl+0x3ef/0x710 [ 1967.038263] ? dlci_ioctl_set+0x30/0x30 [ 1967.038893] ? selinux_file_ioctl+0xb6/0x270 [ 1967.039554] ? dlci_ioctl_set+0x30/0x30 [ 1967.040144] __x64_sys_ioctl+0x19a/0x210 [ 1967.040774] do_syscall_64+0x33/0x40 [ 1967.041352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1967.042145] RIP: 0033:0x7fb25f64db19 [ 1967.042720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.045518] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1967.046684] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1967.047783] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1967.048868] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1967.049915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1967.050974] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:22:53 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:53 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) fcntl$notify(r1, 0x402, 0x29) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) renameat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') 11:22:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x9e, 0x8, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x10, 0x700, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x2, 0x3, 0x0, @private1, @empty, 0x8, 0x7800, 0xffffffe7, 0x7fff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @pid}]}]}, 0x28}}, 0x0) 11:22:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 90) 11:22:53 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, 0x0, 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:53 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1967.059750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1967.062660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18797 comm=syz-executor.0 [ 1967.063801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1967.068751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18797 comm=syz-executor.0 [ 1967.073317] kauditd_printk_skb: 16 callbacks suppressed [ 1967.073331] audit: type=1400 audit(1757589773.161:197): avc: denied { watch_reads } for pid=18787 comm="syz-executor.1" path="/syzkaller-testdir943143289/syzkaller.dpEmCm/216/file0" dev="cgroup2" ino=942 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 [ 1967.074338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1967.100435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:22:53 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {r0, r1/1000+60000}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x2, &(0x7f0000000000)) clock_gettime(0x7, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) r4 = signalfd4(r2, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05008000", @ANYRES16=r5, @ANYBLOB="010018000180140002006c6f00fff97fe9c7b21095bc724f94b600"/38], 0x2c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000080)) r6 = fork() mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x1010, r4, 0x8000000) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f00000002c0)={'\x00', 0x2, 0x3, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x4000000}, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 11:22:53 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r1 = fork() r2 = getpgrp(0x0) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) fcntl$getownex(r3, 0x10, &(0x7f0000001600)={0x0, 0x0}) r5 = gettid() ptrace(0xffffffffffffffff, r5) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) clone3(&(0x7f00000002c0)={0x20210080, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140), {0x27}, &(0x7f0000000400)=""/120, 0x78, &(0x7f0000001540)=""/181, &(0x7f00000001c0)=[r4, r2, r5, r2, r1], 0x5, {r7}}, 0x58) tkill(r4, 0x2d) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) msgget(0x2, 0x200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000680)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000180)=0xc) ptrace$cont(0x18, r8, 0xffffffffffffffff, 0x8) 11:22:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 91) [ 1967.188431] FAULT_INJECTION: forcing a failure. [ 1967.188431] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.190104] CPU: 0 PID: 18811 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1967.191043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1967.192165] Call Trace: [ 1967.192517] dump_stack+0x107/0x167 [ 1967.192993] should_fail.cold+0x5/0xa [ 1967.193504] ? create_object.isra.0+0x3a/0xa30 [ 1967.194100] should_failslab+0x5/0x20 [ 1967.194638] kmem_cache_alloc+0x5b/0x310 [ 1967.195202] create_object.isra.0+0x3a/0xa30 [ 1967.195799] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1967.196505] kmem_cache_alloc_node+0x169/0x330 [ 1967.197143] __alloc_skb+0x6d/0x5b0 [ 1967.197656] inet6_ifa_notify+0x11d/0x230 [ 1967.198222] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1967.198846] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1967.199444] __ipv6_ifa_notify+0x180/0xaa0 [ 1967.200001] ? __fib6_clean_all+0x138/0x2a0 [ 1967.200571] ? modify_prefix_route+0x530/0x530 [ 1967.201194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.201884] ? trace_hardirqs_on+0x5b/0x180 [ 1967.202485] ipv6_ifa_notify+0xd7/0x240 [ 1967.203007] ? __fib6_clean_all+0x2a0/0x2a0 [ 1967.203577] add_addr+0x1c7/0x2c0 [ 1967.204038] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1967.204745] ? mark_held_locks+0x9e/0xe0 [ 1967.205286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.205972] ? __local_bh_enable_ip+0x9d/0x100 [ 1967.206584] ? trace_hardirqs_on+0x5b/0x180 [ 1967.207200] ? ipv6_find_idev+0x174/0x220 [ 1967.207772] addrconf_notify+0xf7c/0x2390 [ 1967.208357] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.209084] ? inet6_ifinfo_notify+0x150/0x150 [ 1967.209723] ? failover_register+0x530/0x530 [ 1967.210344] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1967.210592] loop1: detected capacity change from 0 to 135266304 [ 1967.211110] ? igmp_netdev_event+0x31/0x810 [ 1967.211164] ? ipmr_device_event+0x192/0x1f0 [ 1967.211182] raw_notifier_call_chain+0xb3/0x110 [ 1967.211204] call_netdevice_notifiers_info+0xba/0x130 [ 1967.211218] __dev_notify_flags+0x110/0x2c0 [ 1967.211239] ? dev_change_name+0x6b0/0x6b0 [ 1967.216217] ? __dev_change_flags+0x4cf/0x6e0 [ 1967.216837] ? dev_set_allmulti+0x30/0x30 [ 1967.217411] ? dev_ioctl+0x22e/0xd30 [ 1967.217910] ? lock_acquire+0x197/0x470 [ 1967.218461] ? full_name_hash+0xb5/0xf0 [ 1967.219028] dev_change_flags+0x100/0x160 [ 1967.219603] dev_ifsioc+0x5b9/0xa00 [ 1967.220118] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1967.220838] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1967.221587] dev_ioctl+0x23c/0xd30 [ 1967.222108] sock_do_ioctl+0x17d/0x300 [ 1967.222672] ? compat_ifr_data_ioctl+0x180/0x180 [ 1967.223355] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1967.224159] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.224891] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1967.225597] ? generic_block_fiemap+0x60/0x60 [ 1967.226230] ? lock_downgrade+0x6d0/0x6d0 [ 1967.226809] sock_ioctl+0x3ef/0x710 [ 1967.227307] ? dlci_ioctl_set+0x30/0x30 [ 1967.227846] ? selinux_file_ioctl+0xb6/0x270 [ 1967.228461] ? dlci_ioctl_set+0x30/0x30 [ 1967.229028] __x64_sys_ioctl+0x19a/0x210 [ 1967.229584] do_syscall_64+0x33/0x40 [ 1967.230100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1967.230814] RIP: 0033:0x7fb25f64db19 [ 1967.231325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.233804] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1967.234879] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1967.235858] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1967.236824] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1967.237796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1967.238770] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1967.262830] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1967.265517] ext4 filesystem being mounted at /syzkaller-testdir943143289/syzkaller.dpEmCm/217/file0 supports timestamps until 2038-01-19 (0x7fffffff) 11:22:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 92) 11:22:53 executing program 0: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100}) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x3, 0xc52, 0x4316f9b3}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800010000000000f4ffffff09000000080000007095197f00000108", @ANYRES32, @ANYRESOCT=r1], 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x18, 0x0, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x14, 0x0, 0x0, @fd}]}, 0x28}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYRESOCT]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000400), &(0x7f0000000440)=0x4) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x3, 0x5, 0x800) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) [ 1967.383018] FAULT_INJECTION: forcing a failure. [ 1967.383018] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.384507] CPU: 0 PID: 18826 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1967.385373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1967.386410] Call Trace: [ 1967.386760] dump_stack+0x107/0x167 [ 1967.387227] should_fail.cold+0x5/0xa [ 1967.387700] should_failslab+0x5/0x20 [ 1967.388178] __kmalloc_node_track_caller+0x74/0x3b0 [ 1967.388798] ? inet6_ifa_notify+0x11d/0x230 [ 1967.389335] __alloc_skb+0xb1/0x5b0 [ 1967.389795] inet6_ifa_notify+0x11d/0x230 [ 1967.390309] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1967.390871] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1967.391432] __ipv6_ifa_notify+0x180/0xaa0 [ 1967.391964] ? __fib6_clean_all+0x138/0x2a0 [ 1967.392494] ? modify_prefix_route+0x530/0x530 [ 1967.393078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.393727] ? trace_hardirqs_on+0x5b/0x180 [ 1967.394270] ipv6_ifa_notify+0xd7/0x240 [ 1967.394774] ? __fib6_clean_all+0x2a0/0x2a0 [ 1967.395316] add_addr+0x1c7/0x2c0 [ 1967.395754] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1967.396381] ? mark_held_locks+0x9e/0xe0 [ 1967.396898] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.397553] ? __local_bh_enable_ip+0x9d/0x100 [ 1967.398119] ? trace_hardirqs_on+0x5b/0x180 [ 1967.398677] ? ipv6_find_idev+0x174/0x220 [ 1967.399201] addrconf_notify+0xf7c/0x2390 [ 1967.399717] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.400367] ? inet6_ifinfo_notify+0x150/0x150 [ 1967.400935] ? failover_register+0x530/0x530 [ 1967.401491] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1967.402178] ? igmp_netdev_event+0x31/0x810 [ 1967.402723] ? ipmr_device_event+0x192/0x1f0 [ 1967.403277] raw_notifier_call_chain+0xb3/0x110 [ 1967.403859] call_netdevice_notifiers_info+0xba/0x130 [ 1967.404481] __dev_notify_flags+0x110/0x2c0 [ 1967.404978] ? dev_change_name+0x6b0/0x6b0 [ 1967.405474] ? __dev_change_flags+0x4cf/0x6e0 [ 1967.406002] ? dev_set_allmulti+0x30/0x30 [ 1967.406504] ? dev_ioctl+0x22e/0xd30 [ 1967.406962] ? lock_acquire+0x197/0x470 [ 1967.407448] ? full_name_hash+0xb5/0xf0 [ 1967.407938] dev_change_flags+0x100/0x160 [ 1967.408454] dev_ifsioc+0x5b9/0xa00 [ 1967.408887] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1967.409529] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1967.410179] dev_ioctl+0x23c/0xd30 [ 1967.410634] sock_do_ioctl+0x17d/0x300 [ 1967.411111] ? compat_ifr_data_ioctl+0x180/0x180 [ 1967.411702] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1967.412409] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.413043] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1967.413686] ? generic_block_fiemap+0x60/0x60 [ 1967.414239] ? lock_downgrade+0x6d0/0x6d0 [ 1967.414767] sock_ioctl+0x3ef/0x710 [ 1967.415215] ? dlci_ioctl_set+0x30/0x30 [ 1967.415700] ? selinux_file_ioctl+0xb6/0x270 [ 1967.416242] ? dlci_ioctl_set+0x30/0x30 [ 1967.416729] __x64_sys_ioctl+0x19a/0x210 [ 1967.417242] do_syscall_64+0x33/0x40 [ 1967.417708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1967.418344] RIP: 0033:0x7fb25f64db19 [ 1967.418812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.421074] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1967.422014] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1967.422898] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1967.423740] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1967.424574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1967.425449] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:22:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000340)=""/224, 0xe0}], 0x2, 0x1a}, 0x0) r3 = syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x50, r3, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0xa, 0x0) dup2(r7, r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r6, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x4, 0x7, 0x6, 0x7, 0x0, 0x8, 0x28, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x40000, 0xff, 0x0, 0x7, 0x4, 0x7, 0xffff, 0x0, 0x7, 0x0, 0x7}, r5, 0xe, r6, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:22:53 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, 0x0, 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:53 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:22:53 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) [ 1967.571704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1967.571915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1967.575472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:22:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 93) [ 1967.584444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:22:53 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) connect$inet6(r0, &(0x7f0000000540)={0x2, 0x100, 0x0, @dev}, 0x1c) 11:22:53 executing program 0: setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000340)={0x1, 0x81, 0x0, 0x6, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x4000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x25, &(0x7f00000002c0), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="270000003702000200000080000000000700000000000000", @ANYRES32, @ANYBLOB="62006e65742f7320b26bf96e6d7000e51b4036bae3155f66d1c4a7b365c51fefcd22e3696f3136faa1f1222b1776a2609be8b2544400"], 0x27) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000140)=""/203, 0xcb}], 0x1, 0x7ff, 0x0) ioctl$KDENABIO(r1, 0x4b36) fdatasync(0xffffffffffffffff) poll(&(0x7f0000000140), 0x0, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000000c0)) unshare(0x48020200) [ 1967.693040] FAULT_INJECTION: forcing a failure. [ 1967.693040] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.695792] CPU: 1 PID: 18853 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1967.697225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1967.698983] Call Trace: [ 1967.699533] dump_stack+0x107/0x167 [ 1967.700304] should_fail.cold+0x5/0xa [ 1967.701085] ? create_object.isra.0+0x3a/0xa30 [ 1967.702046] should_failslab+0x5/0x20 [ 1967.702875] kmem_cache_alloc+0x5b/0x310 [ 1967.703763] create_object.isra.0+0x3a/0xa30 [ 1967.704693] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1967.705764] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1967.706840] ? inet6_ifa_notify+0x11d/0x230 [ 1967.707731] __alloc_skb+0xb1/0x5b0 [ 1967.708486] inet6_ifa_notify+0x11d/0x230 [ 1967.709334] ? inet6_fill_ifaddr+0xd60/0xd60 [ 1967.710243] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1967.711229] __ipv6_ifa_notify+0x180/0xaa0 [ 1967.712096] ? __fib6_clean_all+0x138/0x2a0 [ 1967.712984] ? modify_prefix_route+0x530/0x530 [ 1967.713927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.715048] ? trace_hardirqs_on+0x5b/0x180 [ 1967.715947] ipv6_ifa_notify+0xd7/0x240 [ 1967.716772] ? __fib6_clean_all+0x2a0/0x2a0 [ 1967.717681] add_addr+0x1c7/0x2c0 [ 1967.718424] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1967.719491] ? mark_held_locks+0x9e/0xe0 [ 1967.720367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.721472] ? __local_bh_enable_ip+0x9d/0x100 [ 1967.722440] ? trace_hardirqs_on+0x5b/0x180 [ 1967.723395] ? ipv6_find_idev+0x174/0x220 [ 1967.724285] addrconf_notify+0xf7c/0x2390 [ 1967.725149] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.726242] ? inet6_ifinfo_notify+0x150/0x150 [ 1967.727233] ? failover_register+0x530/0x530 [ 1967.728185] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1967.729347] ? igmp_netdev_event+0x31/0x810 [ 1967.730233] ? ipmr_device_event+0x192/0x1f0 [ 1967.731157] raw_notifier_call_chain+0xb3/0x110 [ 1967.732129] call_netdevice_notifiers_info+0xba/0x130 [ 1967.733184] __dev_notify_flags+0x110/0x2c0 [ 1967.734082] ? dev_change_name+0x6b0/0x6b0 [ 1967.734995] ? __dev_change_flags+0x4cf/0x6e0 [ 1967.735950] ? dev_set_allmulti+0x30/0x30 [ 1967.736849] ? dev_ioctl+0x22e/0xd30 [ 1967.737614] ? lock_acquire+0x197/0x470 [ 1967.738455] ? full_name_hash+0xb5/0xf0 [ 1967.739342] dev_change_flags+0x100/0x160 [ 1967.740235] dev_ifsioc+0x5b9/0xa00 [ 1967.740988] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1967.742106] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1967.743221] dev_ioctl+0x23c/0xd30 [ 1967.743985] sock_do_ioctl+0x17d/0x300 [ 1967.744822] ? compat_ifr_data_ioctl+0x180/0x180 [ 1967.745847] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1967.747085] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.748196] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1967.749308] ? generic_block_fiemap+0x60/0x60 [ 1967.750265] ? lock_downgrade+0x6d0/0x6d0 [ 1967.751142] sock_ioctl+0x3ef/0x710 [ 1967.751891] ? dlci_ioctl_set+0x30/0x30 [ 1967.752750] ? selinux_file_ioctl+0xb6/0x270 [ 1967.753685] ? dlci_ioctl_set+0x30/0x30 [ 1967.754537] __x64_sys_ioctl+0x19a/0x210 [ 1967.755411] do_syscall_64+0x33/0x40 11:22:53 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf34}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x7, 0x7fffffff, 0x2, 0x400, 0x9}) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x6, 0x0, 0x1e, 0x1, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfd4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x11106, 0x7, 0x20, 0x6, 0xfffffffffffffff9, 0x9, 0x8, 0x0, 0x8, 0x0, 0x34d}, 0x0, 0xb, r0, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="140100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e56f754222c96782a9730003f8008004f00acdbcebe508b6f4c00d67480c2501945976632b0ca8534e02adc941ddf4ec142c50864b50b79100b5eacd42db06a96c15a5ae0214a94418325d629dd2dee9eb83d7bbf8314bac5aa392f7fba2c43b58481d6b5433b5b31eb9a2352bb2f083d1bf005315197a14d53a85b0552aaf256ef186e194a651845c3d582a670f0523892f845a745678c6438279a25260f7639edd3964194460e5e0e8df371dc8963ac05feef1614f8902120066ae909f84dcd1b9f39e94984f1a49ec09b059eda248f8c078022d6bb56f7b645d43db1ccfb4e9d3aeceaa8bc73f13e9a7a27cffcacfb5ee1e95f8c72b09e9c4924ef65cc2524fb053d4d5a8b7293b433055c5a613ffd1c989b085bc99996ff12afcbd07ce141c517b669cb568f4cae8075d1f1c9eb02d9921941dfc4f1f3d970e715e34a76c06e0b07f148769f04d838dc722f0d9ff918291f8b145216c404a1f63678f77131f3404e932e9341c8eb172672e0517becc51acbb1ba3201f3ad8f7903dec77547f2baf0654b208bd42c8641", @ANYRES32=r1, @ANYBLOB="080000006401010014001000fe8000000000000000000000000000bb08000a00ac1e000100"], 0x114}}, 0x0) lseek(r0, 0x0, 0x3) [ 1967.756209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1967.757483] RIP: 0033:0x7fb25f64db19 [ 1967.758277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.762168] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1967.763752] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1967.765212] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1967.766700] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1967.768175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1967.769624] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1967.788539] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1967.798646] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1967.800411] CPU: 1 PID: 18862 Comm: syz-executor.1 Not tainted 5.10.242 #1 [ 1967.801867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1967.803621] Call Trace: [ 1967.804192] dump_stack+0x107/0x167 [ 1967.804979] sysfs_warn_dup.cold+0x1c/0x29 [ 1967.805888] sysfs_do_create_link_sd+0x122/0x140 [ 1967.806901] sysfs_create_link+0x5f/0xc0 [ 1967.807770] device_add+0x703/0x1c50 [ 1967.808581] ? devlink_add_symlinks+0x970/0x970 [ 1967.809565] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1967.810694] wiphy_register+0x1da6/0x2850 [ 1967.811594] ? wiphy_unregister+0xb90/0xb90 [ 1967.812512] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1967.813601] ieee80211_register_hw+0x23c5/0x38b0 [ 1967.814611] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1967.815626] ? net_generic+0xdb/0x2b0 [ 1967.816440] ? lockdep_init_map_type+0x2c7/0x780 [ 1967.817435] ? memset+0x20/0x50 [ 1967.818133] ? __hrtimer_init+0x12c/0x270 [ 1967.819001] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1967.820059] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1967.821041] ? hwsim_new_radio_nl+0x967/0x1080 [ 1967.821994] ? memcpy+0x39/0x60 [ 1967.822704] hwsim_new_radio_nl+0x991/0x1080 [ 1967.823603] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1967.824679] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1967.826031] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1967.827411] genl_family_rcv_msg_doit+0x22d/0x330 [ 1967.828452] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1967.829892] ? cap_capable+0x1cd/0x230 [ 1967.830740] ? ns_capable+0xe2/0x110 [ 1967.831506] genl_rcv_msg+0x36a/0x5a0 [ 1967.832326] ? genl_get_cmd+0x480/0x480 [ 1967.833186] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1967.834297] ? lock_release+0x680/0x680 [ 1967.835159] ? netlink_deliver_tap+0xf4/0xcc0 [ 1967.836130] netlink_rcv_skb+0x14b/0x430 [ 1967.837007] ? genl_get_cmd+0x480/0x480 [ 1967.837840] ? netlink_ack+0xab0/0xab0 [ 1967.838684] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1967.839625] ? is_vmalloc_addr+0x7b/0xb0 [ 1967.840521] genl_rcv+0x24/0x40 [ 1967.841224] netlink_unicast+0x6ce/0xa00 [ 1967.842091] ? netlink_attachskb+0xab0/0xab0 [ 1967.843050] netlink_sendmsg+0x90f/0xe00 [ 1967.843921] ? netlink_unicast+0xa00/0xa00 [ 1967.844835] ? netlink_unicast+0xa00/0xa00 [ 1967.845728] __sock_sendmsg+0x154/0x190 [ 1967.846587] ____sys_sendmsg+0x70d/0x870 [ 1967.847458] ? sock_write_iter+0x3d0/0x3d0 [ 1967.848358] ? do_recvmmsg+0x6d0/0x6d0 [ 1967.849192] ? SOFTIRQ_verbose+0x10/0x10 [ 1967.850071] ___sys_sendmsg+0xf3/0x170 [ 1967.850909] ? sendmsg_copy_msghdr+0x160/0x160 [ 1967.851874] ? __fget_files+0x2cf/0x520 [ 1967.852724] ? lock_downgrade+0x6d0/0x6d0 [ 1967.853607] ? SOFTIRQ_verbose+0x10/0x10 [ 1967.854457] ? futex_exit_release+0x220/0x220 [ 1967.855428] ? __fget_files+0x2f8/0x520 [ 1967.856290] ? __fget_light+0xea/0x290 [ 1967.857146] __sys_sendmsg+0xe5/0x1b0 [ 1967.857963] ? __sys_sendmsg_sock+0x40/0x40 [ 1967.858954] ? __do_sys_futex+0x2bb/0x480 [ 1967.859943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.861090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1967.862173] ? trace_hardirqs_on+0x5b/0x180 [ 1967.863190] do_syscall_64+0x33/0x40 [ 1967.864059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1967.865266] RIP: 0033:0x7fea2746db19 [ 1967.866158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.870448] RSP: 002b:00007fea249e3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1967.872255] RAX: ffffffffffffffda RBX: 00007fea27580f60 RCX: 00007fea2746db19 [ 1967.873912] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1967.875589] RBP: 00007fea274c7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1967.877272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1967.878971] R13: 00007ffc90d72a7f R14: 00007fea249e3300 R15: 0000000000022000 11:22:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 94) 11:22:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) [ 1967.962611] FAULT_INJECTION: forcing a failure. [ 1967.962611] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.964501] CPU: 0 PID: 18866 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1967.965382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1967.966438] Call Trace: [ 1967.966793] dump_stack+0x107/0x167 [ 1967.967275] should_fail.cold+0x5/0xa [ 1967.967729] ? fib6_add+0x461/0x45d0 [ 1967.968209] should_failslab+0x5/0x20 [ 1967.968694] kmem_cache_alloc+0x5b/0x310 [ 1967.969217] fib6_add+0x461/0x45d0 [ 1967.969685] ? lock_release+0x680/0x680 [ 1967.970198] ? fib6_update_sernum_stub+0x80/0x80 [ 1967.970808] ? do_raw_spin_lock+0x121/0x260 [ 1967.971358] ? rwlock_bug.part.0+0x90/0x90 [ 1967.971908] ? nlmsg_notify+0xa3/0x290 [ 1967.972408] ip6_ins_rt+0xb2/0x110 [ 1967.972864] ? ip6_dst_neigh_lookup+0xf0/0xf0 [ 1967.973450] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1967.974003] __ipv6_ifa_notify+0x85a/0xaa0 [ 1967.974554] ? __fib6_clean_all+0x138/0x2a0 [ 1967.975105] ? modify_prefix_route+0x530/0x530 [ 1967.975697] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.976365] ? trace_hardirqs_on+0x5b/0x180 [ 1967.976922] ipv6_ifa_notify+0xd7/0x240 [ 1967.977431] ? __fib6_clean_all+0x2a0/0x2a0 [ 1967.977980] add_addr+0x1c7/0x2c0 [ 1967.978434] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1967.979065] ? mark_held_locks+0x9e/0xe0 [ 1967.979548] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.980207] ? __local_bh_enable_ip+0x9d/0x100 [ 1967.980742] ? trace_hardirqs_on+0x5b/0x180 [ 1967.981255] ? ipv6_find_idev+0x174/0x220 [ 1967.981748] addrconf_notify+0xf7c/0x2390 [ 1967.982259] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.982897] ? inet6_ifinfo_notify+0x150/0x150 [ 1967.983434] ? failover_register+0x530/0x530 [ 1967.983954] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1967.984602] ? igmp_netdev_event+0x31/0x810 [ 1967.985108] ? ipmr_device_event+0x192/0x1f0 [ 1967.985637] raw_notifier_call_chain+0xb3/0x110 [ 1967.986191] call_netdevice_notifiers_info+0xba/0x130 [ 1967.986862] __dev_notify_flags+0x110/0x2c0 [ 1967.987411] ? dev_change_name+0x6b0/0x6b0 [ 1967.987948] ? __dev_change_flags+0x4cf/0x6e0 [ 1967.988519] ? dev_set_allmulti+0x30/0x30 [ 1967.989050] ? dev_ioctl+0x22e/0xd30 [ 1967.989512] ? lock_acquire+0x197/0x470 [ 1967.989975] ? full_name_hash+0xb5/0xf0 [ 1967.990443] dev_change_flags+0x100/0x160 [ 1967.990958] dev_ifsioc+0x5b9/0xa00 [ 1967.991385] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1967.992033] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1967.992652] dev_ioctl+0x23c/0xd30 [ 1967.993085] sock_do_ioctl+0x17d/0x300 [ 1967.993546] ? compat_ifr_data_ioctl+0x180/0x180 [ 1967.994139] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1967.994878] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.995537] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1967.996281] ? generic_block_fiemap+0x60/0x60 [ 1967.996851] ? lock_downgrade+0x6d0/0x6d0 [ 1967.997388] sock_ioctl+0x3ef/0x710 [ 1967.997845] ? dlci_ioctl_set+0x30/0x30 [ 1967.998348] ? selinux_file_ioctl+0xb6/0x270 [ 1967.998942] ? dlci_ioctl_set+0x30/0x30 [ 1967.999427] __x64_sys_ioctl+0x19a/0x210 [ 1967.999902] do_syscall_64+0x33/0x40 [ 1968.000352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1968.000959] RIP: 0033:0x7fb25f64db19 [ 1968.001393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.003566] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1968.004515] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1968.005350] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1968.006201] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1968.007110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1968.008025] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1968.012992] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 11:22:54 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:22:54 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1968.068456] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1968.070620] CPU: 1 PID: 18862 Comm: syz-executor.1 Not tainted 5.10.242 #1 [ 1968.072242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1968.074198] Call Trace: [ 1968.074829] dump_stack+0x107/0x167 11:22:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 95) [ 1968.075717] sysfs_warn_dup.cold+0x1c/0x29 [ 1968.076898] sysfs_do_create_link_sd+0x122/0x140 [ 1968.078009] sysfs_create_link+0x5f/0xc0 [ 1968.079014] device_add+0x703/0x1c50 [ 1968.079915] ? devlink_add_symlinks+0x970/0x970 [ 1968.081007] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1968.082248] wiphy_register+0x1da6/0x2850 [ 1968.083242] ? wiphy_unregister+0xb90/0xb90 [ 1968.084297] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1968.085591] ieee80211_register_hw+0x23c5/0x38b0 [ 1968.085636] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1968.087326] ? net_generic+0xdb/0x2b0 [ 1968.088228] ? lockdep_init_map_type+0x2c7/0x780 [ 1968.089346] ? memset+0x20/0x50 [ 1968.090129] ? __hrtimer_init+0x12c/0x270 [ 1968.091130] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1968.092319] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1968.093408] ? hwsim_new_radio_nl+0x967/0x1080 [ 1968.094473] ? memcpy+0x39/0x60 [ 1968.095275] hwsim_new_radio_nl+0x991/0x1080 [ 1968.096312] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1968.097556] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1968.099149] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1968.100722] genl_family_rcv_msg_doit+0x22d/0x330 [ 1968.101894] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1968.103486] ? cap_capable+0x1cd/0x230 [ 1968.104444] ? ns_capable+0xe2/0x110 [ 1968.105344] genl_rcv_msg+0x36a/0x5a0 [ 1968.106248] ? genl_get_cmd+0x480/0x480 [ 1968.107193] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1968.108407] ? lock_release+0x680/0x680 [ 1968.109370] ? netlink_deliver_tap+0xf4/0xcc0 [ 1968.110445] netlink_rcv_skb+0x14b/0x430 [ 1968.111429] ? genl_get_cmd+0x480/0x480 [ 1968.112389] ? netlink_ack+0xab0/0xab0 [ 1968.113326] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1968.114411] ? is_vmalloc_addr+0x7b/0xb0 [ 1968.115396] genl_rcv+0x24/0x40 [ 1968.116166] netlink_unicast+0x6ce/0xa00 [ 1968.117123] ? netlink_attachskb+0xab0/0xab0 [ 1968.118165] netlink_sendmsg+0x90f/0xe00 [ 1968.119134] ? netlink_unicast+0xa00/0xa00 [ 1968.120137] ? netlink_unicast+0xa00/0xa00 [ 1968.121139] __sock_sendmsg+0x154/0x190 [ 1968.122088] ____sys_sendmsg+0x70d/0x870 [ 1968.123076] ? sock_write_iter+0x3d0/0x3d0 [ 1968.124090] ? do_recvmmsg+0x6d0/0x6d0 [ 1968.125027] ? SOFTIRQ_verbose+0x10/0x10 [ 1968.125993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1968.127264] ___sys_sendmsg+0xf3/0x170 [ 1968.128197] ? sendmsg_copy_msghdr+0x160/0x160 [ 1968.129284] ? __fget_files+0x2cf/0x520 [ 1968.130227] ? lock_downgrade+0x6d0/0x6d0 [ 1968.131221] ? SOFTIRQ_verbose+0x10/0x10 [ 1968.132192] ? __do_sys_perf_event_open+0x487/0x2e60 [ 1968.133392] ? futex_exit_release+0x220/0x220 [ 1968.134463] ? __fget_files+0x2f8/0x520 [ 1968.135431] ? __fget_light+0xea/0x290 [ 1968.136364] __sys_sendmsg+0xe5/0x1b0 [ 1968.137269] ? __sys_sendmsg_sock+0x40/0x40 [ 1968.138293] ? __do_sys_futex+0x2bb/0x480 [ 1968.139312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1968.140552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1968.141773] ? trace_hardirqs_on+0x5b/0x180 [ 1968.142815] do_syscall_64+0x33/0x40 [ 1968.143699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1968.144908] RIP: 0033:0x7fea2746db19 [ 1968.145806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.150156] RSP: 002b:00007fea249e3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1968.151973] RAX: ffffffffffffffda RBX: 00007fea27580f60 RCX: 00007fea2746db19 [ 1968.153679] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1968.155378] RBP: 00007fea274c7f6d R08: 0000000000000000 R09: 0000000000000000 11:22:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1968.157060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1968.158977] R13: 00007ffc90d72a7f R14: 00007fea249e3300 R15: 0000000000022000 [ 1968.184718] FAULT_INJECTION: forcing a failure. [ 1968.184718] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.186198] CPU: 0 PID: 18879 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1968.187034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1968.188059] Call Trace: [ 1968.188415] dump_stack+0x107/0x167 [ 1968.188884] should_fail.cold+0x5/0xa [ 1968.189376] ? create_object.isra.0+0x3a/0xa30 [ 1968.189959] should_failslab+0x5/0x20 [ 1968.190444] kmem_cache_alloc+0x5b/0x310 [ 1968.190986] create_object.isra.0+0x3a/0xa30 [ 1968.191541] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1968.192202] kmem_cache_alloc+0x159/0x310 [ 1968.192740] fib6_add+0x461/0x45d0 [ 1968.193209] ? lock_release+0x680/0x680 [ 1968.193719] ? fib6_update_sernum_stub+0x80/0x80 [ 1968.194333] ? do_raw_spin_lock+0x121/0x260 [ 1968.194890] ? rwlock_bug.part.0+0x90/0x90 [ 1968.195437] ? nlmsg_notify+0xa3/0x290 [ 1968.195938] ip6_ins_rt+0xb2/0x110 [ 1968.196398] ? ip6_dst_neigh_lookup+0xf0/0xf0 [ 1968.196973] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1968.197543] __ipv6_ifa_notify+0x85a/0xaa0 [ 1968.198076] ? __fib6_clean_all+0x138/0x2a0 [ 1968.198637] ? modify_prefix_route+0x530/0x530 [ 1968.199220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1968.199890] ? trace_hardirqs_on+0x5b/0x180 [ 1968.200441] ipv6_ifa_notify+0xd7/0x240 [ 1968.200947] ? __fib6_clean_all+0x2a0/0x2a0 [ 1968.201481] add_addr+0x1c7/0x2c0 [ 1968.201918] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1968.202573] ? mark_held_locks+0x9e/0xe0 [ 1968.203099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1968.203763] ? __local_bh_enable_ip+0x9d/0x100 [ 1968.204343] ? trace_hardirqs_on+0x5b/0x180 [ 1968.204858] ? ipv6_find_idev+0x174/0x220 [ 1968.205387] addrconf_notify+0xf7c/0x2390 [ 1968.205924] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1968.206587] ? inet6_ifinfo_notify+0x150/0x150 [ 1968.207127] ? failover_register+0x530/0x530 [ 1968.207688] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1968.208389] ? igmp_netdev_event+0x31/0x810 [ 1968.208943] ? ipmr_device_event+0x192/0x1f0 [ 1968.209516] raw_notifier_call_chain+0xb3/0x110 [ 1968.210113] call_netdevice_notifiers_info+0xba/0x130 [ 1968.210744] __dev_notify_flags+0x110/0x2c0 [ 1968.211276] ? dev_change_name+0x6b0/0x6b0 [ 1968.211776] ? __dev_change_flags+0x4cf/0x6e0 [ 1968.212354] ? dev_set_allmulti+0x30/0x30 [ 1968.212862] ? dev_ioctl+0x22e/0xd30 [ 1968.213334] ? full_name_hash+0xb5/0xf0 [ 1968.213849] dev_change_flags+0x100/0x160 [ 1968.214372] dev_ifsioc+0x5b9/0xa00 [ 1968.214850] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1968.215517] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1968.216195] dev_ioctl+0x23c/0xd30 [ 1968.216661] sock_do_ioctl+0x17d/0x300 [ 1968.217151] ? compat_ifr_data_ioctl+0x180/0x180 [ 1968.217818] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1968.218564] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1968.219203] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1968.219824] ? generic_block_fiemap+0x60/0x60 [ 1968.220376] ? lock_downgrade+0x6d0/0x6d0 [ 1968.220879] sock_ioctl+0x3ef/0x710 [ 1968.221305] ? dlci_ioctl_set+0x30/0x30 [ 1968.221772] ? selinux_file_ioctl+0xb6/0x270 [ 1968.222290] ? dlci_ioctl_set+0x30/0x30 [ 1968.222769] __x64_sys_ioctl+0x19a/0x210 [ 1968.223247] do_syscall_64+0x33/0x40 [ 1968.223711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1968.224315] RIP: 0033:0x7fb25f64db19 [ 1968.224751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.227003] RSP: 002b:00007fb25cba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1968.227942] RAX: ffffffffffffffda RBX: 00007fb25f761020 RCX: 00007fb25f64db19 [ 1968.228820] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1968.229702] RBP: 00007fb25cba21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1968.230597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1968.231489] R13: 00007fff8dd3fcbf R14: 00007fb25cba2300 R15: 0000000000022000 [ 1968.242311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1968.247422] cgroup: fork rejected by pids controller in /syz6 [ 1968.267588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:23:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:23:07 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, 0x0, 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:23:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:23:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x104303, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) move_mount(r0, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)=ANY=[@ANYBLOB="011100000000376618c8000000000000000000000000000000edb65e0fde1bbbcbef7a402459e8d458b779b468075c07c95e9cfaff39a4e2aac7586c08f93c73912334465b9de3a5d6004a6f108e950430a7a6bbaa3945bc6462e0298f0f893fd3d7f2cc3304d38bdf1590b5d8832eaefc4255e5623f130df226a91cb26f7ecc435a1422a5a9d4d15b8416ae09c1daffff56d1ee1c0b6a3df737d247da3cdd799cf5b44f2081605c074157d3d026", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00./file0\x00\x00\x00\x00\x00\x00']) r2 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = dup2(r3, r2) r5 = getpgrp(0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r6 = accept4$unix(r4, &(0x7f0000000900), 0x0, 0x0) r7 = pidfd_getfd(r4, r3, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) tgkill(0x0, r5, 0x0) r8 = fcntl$dupfd(r3, 0x406, r1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) pidfd_open(r9, 0x0) perf_event_open(0x0, r5, 0xa, r8, 0x0) clone3(&(0x7f0000000380)={0x82140080, &(0x7f0000000180), &(0x7f0000000200), 0x0, {0x2c}, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=[r5], 0x1, {r4}}, 0x58) 11:23:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0100000000e100002e2f6a696c653000"]) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}}, 0x7fa7c781) recvfrom(r3, &(0x7f0000000000)=""/107, 0x6b, 0x40000040, &(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) 11:23:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 96) 11:23:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:23:07 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) [ 1981.552691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1981.557921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1981.568402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1981.582347] FAULT_INJECTION: forcing a failure. [ 1981.582347] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.584138] CPU: 0 PID: 18895 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1981.585145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.586359] Call Trace: [ 1981.586760] dump_stack+0x107/0x167 [ 1981.587290] should_fail.cold+0x5/0xa [ 1981.587847] ? fib6_add+0x4e3/0x45d0 [ 1981.588387] should_failslab+0x5/0x20 [ 1981.588948] kmem_cache_alloc+0x5b/0x310 [ 1981.589541] fib6_add+0x4e3/0x45d0 [ 1981.590070] ? lock_release+0x680/0x680 [ 1981.590657] ? fib6_update_sernum_stub+0x80/0x80 [ 1981.591351] ? do_raw_spin_lock+0x121/0x260 [ 1981.591988] ? rwlock_bug.part.0+0x90/0x90 [ 1981.592602] ? nlmsg_notify+0xa3/0x290 [ 1981.593172] ip6_ins_rt+0xb2/0x110 [ 1981.593685] ? ip6_dst_neigh_lookup+0xf0/0xf0 [ 1981.594341] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1981.595069] __ipv6_ifa_notify+0x85a/0xaa0 [ 1981.595681] ? __fib6_clean_all+0x138/0x2a0 [ 1981.596315] ? modify_prefix_route+0x530/0x530 [ 1981.596976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.597733] ? trace_hardirqs_on+0x5b/0x180 [ 1981.598369] ipv6_ifa_notify+0xd7/0x240 [ 1981.598957] ? __fib6_clean_all+0x2a0/0x2a0 [ 1981.599591] add_addr+0x1c7/0x2c0 [ 1981.600111] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1981.600835] ? mark_held_locks+0x9e/0xe0 [ 1981.601439] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.602196] ? __local_bh_enable_ip+0x9d/0x100 [ 1981.602858] ? trace_hardirqs_on+0x5b/0x180 [ 1981.603474] ? ipv6_find_idev+0x174/0x220 [ 1981.604073] addrconf_notify+0xf7c/0x2390 [ 1981.604684] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1981.605428] ? inet6_ifinfo_notify+0x150/0x150 [ 1981.606084] ? failover_register+0x530/0x530 [ 1981.606729] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1981.607533] ? igmp_netdev_event+0x31/0x810 [ 1981.608154] ? ipmr_device_event+0x192/0x1f0 [ 1981.608791] raw_notifier_call_chain+0xb3/0x110 [ 1981.609476] call_netdevice_notifiers_info+0xba/0x130 [ 1981.610244] __dev_notify_flags+0x110/0x2c0 [ 1981.610872] ? dev_change_name+0x6b0/0x6b0 [ 1981.611495] ? __dev_change_flags+0x4cf/0x6e0 [ 1981.612144] ? dev_set_allmulti+0x30/0x30 [ 1981.612743] ? dev_ioctl+0x22e/0xd30 [ 1981.613278] ? lock_acquire+0x197/0x470 [ 1981.613850] ? full_name_hash+0xb5/0xf0 [ 1981.614436] dev_change_flags+0x100/0x160 [ 1981.615054] dev_ifsioc+0x5b9/0xa00 [ 1981.615577] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1981.616337] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1981.617096] dev_ioctl+0x23c/0xd30 [ 1981.617618] sock_do_ioctl+0x17d/0x300 [ 1981.618177] ? compat_ifr_data_ioctl+0x180/0x180 [ 1981.618873] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1981.619710] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1981.620462] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1981.621231] ? generic_block_fiemap+0x60/0x60 [ 1981.621881] ? lock_downgrade+0x6d0/0x6d0 [ 1981.622484] sock_ioctl+0x3ef/0x710 [ 1981.623013] ? dlci_ioctl_set+0x30/0x30 [ 1981.623583] ? selinux_file_ioctl+0xb6/0x270 [ 1981.624218] ? dlci_ioctl_set+0x30/0x30 [ 1981.624792] __x64_sys_ioctl+0x19a/0x210 [ 1981.625385] do_syscall_64+0x33/0x40 [ 1981.625917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1981.626656] RIP: 0033:0x7fb25f64db19 [ 1981.627190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.629844] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.630954] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1981.631974] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1981.633006] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.634020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.635048] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:23:07 executing program 1: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x25) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0xa, 0x0) r6 = dup2(r5, r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r4, &(0x7f0000000140)={0x20000000}, r3}, 0x7) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f00000002c0), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000340)=0x9) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1981.706635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:23:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 97) 11:23:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x7, 0x5, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x82040, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x40, 0x2, 0x0, 0x2001ff, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200051300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000040), {0x13}, &(0x7f00000003c0)=""/224, 0xe0, &(0x7f0000000240)=""/95, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1981.751754] FAULT_INJECTION: forcing a failure. [ 1981.751754] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.753396] CPU: 0 PID: 18922 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1981.754346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.755490] Call Trace: [ 1981.755858] dump_stack+0x107/0x167 [ 1981.756361] should_fail.cold+0x5/0xa [ 1981.756898] ? fib6_add+0x4e3/0x45d0 [ 1981.757403] should_failslab+0x5/0x20 [ 1981.757963] kmem_cache_alloc+0x5b/0x310 [ 1981.758520] fib6_add+0x4e3/0x45d0 [ 1981.759030] ? lock_release+0x680/0x680 [ 1981.759572] ? fib6_update_sernum_stub+0x80/0x80 [ 1981.760213] ? do_raw_spin_lock+0x121/0x260 [ 1981.760797] ? rwlock_bug.part.0+0x90/0x90 [ 1981.761369] ? nlmsg_notify+0xa3/0x290 [ 1981.761901] ip6_ins_rt+0xb2/0x110 [ 1981.762383] ? ip6_dst_neigh_lookup+0xf0/0xf0 [ 1981.763001] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1981.763598] __ipv6_ifa_notify+0x85a/0xaa0 [ 1981.764179] ? __fib6_clean_all+0x138/0x2a0 [ 1981.764766] ? modify_prefix_route+0x530/0x530 [ 1981.765385] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.766095] ? trace_hardirqs_on+0x5b/0x180 [ 1981.766690] ipv6_ifa_notify+0xd7/0x240 [ 1981.767230] ? __fib6_clean_all+0x2a0/0x2a0 [ 1981.767813] add_addr+0x1c7/0x2c0 [ 1981.768284] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1981.768958] ? mark_held_locks+0x9e/0xe0 [ 1981.769516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.770223] ? __local_bh_enable_ip+0x9d/0x100 [ 1981.770846] ? trace_hardirqs_on+0x5b/0x180 [ 1981.771429] ? ipv6_find_idev+0x174/0x220 [ 1981.771987] addrconf_notify+0xf7c/0x2390 [ 1981.772555] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1981.773246] ? inet6_ifinfo_notify+0x150/0x150 [ 1981.773860] ? failover_register+0x530/0x530 [ 1981.774455] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1981.775202] ? igmp_netdev_event+0x31/0x810 [ 1981.775778] ? ipmr_device_event+0x192/0x1f0 [ 1981.776375] raw_notifier_call_chain+0xb3/0x110 [ 1981.777015] call_netdevice_notifiers_info+0xba/0x130 [ 1981.777708] __dev_notify_flags+0x110/0x2c0 [ 1981.778289] ? dev_change_name+0x6b0/0x6b0 [ 1981.778871] ? __dev_change_flags+0x4cf/0x6e0 [ 1981.779475] ? dev_set_allmulti+0x30/0x30 [ 1981.780033] ? dev_ioctl+0x22e/0xd30 [ 1981.780536] ? lock_acquire+0x197/0x470 [ 1981.781072] ? full_name_hash+0xb5/0xf0 [ 1981.781611] dev_change_flags+0x100/0x160 [ 1981.782177] dev_ifsioc+0x5b9/0xa00 [ 1981.782677] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1981.783386] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1981.784096] dev_ioctl+0x23c/0xd30 [ 1981.784574] sock_do_ioctl+0x17d/0x300 [ 1981.785103] ? compat_ifr_data_ioctl+0x180/0x180 [ 1981.785744] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1981.786521] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1981.787222] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1981.787921] ? generic_block_fiemap+0x60/0x60 [ 1981.788522] ? lock_downgrade+0x6d0/0x6d0 [ 1981.789079] sock_ioctl+0x3ef/0x710 [ 1981.789566] ? dlci_ioctl_set+0x30/0x30 [ 1981.790099] ? selinux_file_ioctl+0xb6/0x270 [ 1981.790697] ? dlci_ioctl_set+0x30/0x30 [ 1981.791230] __x64_sys_ioctl+0x19a/0x210 [ 1981.791778] do_syscall_64+0x33/0x40 [ 1981.792279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1981.792966] RIP: 0033:0x7fb25f64db19 [ 1981.793463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.795925] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.796946] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1981.797899] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1981.798888] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.799840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.800786] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:23:07 executing program 1: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d53, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c72bbc7e3c4d1", @ANYRESHEX=r1, @ANYBLOB="2c776f3d000000115dba16ba2d35579c", @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,cache=none,\x00']) 11:23:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/14, 0xe}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000008c66d0894a90a27dd70cf7cf23f2cc50178634c8a6810"], 0x40}, 0x12000) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1cbb43, 0x0) ioctl$CDROMVOLCTRL(r0, 0x1261, 0x0) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x5, 0x62, 0xdf, 0x7, 0x0, 0x0, 0x3d40, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x400, 0x0, 0x7, 0x0, 0x7, 0x14, 0x2, 0x0, 0x7, 0x0, 0x311e}, 0x0, 0xb, r0, 0x3) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='trusted.overlay.metacopy\x00', &(0x7f0000001080)=""/254, 0xfe) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000006c0)={0xa, 0x4e23, 0x0, @private0, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfff}}], 0x18}}], 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001180), 0x800, 0x0) sendmsg$inet6(r3, &(0x7f0000001500)={&(0x7f00000011c0)={0xa, 0x4e24, 0xff, @private0, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001200)="38c21e61c578e7fbc10a2cb334d90338a4cce20d7a6fed90e7", 0x19}, {&(0x7f0000001240)="6b238f3ddd4ba55cfd46a8779ad9453b3bba6a2e27013a6a5f7e1ffe5eaeac8f8a76796d2251920bafbe1c0d78144acf3966e5c77fd55816059bfd1f172a74103ed946bc0d110a9f49b6bcf86f63c48279dde5220054bb292d9bb7177329fbc5ba18278970226340491dae7aea04ddedf7a34443fe2fd0e14975c931dfbf7421137f7354803d5938539569ad095cad3a47785fbc74849a600b2ccbf8289ba6e9da", 0xa1}, {&(0x7f0000001300)="063c6bf08c3c4f008651b62d5e710d039a82d1454e0af6d8e48a9e76afabb72bec317a7a06de0170793a6d92ae20f5311800b5d5946adf932324f2219a321a99e06e00f9daa44eb40a6b5acec2610bb2975865a3b2d707be0d2e04e08b7e702ffaad9a03a4", 0x65}, {&(0x7f0000001380)="66ceebbfa02796aa5bd4e4f6fa15a5361e86d47cbb2d77c91f0ae10ca0d421336ca49f881183b166348123ba71c4f3c578e18bb60984881067a69c2f0a25fde64013a08d6b418d08a1233571e42f3ccfac82a9d9012cbe2ae1fb133518bcee06d4580388355ec7215dce2b769803c0feae3e61669588", 0x76}, {&(0x7f0000001400)="366bf3b04d198c76f3391a57f929f795b5c40b0f4b9dc48430e596c6aa58", 0x1e}, {&(0x7f0000001440)="f1d843750094f94b577081efcfd96832d5bf338e4cdc8decfeb3929f8ff89b08c066f353dc6c1dd2", 0x28}], 0x6}, 0x40000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8902, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)={'syz1', "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"}, 0x1001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r2) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 11:23:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 98) 11:23:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xe20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_emit_ethernet(0x61, &(0x7f0000000000)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x3f, 0x0, @opaque="d4841fb1cc8569cae828ba410800000000000000bdf4eb7bbd94962e2120f7bdeb4a7e5df797bb482ef9762529187ed65e991f395d34c7"}}}}}, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x4}, 0x6) 11:23:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1, 0x1}, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508950000000000000082449c18237d03aa20cbf709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3c8d, 0x4e98, 0x3, &(0x7f0000000080)={[0x45c1]}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x4}, 0xff) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1981.929274] FAULT_INJECTION: forcing a failure. [ 1981.929274] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.930922] CPU: 0 PID: 18941 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1981.931823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.932931] Call Trace: [ 1981.933292] dump_stack+0x107/0x167 [ 1981.933783] should_fail.cold+0x5/0xa [ 1981.934281] ? __alloc_skb+0x6d/0x5b0 [ 1981.934796] should_failslab+0x5/0x20 [ 1981.935300] kmem_cache_alloc_node+0x55/0x330 [ 1981.935894] __alloc_skb+0x6d/0x5b0 [ 1981.936378] inet6_rt_notify+0xed/0x2a0 [ 1981.936900] fib6_add+0x3223/0x45d0 [ 1981.937404] ? lock_release+0x680/0x680 [ 1981.937917] ? fib6_update_sernum_stub+0x80/0x80 [ 1981.938512] ? do_raw_spin_lock+0x121/0x260 [ 1981.939067] ? nlmsg_notify+0xa3/0x290 [ 1981.939553] ip6_ins_rt+0xb2/0x110 [ 1981.939993] ? ip6_dst_neigh_lookup+0xf0/0xf0 [ 1981.940554] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1981.941107] __ipv6_ifa_notify+0x85a/0xaa0 [ 1981.941636] ? __fib6_clean_all+0x138/0x2a0 [ 1981.942180] ? modify_prefix_route+0x530/0x530 [ 1981.942761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.943413] ? trace_hardirqs_on+0x5b/0x180 [ 1981.943955] ipv6_ifa_notify+0xd7/0x240 [ 1981.944453] ? __fib6_clean_all+0x2a0/0x2a0 [ 1981.944992] add_addr+0x1c7/0x2c0 [ 1981.945428] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1981.946052] ? mark_held_locks+0x9e/0xe0 [ 1981.946562] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.947223] ? __local_bh_enable_ip+0x9d/0x100 [ 1981.947787] ? trace_hardirqs_on+0x5b/0x180 [ 1981.948326] ? ipv6_find_idev+0x174/0x220 [ 1981.948841] addrconf_notify+0xf7c/0x2390 [ 1981.949361] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1981.949996] ? inet6_ifinfo_notify+0x150/0x150 [ 1981.950554] ? failover_register+0x530/0x530 [ 1981.951113] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1981.951783] ? igmp_netdev_event+0x31/0x810 [ 1981.952311] ? ipmr_device_event+0x192/0x1f0 [ 1981.952858] raw_notifier_call_chain+0xb3/0x110 [ 1981.953439] call_netdevice_notifiers_info+0xba/0x130 [ 1981.954077] __dev_notify_flags+0x110/0x2c0 [ 1981.954619] ? dev_change_name+0x6b0/0x6b0 [ 1981.955171] ? __dev_change_flags+0x4cf/0x6e0 [ 1981.955738] ? dev_set_allmulti+0x30/0x30 [ 1981.956252] ? dev_ioctl+0x22e/0xd30 [ 1981.956716] ? lock_acquire+0x197/0x470 [ 1981.957208] ? full_name_hash+0xb5/0xf0 [ 1981.957701] dev_change_flags+0x100/0x160 [ 1981.958222] dev_ifsioc+0x5b9/0xa00 [ 1981.958688] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1981.959331] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1981.959979] dev_ioctl+0x23c/0xd30 [ 1981.960418] sock_do_ioctl+0x17d/0x300 [ 1981.960880] ? compat_ifr_data_ioctl+0x180/0x180 [ 1981.961470] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1981.962167] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1981.962809] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1981.963452] ? generic_block_fiemap+0x60/0x60 [ 1981.963999] ? lock_downgrade+0x6d0/0x6d0 [ 1981.964510] sock_ioctl+0x3ef/0x710 [ 1981.964963] ? dlci_ioctl_set+0x30/0x30 [ 1981.965454] ? selinux_file_ioctl+0xb6/0x270 [ 1981.965995] ? dlci_ioctl_set+0x30/0x30 [ 1981.966458] __x64_sys_ioctl+0x19a/0x210 [ 1981.966965] do_syscall_64+0x33/0x40 [ 1981.967417] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1981.968044] RIP: 0033:0x7fb25f64db19 [ 1981.968501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.970679] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.971607] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1981.972476] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1981.973347] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.974229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.975112] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 11:23:22 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000500)) mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x2090c0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mount$cgroup(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000340), 0x2000000, &(0x7f0000000380)={[{@none}, {@cpuset_v2_mode}, {@none}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x31, 0x37, 0x35, 0x63, 0x37, 0x30, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x35], 0x2d, [0x37, 0x36, 0x33, 0x33], 0x2d, [0x63, 0x34, 0x0, 0x62], 0x2d, [0x35, 0x65, 0x61, 0x37, 0x30, 0x31, 0x39, 0x62]}}}, {@subj_user={'subj_user', 0x3d, ':'}}, {@fsuuid={'fsuuid', 0x3d, {[0x94, 0x34, 0x65, 0x66, 0x1, 0x30, 0x64, 0x32], 0x2d, [0x0, 0x32, 0x38, 0x65], 0x2d, [0x4, 0x37, 0x52, 0x31], 0x2d, [0x65, 0x38, 0x34, 0x33], 0x2d, [0x5a, 0x34, 0x36, 0x39, 0x61, 0x39, 0x63, 0x38]}}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@smackfsfloor}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000326bd7000fbdbdf256c0000000500180131000000050019010700000008002201c0020000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c646566636f6e746578743d756e636f6e66696e65645f5e44a26261636b66736861743d272c27412c646566636f6e746578743d73746166664f752c00"]) 11:23:22 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:23:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:23:22 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:23:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:23:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 99) 11:23:22 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r5, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) quotactl(0x5, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000580)="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") io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:23:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 1996.346359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1996.357230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1996.364407] FAULT_INJECTION: forcing a failure. [ 1996.364407] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.365988] CPU: 1 PID: 18954 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1996.366965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.368091] Call Trace: [ 1996.368460] dump_stack+0x107/0x167 [ 1996.368967] should_fail.cold+0x5/0xa [ 1996.369486] ? create_object.isra.0+0x3a/0xa30 [ 1996.370113] should_failslab+0x5/0x20 [ 1996.370631] kmem_cache_alloc+0x5b/0x310 [ 1996.371205] ? lock_acquire+0x197/0x470 [ 1996.371761] create_object.isra.0+0x3a/0xa30 [ 1996.372361] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1996.373048] kmem_cache_alloc_node+0x169/0x330 [ 1996.373680] __alloc_skb+0x6d/0x5b0 [ 1996.374181] inet6_rt_notify+0xed/0x2a0 [ 1996.374725] fib6_add+0x3223/0x45d0 [ 1996.375234] ? lock_release+0x680/0x680 [ 1996.375770] ? fib6_update_sernum_stub+0x80/0x80 [ 1996.376410] ? do_raw_spin_lock+0x121/0x260 [ 1996.376996] ? nlmsg_notify+0xa3/0x290 [ 1996.377538] ip6_ins_rt+0xb2/0x110 [ 1996.378016] ? ip6_dst_neigh_lookup+0xf0/0xf0 [ 1996.378619] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1996.379239] __ipv6_ifa_notify+0x85a/0xaa0 [ 1996.379808] ? __fib6_clean_all+0x138/0x2a0 [ 1996.380386] ? modify_prefix_route+0x530/0x530 [ 1996.380997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.381704] ? trace_hardirqs_on+0x5b/0x180 [ 1996.382296] ipv6_ifa_notify+0xd7/0x240 [ 1996.382850] ? __fib6_clean_all+0x2a0/0x2a0 [ 1996.383431] add_addr+0x1c7/0x2c0 [ 1996.383905] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1996.384589] ? mark_held_locks+0x9e/0xe0 [ 1996.385150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.385850] ? __local_bh_enable_ip+0x9d/0x100 [ 1996.386455] ? trace_hardirqs_on+0x5b/0x180 [ 1996.387049] ? ipv6_find_idev+0x174/0x220 [ 1996.387635] addrconf_notify+0xf7c/0x2390 [ 1996.388196] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1996.388903] ? inet6_ifinfo_notify+0x150/0x150 [ 1996.389518] ? failover_register+0x530/0x530 [ 1996.390105] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1996.390856] ? igmp_netdev_event+0x31/0x810 [ 1996.391437] ? ipmr_device_event+0x192/0x1f0 [ 1996.392038] raw_notifier_call_chain+0xb3/0x110 [ 1996.392670] call_netdevice_notifiers_info+0xba/0x130 [ 1996.393360] __dev_notify_flags+0x110/0x2c0 [ 1996.393934] ? dev_change_name+0x6b0/0x6b0 [ 1996.394503] ? __dev_change_flags+0x4cf/0x6e0 [ 1996.395138] ? dev_set_allmulti+0x30/0x30 [ 1996.395688] ? dev_ioctl+0x22e/0xd30 [ 1996.396194] ? lock_acquire+0x197/0x470 [ 1996.396724] ? full_name_hash+0xb5/0xf0 [ 1996.397257] dev_change_flags+0x100/0x160 [ 1996.397811] dev_ifsioc+0x5b9/0xa00 [ 1996.398307] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1996.399015] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1996.399731] dev_ioctl+0x23c/0xd30 [ 1996.400219] sock_do_ioctl+0x17d/0x300 [ 1996.400738] ? compat_ifr_data_ioctl+0x180/0x180 [ 1996.401368] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1996.402145] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1996.402919] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1996.402954] ? generic_block_fiemap+0x60/0x60 [ 1996.402966] ? lock_downgrade+0x6d0/0x6d0 [ 1996.402983] sock_ioctl+0x3ef/0x710 [ 1996.402996] ? dlci_ioctl_set+0x30/0x30 [ 1996.403015] ? selinux_file_ioctl+0xb6/0x270 [ 1996.407063] ? dlci_ioctl_set+0x30/0x30 [ 1996.407602] __x64_sys_ioctl+0x19a/0x210 [ 1996.408153] do_syscall_64+0x33/0x40 [ 1996.408653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1996.409345] RIP: 0033:0x7fb25f64db19 [ 1996.409838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.412302] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1996.413312] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1996.414272] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1996.415232] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.416178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1996.417125] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1996.425931] cgroup: Unknown subsys name 'uid>18446744073709551615' [ 1996.433580] SELinux: duplicate or incompatible mount options [ 1996.438294] cgroup: Unknown subsys name 'uid>18446744073709551615' [ 1996.445204] cgroup: fork rejected by pids controller in /syz4 11:23:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x114, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d977a1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1dba}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78148ec0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x218f57b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b4692f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ab0564a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x455b46f8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6300}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16a934be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x261620de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68c82407}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc021}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74e819da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd784}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b4a2edf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f88bbc0}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8005}, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010000000000040004802c00088024000780080005001c56fb2f0005000000000008000600000000133dafc8770b2728000100"/78], 0x54}}, 0x0) 11:23:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3f1a, &(0x7f0000000180)={0x0, 0x1ffe, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x6) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r1, r1], 0x8, 0x0, 0x1, {0x0, r6}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012103, 0x1}, 0x80000001) io_uring_enter(r2, 0x58a7, 0xf6f4, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="0100a6ece66e7bdd352000001ff800"/31, @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=r8, @ANYBLOB=',afid=0x0000000000000345,\x00']) fchownat(r0, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, r8, 0x1000) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) creat(&(0x7f0000000040)='./file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0\x00') 11:23:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:23:22 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r0 = gettid() capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000100)) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x1000002e, 0x2, @thr={&(0x7f0000000380)="046d91aabe8b59babf80879a918c2766328ef52030c386efa3c0656393ae2ee7a4b47e9bdde8e8b7c1a281b4dedccef9736d11a8c1303a6714e9969009d05b", &(0x7f00000004c0)="7ae662e921d48f4f924675059336348f18fd2b1bfb69dbe80402f0dd936eb90d84d6c60c1942ceb8a9813193e6941b55cfffa85565946e85b2904d2f4b55bbfa173209483d68863c55ac8834944119f1c1fe23b58d6dae0562abdf5b482d3f97a3c6ed0825b36a39424721099792a397536b185819b1d66895469d69bef92d75d35087540aea5bfa5b6688b47aa974ecc3922ab460f3de490000000000"}}, &(0x7f0000000340)=0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000040)={{r3, r4+60000000}, {r5, r6+10000000}}, &(0x7f0000000300)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001600010d0000000000000000000479ab0112e771690c2d4170de34389fdbd32aeb4714c1fc51288770d4d9edc67bc0cb27f8850900000099794b77f35767d8b56772508252927d186e0e290ebdba5ac2d3adaa4a30505d1ab49f33277a377a311d5e076013a3e0dd01f7307960956b7f2c960c3f20a007d7ac7376ca6ccca0d89ac3964fb07d68cd0d6ac799cf15ebcd835d85d11aec110276758cf4014436e6640cf05b24d12b2ac6307cd016a92cc48a"], 0x14}}, 0x0) timer_create(0x3, &(0x7f0000000400)={0x0, 0x4, 0x2, @thr={&(0x7f0000000140)="90bc4b93e1896f5f9839e7bf80b39eb4c9783a0aba9ea0035950e682dec9a6901f6a790f5d4b5774d483fd03d3667063829263e9b5d787280bed2d23ebd1", &(0x7f00000002c0)="fad155fa6a44751f4591c1d63be3571b691d233202595b2bdab550724c3c4e112d587c61b2e848cdaa189a9bc8a8429aa93f61c62ecc3e7c5070438efe2a798e"}}, &(0x7f0000000440)) syz_usb_connect$uac1(0x6, 0xeb, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x3, 0x1, 0x2, 0x50, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x33}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x20}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x6, 0x6, "a9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x81, 0xff, 0x1, "a1db89"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x70, 0x80, "1d2b7a"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x40, 0x4, 0x0, 0xa3, "024e0e4f48d3"}, @as_header={0x7, 0x24, 0x1, 0x7, 0xe1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x4, 0x33, {0x7, 0x25, 0x1, 0x2, 0x80, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x8, 0xeb, "43d69b00f010"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x1}, @as_header={0x7, 0x24, 0x1, 0x81, 0x9, 0x1002}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x40, 0x4, 0x1, 0x8, 'EV'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x8b, "9b1e1035"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x0, "ccf0fe", "173f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x7, 0x1, {0x7, 0x25, 0x1, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x4, 0x9, 0x0, 0x20, 0x4}, 0x189, &(0x7f0000000740)={0x5, 0xf, 0x189, 0x4, [@generic={0xdc, 0x10, 0x4, "915c7bd0d264c1f8673d645dc65ea68441a22c7e05455737c3f0115d3ac07d79a5a23537fed5c64c3eefaa45b2911804043344ea2ef4ed3d68ed774c5b8693cbad523f34f3ed2b52f54fe0832464454508d13104bfecc203d57d1fa7b015f69fa7707541c383e34c0edb83c73b4559252f361b0ccf2ad6f79721130f92c3773e1c1e25190de934c7a900893989f1241295f77300d51ff180f389ff3d18e6b62bd5876254c6bafa583a02e3fec8755656f8c916b0e83cb4ed930fb44187d7751a922e77830ab075d1185d62b9c9626e58f18e8a333ce7efe8fb"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x5, 0x8000}, @generic={0x45, 0x10, 0x2, "70e3bd0773aebe4ff796e56b30ccf60e944e805b2fe9260e4cec1cac5b9464a8b2d32770ca8f2ee313e9d82f37a8ec524f0d3dd87c953d9622db63ef2759cbab53ae"}, @generic={0x5c, 0x10, 0x5, "9b6ad6db9ec233187108ef64e073f5886c1c87064f1311e32ea2702258e723fe9bba5a009bf8afc954710c0a7e19835b41a046321832e332306703a4046a6d3d5606fcf5f9520e3edeef7b0116ca3b38a848d1eb556b9273f1"}]}, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x467}}]}) lseek(r2, 0xffffffff, 0x902f90f22c7c3cf) read(r2, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:23:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) (fail_nth: 100) 11:23:22 executing program 0: fcntl$notify(0xffffffffffffffff, 0x402, 0x80000014) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r2}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x6, 0x3) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$inet(0x2, 0xa, 0x0) dup2(r4, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400000, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x390, 0x9, 0xaa9, 0x6, 0x4}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000001c0)) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1996.611886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1996.718639] FAULT_INJECTION: forcing a failure. [ 1996.718639] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.721716] CPU: 0 PID: 19191 Comm: syz-executor.3 Not tainted 5.10.242 #1 [ 1996.723430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.725480] Call Trace: [ 1996.726136] dump_stack+0x107/0x167 [ 1996.727054] should_fail.cold+0x5/0xa [ 1996.727999] should_failslab+0x5/0x20 [ 1996.728942] __kmalloc_node_track_caller+0x74/0x3b0 [ 1996.730177] ? inet6_rt_notify+0xed/0x2a0 [ 1996.731221] __alloc_skb+0xb1/0x5b0 [ 1996.732124] inet6_rt_notify+0xed/0x2a0 [ 1996.733110] fib6_add+0x3223/0x45d0 [ 1996.734028] ? lock_release+0x680/0x680 [ 1996.735026] ? fib6_update_sernum_stub+0x80/0x80 [ 1996.736190] ? do_raw_spin_lock+0x121/0x260 [ 1996.737256] ? nlmsg_notify+0xa3/0x290 [ 1996.738224] ip6_ins_rt+0xb2/0x110 [ 1996.739094] ? ip6_dst_neigh_lookup+0xf0/0xf0 [ 1996.740207] ? __ipv6_ifa_notify+0xaa0/0xaa0 [ 1996.741300] __ipv6_ifa_notify+0x85a/0xaa0 [ 1996.742351] ? __fib6_clean_all+0x138/0x2a0 [ 1996.743412] ? modify_prefix_route+0x530/0x530 [ 1996.744536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.745825] ? trace_hardirqs_on+0x5b/0x180 [ 1996.746902] ipv6_ifa_notify+0xd7/0x240 [ 1996.747890] ? __fib6_clean_all+0x2a0/0x2a0 [ 1996.748944] add_addr+0x1c7/0x2c0 [ 1996.749805] ? inet6_ifa_finish_destroy+0x1b0/0x1b0 [ 1996.751036] ? mark_held_locks+0x9e/0xe0 [ 1996.752033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.753312] ? __local_bh_enable_ip+0x9d/0x100 [ 1996.754429] ? trace_hardirqs_on+0x5b/0x180 [ 1996.755511] ? ipv6_find_idev+0x174/0x220 [ 1996.756540] addrconf_notify+0xf7c/0x2390 [ 1996.757580] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1996.758838] ? inet6_ifinfo_notify+0x150/0x150 [ 1996.759972] ? failover_register+0x530/0x530 [ 1996.761080] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 1996.762425] ? igmp_netdev_event+0x31/0x810 [ 1996.763461] ? ipmr_device_event+0x192/0x1f0 [ 1996.764556] raw_notifier_call_chain+0xb3/0x110 [ 1996.765758] call_netdevice_notifiers_info+0xba/0x130 [ 1996.767024] __dev_notify_flags+0x110/0x2c0 [ 1996.768065] ? dev_change_name+0x6b0/0x6b0 [ 1996.769086] ? __dev_change_flags+0x4cf/0x6e0 [ 1996.770182] ? dev_set_allmulti+0x30/0x30 [ 1996.771210] ? dev_ioctl+0x22e/0xd30 [ 1996.772120] ? lock_acquire+0x197/0x470 [ 1996.773112] ? full_name_hash+0xb5/0xf0 [ 1996.774103] dev_change_flags+0x100/0x160 [ 1996.775152] dev_ifsioc+0x5b9/0xa00 [ 1996.776066] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1996.777400] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1996.778694] dev_ioctl+0x23c/0xd30 [ 1996.779584] sock_do_ioctl+0x17d/0x300 [ 1996.780536] ? compat_ifr_data_ioctl+0x180/0x180 [ 1996.781777] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1996.783184] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1996.784485] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1996.785758] ? generic_block_fiemap+0x60/0x60 [ 1996.786877] ? lock_downgrade+0x6d0/0x6d0 [ 1996.787896] sock_ioctl+0x3ef/0x710 [ 1996.788792] ? dlci_ioctl_set+0x30/0x30 [ 1996.789801] ? selinux_file_ioctl+0xb6/0x270 [ 1996.790895] ? dlci_ioctl_set+0x30/0x30 [ 1996.791849] __x64_sys_ioctl+0x19a/0x210 [ 1996.792846] do_syscall_64+0x33/0x40 [ 1996.793756] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1996.794991] RIP: 0033:0x7fb25f64db19 [ 1996.795898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.800361] RSP: 002b:00007fb25cbc3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1996.802201] RAX: ffffffffffffffda RBX: 00007fb25f760f60 RCX: 00007fb25f64db19 [ 1996.803961] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 1996.805689] RBP: 00007fb25cbc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.807415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1996.809152] R13: 00007fff8dd3fcbf R14: 00007fb25cbc3300 R15: 0000000000022000 [ 1996.938295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2001.449107] Bluetooth: hci2: command 0x0409 tx timeout [ 2003.497121] Bluetooth: hci2: command 0x041b tx timeout [ 2005.545205] Bluetooth: hci2: command 0x040f tx timeout [ 2006.637155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2006.639402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2006.642707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2006.709764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2006.711629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2006.714378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2006.869582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2011.434109] Bluetooth: hci2: command 0x0409 tx timeout [ 2013.481320] Bluetooth: hci2: command 0x041b tx timeout [ 2015.529119] Bluetooth: hci2: command 0x040f tx timeout [ 2016.735328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2016.737581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2016.742976] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2016.780971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2016.782929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2016.787872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2016.936024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2016.945413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2016.953852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2017.577103] Bluetooth: hci2: command 0x0419 tx timeout 11:24:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:24:00 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2034.040798] tmpfs: Bad value for 'mpol' [ 2034.058350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:00 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x35, 0x2d, 0x33, 0x2f]}}}}]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x0) dup2(r2, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r1, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@hci}, 0x0) r6 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup2(r10, r9) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000080)=@hci}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r11, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r8, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x7, 0x4, 0xb518, 0x92b, 0x10, 0x1, {0x1}}, 0x1000) dup3(r0, r1, 0x0) 11:24:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c", 0x33}, {&(0x7f0000000540)}], 0x3) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xd4, "544d056968f26f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054a80)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "043ba9ba70070b"}) lseek(0xffffffffffffffff, 0x6, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r5, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) fallocate(r2, 0x0, 0x0, 0x8000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1db3bb3124b6c839b5a2c5ff0317", @ANYRES16=0x0, @ANYBLOB="000025bd7000ffdbdf251f0000000c00060001000000010000000c00060000000000000000000c0006000100000001000000"], 0x38}}, 0x1) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x4000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) dup2(r0, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 11:24:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:00 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:24:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 2034.069677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2034.079649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2034.105467] tmpfs: Bad value for 'mpol' [ 2034.107390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2034.137680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x2, &(0x7f0000000140)={'lo\x00'}) 11:24:00 executing program 0: fchown(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) dup2(r0, 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x80, 0x400) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) keyctl$chown(0x4, r3, 0x0, 0x0) stat(&(0x7f00000001c0)='./file2\x00', &(0x7f0000001c00)) fork() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x80000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000080)=@hci}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000000240)={{0x0, 0x100, 0x2, 0x8000, 0xfffffffffffffff9, 0x0, 0x5, 0x800, 0x148ff063, 0x9, 0x40, 0x80000001, 0x7, 0xffff, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f00000013c0)={0x44, 0x0, 'client1\x00', 0x0, "f20aeefbe13eb088", "9fabac17580b9c40b5e36821c39036c685630363a2ce951fd28226f333d2f5c5"}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000200)={&(0x7f0000000180)=""/19, 0x13, 0x0, 0x8cfc}) 11:24:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2051.763948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:24:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001700)='/sys/kernel/notes', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x7c, 0x20001f) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@hci}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f00000000c0)={0x2, 0xb0, "5605cf58e9e8aded0994a9d7e6ff139b8534a1a04278eb2e95a618e288feb7be0b394094eba92f5bcee5734b8788dc6a245e1b8c5fe7aae1e1ba7846deeed0eee2877874c824c562a87fa25010f4a9edeaec871580e916274c8509516e9b2044715ef25d3f73acf2533e8debee9098be8b4995473c872b24408371d56a521a89b5bcad65e961ac13bdb62e2ecbc29c9f7367a811e83e9769932cf2105e1ed65ce3d93ef94f0d6e0b202643e729fe9f65"}) 11:24:17 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:24:17 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:17 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x33, 0x4, 0x70bd2c, 0x25dfdbfc, {0x2}}, 0x14}}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="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"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) read(r2, &(0x7f00000006c0)=""/135, 0x87) r4 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x800, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000300)={0x20000008}) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x2000, 0x82) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x2}}, './file1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 11:24:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x4b47, &(0x7f0000000140)={'lo\x00'}) [ 2051.781355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.785542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2051.788005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.818322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.846822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.863588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.865817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2051.868330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:24:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}, 0x0, 0x8001, 0x2, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsopen(&(0x7f0000000480)='autofs\x00', 0x1) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000000000a93641e61182fae55b1f440000000000000000000000000000000000000000000008000000010000000000000000000400"/256]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d400000014000268e872002a36e58c2516000000309195bcedd4a355ffd0b57d36c80aa3cd5c00a209ab410588e2acf39f612a058aca019d424c1cfefa9bd84118e7b9a3dc7b648488e3b314280151f16e53c3b34d356001432e0e37dbfac2e264d49dde22ffb05d71782e4588a22964e120c9b3e8ac10a180903c642a26553943488705f8f9389f0dc82f10989f62b3874701ee49da692b47f3a2374ddcf5407ac1d8d6ece93e8156a83bca75748906b35121f4bfbcd532464798ecfcbf0151eccc1703000000e09aefabad56510f51901f721fb776488673f91400"/230], 0xd4}, 0x1, 0x0, 0x0, 0x8010}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x207, &(0x7f0000000300)=[{0x5, 0x6, 0x8, 0x3f}, {0x100, 0x0, 0x14, 0x80}, {0x1f, 0x0, 0x46, 0xffffff4e}, {0x3, 0x8, 0x25, 0x6}, {0x7, 0x81, 0x9, 0xeab}, {0x800, 0x8, 0x2, 0x3}, {0x4, 0x2, 0x1, 0x8}]}) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4, 0x16ba}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) unshare(0x48020200) [ 2051.883388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 11:24:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x4b49, &(0x7f0000000140)={'lo\x00'}) 11:24:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25, 0x7}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa52526141", 0x24, 0x1e0}, {&(0x7f0000010200)='\x00\x00\x00\x00rrAa', 0xffffffffffffff50, 0x4004003e0}], 0x0, &(0x7f0000011100)=ANY=[@ANYBLOB="f1"]) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) dup2(r1, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x11, r0, 0x0) unlinkat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 11:24:18 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2052.386299] cgroup: fork rejected by pids controller in /syz0 11:24:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='\''], &(0x7f0000000000)='./file0\x00', 0x0, 0xf000, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x2000400000000, 0x2440) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x100) 11:24:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x263d, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x5, 0x1a3, 0x0, 0x7ff, 0x1, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE, 0x2) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fallocate(r2, 0x30, 0x80000001, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000636000/0x400000)=nil, 0x400000, 0x3000008, 0x13, 0xffffffffffffffff, 0x10000000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r3 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x100000001) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usbcore', 0x80, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f00000000c0), 0x20000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x7}}, {@version_u}, {@msize={'msize', 0x3d, 0x47}}, {@access_user}, {@version_9p2000}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@appraise}, {@hash}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '}'}}, {@pcr={'pcr', 0x3d, 0x18}}]}}) 11:24:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x5411, &(0x7f0000000140)={'lo\x00'}) [ 2066.017573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:32 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:24:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:32 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) [ 2066.038384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:32 executing program 0: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x8000, 0x0, 0x200, 0x5, 0x1}, 0xfffffff9) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d05ace8a252e0aeb36d5bbdf8fafdc68951424dc1d79cf17d281594f1c1cfd74adbee4e806683a4c71d9cc00c277f30fcde49f63551c0fda13d234930c007a8cd5b1000c0046128ea38d022060321c2e366bcf83ab3d267f43e483e0100d003c9cb84ebcbd96fe93177bfbd604172e0c457781ae36ae7313d6dcfe1ae1ab5b7378bba0707000000000000002f03a97d6ba90e62da9444eb", @ANYRESHEX=r2, @ANYBLOB="2c63616368653dd6a561702c63616368653d667363616368652c64656275673d3078303030303030303030303030303932342c6e6f6465766d61702c6e6f657874656e642c64666c746769643d", @ANYRESHEX, @ANYBLOB=',afid00000034\x00'/26]) [ 2066.068746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.101431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.109418] 9pnet: Insufficient options for proto=fd [ 2066.129838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x541b, &(0x7f0000000140)={'lo\x00'}) 11:24:32 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) dup2(r1, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r0, 0x0) lseek(r0, 0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_delete(0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x1f86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e4e, 0x0, 0x3ff, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r3}, &(0x7f0000000340)=0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x4b68, 0x0) fcntl$dupfd(r6, 0x406, r2) timer_settime(r5, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000fcff010d0000000000780bb4f87e61690261e35af467f7917dde38d65bca25f01636f54aa529a8abeb564d713f2fc27bf915c84f591f76b1618bc92aba1c4ed812a6b263ebf426b0addda36e6838863a7e3172ee8457e99f43a93f78e10f23a118d800832b2c567dd24ef91b47bc79ec2c6228b98d2494f429dfcd6c66ebaec04f316b5c26c89eb8684ae63dc5107871fc5dae6397f37aa7a2e7c91666030c3a4e2de47e8e8e9d8e8d641c26f9a6b4d37cf6507d72965b93e2e1b2bacf1d98bc1d3e8500"/213], 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="01ef07000000000000060000b6ffab423c9d87dcf81f4ea42dd825bdac1111ff42ebc34826007ce1ccd0049bd02a7b1414a5f9231630c91e629961d82e7c82443c08b29d7ffec459097484c60000000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="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"]) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000000c0)) 11:24:32 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:32 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2066.354370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x5421, &(0x7f0000000140)={'lo\x00'}) [ 2066.368319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xd, 0x12, r0, 0x0) truncate(&(0x7f0000001040)='./file1\x00', 0x4) pipe2(&(0x7f0000001080)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000010c0)={0x4, 0x80, 0x20, 0x9, 0x0, 0x80, 0x0, 0x1, 0x450, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0xffffffffffff617f, 0x6}, 0x400f, 0x0, 0x0, 0x5, 0xb1ae, 0xaa7, 0x4, 0x0, 0x9, 0x0, 0x3}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f00000012c0)=[{&(0x7f0000000040)="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", 0xfffffe90}], 0x1, 0x0) 11:24:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = inotify_init1(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev}, @typed={0xc, 0x18, 0x0, 0x0, @u64=0xfffffffffffffbff}]}, 0x28}}, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r0, r1, 0x0, 0x100000001) 11:24:32 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:24:32 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:46 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:46 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:24:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x5450, &(0x7f0000000140)={'lo\x00'}) 11:24:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffd, 0x3ab, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$inet(0x2, 0xa, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25", 0x17}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000, 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80101) openat(r0, &(0x7f0000000240)='./file0\x00', 0x40282, 0x80) r5 = syz_open_dev$rtc(&(0x7f0000000380), 0x12e, 0x1) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) lseek(0xffffffffffffffff, 0x1000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0x0, 0x400}, @timestamp], 0x2) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) 11:24:46 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:24:46 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae01000001001000000000006400"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2080.873708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000073025c55400000018000000", @ANYRES32=r2, @ANYBLOB="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"]) r3 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) r5 = dup2(0xffffffffffffffff, r3) fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x1000) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [{}, {0x2, 0x6}, {}, {0x2, 0x2, 0xee00}], {}, [{}, {}, {0x8, 0x3, 0xee00}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x2}}, 0x64, 0x0) getpgrp(0x0) r6 = accept4$unix(r5, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r2, 0x9, 0x2, 0x80000001}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x100010, r3, 0x40aea000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, r7, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000080)='./file0/file0\x00', 0x2, 0x75b681, 0x12345}, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2d) fcntl$dupfd(r4, 0x406, r1) timerfd_create(0x0, 0x0) [ 2080.894788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2080.901764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2080.913668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2080.937624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x5451, &(0x7f0000000140)={'lo\x00'}) 11:24:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x102) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f00000003c0)='wlan0\x00', &(0x7f0000000440)='\xd7,+[-&@\x00', &(0x7f0000000c40)='\x9c)Q#\x18?\xe1\x9d\xf8\xb6\x04\x9d\x9c\xd2\xa0\x012\x80\x8d\x83\x8d\x8d\x03\x11\xc7\xbd\xa4o\xafo\x85F\xcd\xd1\xce\x94U\x9e\xfe\xa0\x14\xa8\xb03:\xc7\xe2\xb7\xc4ux\xef7\x0f$\xf2\xe1\x98\xcb\x0e\x02\xe7=I[Bb\x86\xd3\x11\xd0\x18CS\x8euz_;\f\xdf\xa2,\x0etQ\xbc\xa8\x951=\xb2\x99v\x1d\xee\x14\xe4\xa1<+\ni&8\x1f\xc7\x8a\xcf\x90\x9e\x96\xef\xfarB\xc3\x13\f\x06\xe6X\x06\xece\x8c\x8b\x84X\x97\x03)\xdd\x9cf0V\x8cN\xab\xef\xfe\x87Q_\xaa\x9eT>\x02\xf5\xb7M\xcev\x1f\xda)V\x8a\xb9\xae\x187l\xf7t\xab\xe2\x15a\x95u^!\xa5\xfbbq\xa34\xacc1\xf2\xb2im\xfe\x15\xb0\x9d\xb0L\x99\x01k,\xc6u\xefn\x03\x17\xa1\xdc:\xf5)x\xa6\x85z\xfa\x8a2\x93/\xc0\xbe\xf2\xf3\x97\xa8\xb8-,\xf1\x87\xd1\xf9\xf4\xb9\xad\xa7\x96#\xcf\x9b\xbaI\xa5\xc6n\xc6[\xb7?\xd7\xa0\x0e\x93%@{\xce\xbf\x91]\xf4\x9d\x9a\xd9\xa1b\x8fF\xbb\xa6\xf9\x93\xa3\xc7\'\\\x95\x06\\\xcf\xf5o\xec'], &(0x7f0000000880)=[&(0x7f0000000800)='\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x78, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000d80)=ANY=[@ANYBLOB="0100ffff1803d4b00e01000053284d1028d66594d92c53bdf69d0e5a5c9d3b9d9bc5865a8912a750ef5c09d97eab6bbea6f175d17323f02d0bee7d7805dfd2a7d461bde8632911194a674edc316bdaba1f628a9c457c51f4581e0125008ce0e7eacf34b6bfced3fd11ac9b773a74b2e42ca9d2355f0495cbda20dee4dfd55a3136925986f493181652f652550613e44c11eeee34db489254b24127423f997895c079d1db2804e87bb25c8e74af73b227334b27d127e95ed686033d8d74ce6eb3c16967678190c3aa47c8f4bcdb916efec7e00b205c8ca45455862c00000000000000007b5f92083ec4e2998d42da673c2c0a79237a0da465f05349ba3b4c460d6f9597a10afe999e482dd7be1eb0737c7903394ed76f30ebab404126d9b05d057b2e84dbc22800d1f20b6d46bc6afd2507eac27b8779c80a40158233082b9bc10643551976728a2829fdfc342ea583a634c9f5d272a2348b0478", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ftruncate(r0, 0x1000003) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000b80)=""/145, 0x91}, {&(0x7f0000000b00)=""/108, 0x6c}], 0x3, 0x1, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, @perf_bp={0x0}, 0x8, 0x2, 0x400, 0x3, 0x2, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0x80000001) clone3(&(0x7f0000000740)={0x40092340, &(0x7f0000000480)=0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500), {0x34}, &(0x7f0000000540)=""/201, 0xc9, 0x0, &(0x7f0000000700)}, 0x58) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000007c0)={0xfffffffd, 0x81, 0x667, 0x3f, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'veth1_to_bridge\x00'}) renameat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)={0x400, 0x1c, 0x1}, &(0x7f0000000980)='./file0\x00', 0x18, 0x0, 0x12345}, 0x400) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 11:24:47 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae01000001001000000000006400"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:47 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2081.223906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2081.244363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:24:47 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x5452, &(0x7f0000000140)={'lo\x00'}) 11:24:47 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae01000001001000000000006400"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:24:47 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:24:47 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) [ 2081.532357] cgroup: fork rejected by pids controller in /syz7 [ 2081.563930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2081.572632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2081.603703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2094.116340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2094.149629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:00 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:00 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:00 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:00 executing program 0: r0 = open(&(0x7f0000000180)='./file0\x00', 0xc0000, 0x4) r1 = socket$inet6(0xa, 0x800, 0x8) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000040)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001e00)=""/4096) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000001480)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="eace24db7376a52cabd6565e49cd", 0x5ee, 0x0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2024, &(0x7f0000000200)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x9, r5, 0x1, 0x28, 0x6, @random="1900de9961ba"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r5, 0x29, 0x2, 0x40, 0x0, 0x24, @mcast2, @loopback, 0x10, 0x80, 0x80000000, 0x1fd}}) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) unshare(0x48020200) 11:25:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x5460, &(0x7f0000000140)={'lo\x00'}) 11:25:00 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:00 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:00 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pread64(r0, &(0x7f00000001c0)=""/50, 0x32, 0x2) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2105012, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}], [{@pcr={'pcr', 0x3d, 0x2e}}, {@permit_directio}, {@subj_user={'subj_user', 0x3d, '/\x00'}}, {@pcr={'pcr', 0x3d, 0x38}}, {@subj_role={'subj_role', 0x3d, '{\xf9'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@dont_measure}]}}) sendfile(r2, r1, 0x0, 0xffffffff000) [ 2094.161016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2094.161498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2094.168591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:00 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) write(r1, &(0x7f0000000240)="01", 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, &(0x7f0000000280)=0x10000, 0xc3a, 0x0) ioctl$CDROMREADAUDIO(r2, 0x530e, &(0x7f0000000180)={@msf={0x7, 0x2, 0x7f}, 0x6, 0x4, &(0x7f0000000140)=""/4}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0), 0x0, 0x0, 0x1) [ 2094.262120] loop1: detected capacity change from 0 to 262144 [ 2094.268612] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 2094.304430] loop1: detected capacity change from 0 to 262144 11:25:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8901, &(0x7f0000000140)={'lo\x00'}) [ 2094.313477] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:25:00 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21, 0x7}, 0x200, 0x6f80, 0x0, 0x8, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) syz_open_procfs(0x0, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/partitions\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8, 0xc0) fsetxattr$security_ima(r3, &(0x7f00000000c0), &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000072d78977d5a96e6b6d6ce4b43b8cb4f0bf05c4da66a2f1ff5cb3f1ba75b8e8a8247afbc77c35bc241bad603741da16ca9a1599795570fbb661525f5873f0396d84e85a3089706f5618f1578564c8d2ad4dc9dd042709d93030c0b7b68d4fa94f0878aa3bfd499d60d5a26"], 0x14, 0x1) io_uring_enter(r3, 0x19ae, 0x86a4, 0x2, &(0x7f0000000180)={[0xfffffffffffffbff]}, 0x8) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x0, 0x0, 0x1000, 0xc5021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0xffffffff}, 0x88, 0x5, 0x6, 0x1, 0x7, 0xa, 0x2, 0x0, 0x10100, 0x0, 0x7f}, 0x0, 0x0, r1, 0x3) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r4 = socket$netlink(0x10, 0x3, 0x0) fstat(r4, &(0x7f0000000340)) 11:25:00 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1613bf23, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300)=0x5, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2000000}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0x0, 0xfffffffffffffeff, 0x0, 0x9d, 0x5, 0x0, 0x8}, 0x0, &(0x7f0000001440)={0xe5, 0x80000000a, 0x0, 0x2000000000000005, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) quotactl(0x0, &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000cc0)={&(0x7f0000000b40), 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="000000a1", @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c0022800400008004000080070021006161000005009200000000000400cc00"], 0x34}}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0), 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000280)) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000200)=0xc) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) unshare(0x48020200) 11:25:00 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:00 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:00 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8902, &(0x7f0000000140)={'lo\x00'}) [ 2094.505354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2094.518663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:00 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:00 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2094.606236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2094.626829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2094.646691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0xa, 0x0) dup2(r5, r4) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000300)=""/164, 0xa4}], 0x2, 0x0, 0x6) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @remote}, @private2, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400036, r3}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f0000001500)={0x1dc, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x800}, @ETHTOOL_A_EEE_MODES_OURS={0x1c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4b, 0x4, "04fbf16512294894383cbc668aa5ca899c5cbe43ca3a88922617b15404d5f5ad695afa70ab05b9fbd3f55a3dd62993023c3c98f053c660cd8664484952d99a3526653e03103b09"}, @ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "f3390aa0eb3f4c0dcd19cc4c31063220084e73e8bb0173016b78f8ba55b65ea28cfaaebf5a5f0c0f62137b3912c2dc3bc3e6ee75a01f6e318a9eba79c5ee35cb7e3fb44c8c5d0d3040046dc59672c3c7eeabde47476a92de6a513ebce8efcd67e64bbb31ff7131270f797b1008164b0183a9500c9a3d5b89f7491218e095fd8e4e1ccf42b7adf3067e7916c6474d45e83a109d8ed34d3370216ec03aaa282b4f334ed80927203480d75bad0f122c2af98e4123cb83ea8d94092eb219ce3c7030c2d373"}, @ETHTOOL_A_BITSET_VALUE={0x24, 0x4, "1cb17ae20c230e504153e2fd86e9780a22bdbc774c1cc398abfacbc1fe60fc97"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@]\\-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000240)={@mcast1, 0x34, r6}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaf6a500ff000800000000000000008000ec119078000000000000000000004e2008b2a2a80d7a6619a07a4c3f9028d64249c8e60deb7702dcecfd86141869f2ae3f1e6a43f84c3c83fa8498830c712896ddb17dedd0f080288f0f4e39a011712aebd8c2c6bf0e5cba15cfb58f32d13e20a201d7deade3889381cb1d1cb2f54713b56144e644983e446d63cb56da3e2c8222cdaea6b33e7c5bc406eb7d6d0dc97cb0426298dd5260f0d8d9de6b03c56b89b1d9cc8e000000000000000000"], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x2, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0xfffffffffffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setown(r7, 0x8, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x6b, 0x20, 0x5, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f00000004c0)) 11:25:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8903, &(0x7f0000000140)={'lo\x00'}) [ 2094.772509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:00 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:00 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2094.800748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:00 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:13 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:13 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14de7b7c95fdf10f"], 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x0, 0x0, {{0x7a}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="2000290008000300"/18, @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) quotactl(0x200, &(0x7f0000000000)='./file0/file0\x00', 0xee00, &(0x7f0000000440)="8a94c54c946e411b9e0f5887b4922b83e2bc69a80200e860481875152b17fcd336085c87b21137c7411e0372a8ebc9db1b99232b183fd1e5030912201028769e1b") 11:25:13 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8904, &(0x7f0000000140)={'lo\x00'}) 11:25:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x585de2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) r8 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) flistxattr(r8, &(0x7f0000001140)=""/76, 0x4c) mq_timedsend(r8, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {r3, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {r7}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r7}, {r4}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x7f, "9656c75f04ba4d"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000012c0)={'syztnl1\x00', &(0x7f0000001240)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x81, 0x9, 0x20, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast1, 0x20, 0x10, 0x2, 0x401}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000001300)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x49, r24}) lseek(r1, 0x0, 0x2) r25 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r2, 0x0, 0x480c1, 0x186) copy_file_range(r25, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 2107.813964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:13 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:13 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2107.848679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x1000) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000280)={0x0, 0x1, r1, 0x2}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x5, 0x5, 0x1, 0x0, 0x40, 0x44100, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff80b0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x8, 0x200, 0x9, 0x3, 0x3f, 0xa0000000, 0x7, 0x0, 0x6, 0x0, 0x400}, 0x0, 0xe, r1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f00000006c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x6, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0xfffffffffffffffd, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r4) [ 2107.870279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2107.877935] cgroup: fork rejected by pids controller in /syz2 [ 2107.911377] audit: type=1326 audit(1757589913.999:198): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22601 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff561445b19 code=0x7ffc0000 [ 2107.916231] audit: type=1326 audit(1757589914.004:199): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22601 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff561445b19 code=0x7ffc0000 [ 2107.919241] audit: type=1326 audit(1757589914.007:200): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22601 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff561445b19 code=0x7ffc0000 [ 2107.926709] audit: type=1326 audit(1757589914.010:201): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22601 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff561445b19 code=0x7ffc0000 11:25:14 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2107.934029] audit: type=1326 audit(1757589914.010:202): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22601 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff561445b19 code=0x7ffc0000 [ 2107.946034] audit: type=1326 audit(1757589914.010:203): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22601 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5613f8a04 code=0x7ffc0000 [ 2107.954920] audit: type=1326 audit(1757589914.010:204): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22601 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5613f8a04 code=0x7ffc0000 [ 2107.965428] audit: type=1326 audit(1757589914.010:205): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22601 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff561445b19 code=0x7ffc0000 [ 2107.985611] audit: type=1326 audit(1757589914.011:206): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22601 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff561445b19 code=0x7ffc0000 [ 2108.013745] audit: type=1326 audit(1757589914.012:207): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22601 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff561445b19 code=0x7ffc0000 11:25:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8905, &(0x7f0000000140)={'lo\x00'}) 11:25:28 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:28 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000600000000000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000"], 0x90) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x200, {{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}}, {{0xa, 0x4e23, 0xb2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x108) 11:25:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:28 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:28 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x28, 0x4, @thr={&(0x7f0000000080)="96af576fa9d49d6ea8919a7729cd6c50e43bdb196c459216ccd1a9b9d8fad2a956c295c84e0154fe42", &(0x7f00000000c0)="1569be56f2c9e4cdd4d28cbc0af595f750d1b54f9dc0efaa4f97aeb6e45fd212072405c9a2330d944bb1374b7fc60cb911dd9a88db2b448c2710c6cdfcfb95fbddf4c3db38b7f01ff3412aa6647f49aaa47c54bc385ff46ae02bf75296a0bbbe6028048329eece0de92d0dfde7b270ad4d7e80f50f8be3f0b2d28f0633464663cf3d90e033b21d477d5c8583f5aac14ad5149e139abca500a840fc08a205664d93233426d8f43e"}}, &(0x7f0000000280)=0x0) pipe2(&(0x7f0000000340), 0x4000) timer_settime(r0, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000300)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2122.276384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2122.297350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2122.321072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2122.327710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:28 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x3, 0x4077, 0x40) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 11:25:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8906, &(0x7f0000000140)={'lo\x00'}) 11:25:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0xfecb6000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="011a0000a3c84e", @ANYBLOB="0000008100000000000000005cbe3fcf67b87d533c18108e5243a252d7a286596845cb4a5a17160e96edf24aa944e903d31ebc2d213014f0ed8f73005ec4cf29d27ff51150e8384bb18ae68bed222d11"]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_complete(0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x146910, r0, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x8}, 0x5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x73a13dff7ef1db6b, 0x20010, r6, 0x0) 11:25:28 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42f"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:28 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2122.707852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2133.417196] Bluetooth: hci2: command 0x0406 tx timeout 11:25:44 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:44 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42f"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8907, &(0x7f0000000140)={'lo\x00'}) 11:25:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:44 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000014000100000000000000000000000000000000000000000000006601ac1e000100000000000000000000000000000000000000000a00000000be9bf3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="8e0c3e40"], 0x50}}, 0x0) 11:25:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2138.477858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2138.481900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001180)="f2c0b00a0a73e255b2c6", 0xa}], 0x1, 0xff7, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) fcntl$dupfd(r2, 0x0, r3) ftruncate(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) creat(&(0x7f0000000280)='./file0\x00', 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) pipe(&(0x7f0000000000)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x4000, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) [ 2138.495559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2138.507997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2138.519661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$inet(0xa, 0x3, 0xff) dup(0xffffffffffffffff) dup3(r1, r2, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000180), 0x4) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x82000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 11:25:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8908, &(0x7f0000000140)={'lo\x00'}) 11:25:44 executing program 0: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x80, 0x5, 0xf, @private2, @local, 0x0, 0x20, 0x9, 0x2}}) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="000900000000000000030e08060001000000000000000700e9ffffff00003500000000000000800000000000000001000000000000007014000000000000040000000007000000001b000000000036c94d33cb06a1001900000000000000009b2c16057a8f92f243eba83527db2a6ddecd8ae9785b6ae05d575ae4e644c4da2a46"], 0x58) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000000c0)=@hopopts={0x73, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x44, "cb0cbd5345afa819a345a1d47c9ed081af42a93c1308be626322d0bba2fa6404074d88db5ba1c18b949e161f3f87aa160126ba3bc8430ba682c8df982bb78769a0cf7ae4"}, @ra={0x5, 0x2, 0xa2}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x80) 11:25:44 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:44 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42f"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:44 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2138.797023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2138.814497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8909, &(0x7f0000000140)={'lo\x00'}) 11:25:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:58 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:58 executing program 1: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='\x00', &(0x7f00000002c0)='./file1\x00', r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x13b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x83}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r1, 0x0, &(0x7f0000000000)="84f1631bb9f3a801b0c4046ce163734e6ac074ab242741280d11b448db93786527ea6d0ac77143", 0x27, 0x2, 0x1, {0x0, r6}}, 0x26000000) uselib(&(0x7f0000000080)='./file1\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10a0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 11:25:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x102) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', 0x0, &(0x7f0000000440)='\xd7,+[-&@\x00'], &(0x7f0000000440), 0x1000) ftruncate(r0, 0x1000003) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000b80)=""/145, 0x91}, {&(0x7f0000000b00)=""/108, 0x6c}], 0x3, 0x1, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fcntl$dupfd(r2, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x25, 0xc21}, 0x14}}, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x200, 0x4a) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x10000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000003c0)={0x1000, 0xd3c, 0x2, 0x4, 0x2004}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) open(&(0x7f0000000240)='\x00', 0x200, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, 0x0, 0x0, 0xffffffffffffffff) 11:25:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x890a, &(0x7f0000000140)={'lo\x00'}) 11:25:58 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:58 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2152.312762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2152.321901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2152.434932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x890b, &(0x7f0000000140)={'lo\x00'}) 11:25:58 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x2b50ad8a3ab27909}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x8269, &(0x7f00000000c0)={0x1a, 0x5, 0x9}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x8269, &(0x7f00000000c0)={0x1a, 0x5, 0x9}) r3 = getpid() process_vm_writev(r3, &(0x7f0000000640)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/249, 0xf9}], 0x5, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/247, 0xf7}], 0x2, 0x0) ptrace(0x11, r2) perf_event_open(&(0x7f00000008c0)={0x4, 0x80, 0x6, 0x8, 0x1, 0x4, 0x0, 0x0, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xf1f, 0x1, @perf_config_ext={0x3, 0x800}, 0x200, 0xc84, 0x3ff, 0x5, 0x8b5, 0x6d5c2dd9, 0x2, 0x0, 0x7, 0x0, 0x100000001}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r1, 0x8269, &(0x7f00000000c0)={0x1a, 0x5, 0x9}) sched_getattr(r1, &(0x7f0000000140)={0x38}, 0x38, 0x0) [ 2152.563369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:25:58 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:58 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:25:58 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:25:58 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setpgid(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x0) dup2(r2, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000004c0), &(0x7f0000000380)=0x0, &(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@nodevmap}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@afid={'afid', 0x3d, 0x345}}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r5, r8}}, './file0\x00'}) r9 = socket$inet(0x2, 0xa, 0x0) dup2(r9, r4) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @remote}, 0x200, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x7, 0x8}) creat(&(0x7f0000000100)='./file0\x00', 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r1, 0x0) r10 = accept4(r3, &(0x7f00000001c0)=@ethernet={0x0, @dev}, &(0x7f0000000240)=0x80, 0x0) read(r10, &(0x7f0000000280)=""/23, 0x17) copy_file_range(r1, &(0x7f0000000040)=0x77, r0, &(0x7f00000000c0)=0x6, 0x1000, 0x0) [ 2152.702884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2152.710310] kauditd_printk_skb: 50 callbacks suppressed [ 2152.710328] audit: type=1326 audit(1757589958.797:258): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25230 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2746db19 code=0x7ffc0000 [ 2152.717313] audit: type=1326 audit(1757589958.798:259): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25230 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fea2746db19 code=0x7ffc0000 11:25:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x890c, &(0x7f0000000140)={'lo\x00'}) [ 2152.731426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2152.739719] audit: type=1326 audit(1757589958.798:260): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25230 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2746db19 code=0x7ffc0000 [ 2152.767367] audit: type=1326 audit(1757589958.801:261): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25230 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fea2746db19 code=0x7ffc0000 [ 2152.792202] audit: type=1326 audit(1757589958.801:262): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25230 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2746db19 code=0x7ffc0000 [ 2152.813655] audit: type=1326 audit(1757589958.802:263): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25230 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea2746db19 code=0x7ffc0000 [ 2152.838915] audit: type=1326 audit(1757589958.803:264): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25230 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2746db19 code=0x7ffc0000 [ 2152.864446] audit: type=1326 audit(1757589958.804:265): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25230 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fea2746db19 code=0x7ffc0000 [ 2152.888762] audit: type=1326 audit(1757589958.804:266): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25230 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2746db19 code=0x7ffc0000 [ 2152.909369] audit: type=1326 audit(1757589958.809:267): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25230 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fea2746db19 code=0x7ffc0000 [ 2157.801125] Bluetooth: hci2: command 0x0409 tx timeout [ 2159.849123] Bluetooth: hci2: command 0x041b tx timeout [ 2161.897211] Bluetooth: hci2: command 0x040f tx timeout [ 2162.930765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2162.933106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2162.936956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2162.999647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2163.002118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2163.005879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2163.169734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2163.183520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2163.192749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2163.945155] Bluetooth: hci2: command 0x0419 tx timeout 11:26:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:26:22 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:26:22 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="95b51c00018fd33a0000000000000000189100", @ANYRES32=r0, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a5f2df0884ac7b2d8cf48af5dc01fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d66d92477fe946e898db0c1"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) faccessat(r1, &(0x7f0000000000)='./file1\x00', 0xb0) read(r2, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8e1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x90, 0x0, 0x3}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x89]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r4 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}, 0x0, 0x0, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x220998a32b054e1b, 0x80, 0x0, 0x1, 0x5, 0x9, 0x0, 0x0, 0x68, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2dd, 0x2, @perf_bp={0x0}, 0x210, 0x80000000, 0x8, 0x0, 0x0, 0x9, 0x1, 0x0, 0x81, 0x0, 0xbe}, 0x0, 0x0, r4, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000240)=0xb81, 0x9) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 11:26:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:26:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x890d, &(0x7f0000000140)={'lo\x00'}) 11:26:22 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:26:22 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:26:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x890c, &(0x7f0000000140)={'lo\x00'}) [ 2176.158873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2176.178661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2176.178968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:26:22 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') symlinkat(&(0x7f0000000100)='.\x00', r0, &(0x7f0000000140)='./file0\x00') r1 = openat2(r0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = pidfd_getfd(r1, r0, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/../file0/file0\x00', 0x50000, 0x10) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xffffffff, 0x3}}, './file0\x00'}) [ 2176.233968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2176.235719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:26:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x890e, &(0x7f0000000140)={'lo\x00'}) [ 2176.240180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:26:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x890f, &(0x7f0000000140)={'lo\x00'}) [ 2176.299419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2176.307140] tmpfs: Unknown parameter './file0/../file0' 11:26:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="eea0dd49ec16903503", 0x9, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}], 0x0, &(0x7f0000014d00)) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7eb, 0x8, &(0x7f0000000680)=[{&(0x7f0000000140), 0x0, 0x5}, {&(0x7f0000000180)="38e0731a27e488aa1575dbe42e4bfb78e65fc1720f866bfe23bd42e12dd2d23eb19898db535905d851685edae5d324a748fe", 0x32, 0x4}, {&(0x7f0000000280)="056ef364201e1a45e6155656773c822218efbf457b480f02ce3bc634b61d957c339adafcc8df697b9282b297912bc5a425e2c7981791cc3addbd6b945d29a0848fd029f962c29b8664f87a", 0x4b, 0xb6}, {&(0x7f0000000300)="ab2ddeaad9968e3fbac1ee05dd325bf1eddb84c8c7cb4149c3a02893e1cd929a35cb4a9f98ad41610f2092b3c85c638eac934e0e94fddfb037bf3689f1a1d8d31db0de814ef6bd7adce022e6be6eff13c2865b29adafe1e4cdcd9de427e1c91c0f3941698e1d848ca626591d2eeb85288fa8dab1e16a9e73e6bd8bcd9abb9bbc9101595a7410f4a009c00889d8f189a300f2", 0x92, 0x9d5}, {&(0x7f00000003c0)="c7b90fe51db74336c6ad7d5398578148749c37227cda64750c9052de9ea0d9ee90b8a6db94924765be90bcfe9f2d52484c7010ef7d7f430109b80af4376e6598033f78e1e03901f6f86883b39216251f8cef01957d74a970f6ccacb73056f6e95d8bd8e819015d9ec2cae1de382f791c615d691763dfc96b942f6e88bf15b0e02f1db3750024daf68c202e50ade0da13490c0f84653a472121615169674a6b81fb7ec66a358b8b79b5110b69e2facd881932f4b379ae6064f45e232c271c2c0a09736c891265ac443a5f3f2c366a41a5e97a45de63e9ea", 0xd7, 0xfffffffffffffffb}, {&(0x7f00000004c0)="8667034ccc2bb2429d5ec55fd72c43146940dbf59ced30888fff6e041ce1f7dba9d497a277b9514c8ffa01652f91353fb66cbeb1ebd723e739d0699b4df68f2df1d1a71c2353cf5f23890235c0f7dd1be9941056abfec7ca28d8d9b8a1874943c723309f5beaf665a2c27bc7905f359222dae46d4bb41eea998ed4bcdcb96a678d7e66d5d5ba24bca7e20a6e89539ea2fb5851eff906334644b41820581aba51920b20a2e46072e297a65a6425a55592e37b091a7b5569a06d793fb7c07c738500f610a52715317524de8df6af9208cffb512578282dd012ef713004e4f0eca0", 0xe0, 0xff}, {&(0x7f00000001c0)="fa839eddee1622093d65655964972d73107ca903cc5efd22737b157ba9ae8983eedf704abc9ef9a9e3cb91f95f79c0d79a3e76979663cd050b", 0x39, 0xfffffffffffffffd}, {&(0x7f00000005c0)="bce8e1fd03dd9918d3ab65fd147bfa3edce633fc2f1a669836dac025198d765654f641734fad5cdc57d0accb2d81408d27761c7d83abb6a430cde7ac57223f39cd7ac16190d21cb8add49f4d2a85d084cd892385e00d59dce9c98a02f755b0470c2854333bb3dc2ab68851af1e99c83834e80d2a2d8c33b4fe2c848b4e9905d47117bf866c03", 0x86, 0xe9}], 0x84, &(0x7f0000000740)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x38, 0x33, 0x34, 0x32, 0x2f, 0x5, 0x32]}}}}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x74]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x35, 0x6b, 0x32, 0x0, 0x37]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x31]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x67, 0x78, 0x65, 0x1a]}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}) readlinkat(r0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=""/4096, 0x1000) 11:26:22 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"/640], 0x24}}, 0x24000800) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r2, 0x3, 0x0, 0x8000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)=':\\,^\x00') r3 = perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4306, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x0, 0x0, 0xfffffffe, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x131000, 0x0) syz_io_uring_setup(0x6df8, &(0x7f00000003c0)={0x0, 0x34f2, 0x4, 0x3, 0x8000be}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000380)) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x130) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x470240, 0x0) [ 2176.423355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:26:22 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:26:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2176.449699] loop1: detected capacity change from 0 to 2097152 11:26:22 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f18"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:26:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8910, &(0x7f0000000140)={'lo\x00'}) [ 2176.484713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2176.492244] EXT4-fs error (device loop1): ext4_fill_super:4967: inode #2: comm syz-executor.1: iget: special inode unallocated [ 2176.494352] EXT4-fs (loop1): get root inode failed [ 2176.494988] EXT4-fs (loop1): mount failed [ 2176.527836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2176.548119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:26:22 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2176.649357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2176.650334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2176.651693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2181.225130] Bluetooth: hci2: command 0x0409 tx timeout [ 2183.273429] Bluetooth: hci2: command 0x041b tx timeout [ 2185.321454] Bluetooth: hci2: command 0x040f tx timeout [ 2186.534137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2186.536466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2186.543373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2186.601885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2186.603743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2186.606476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2186.788760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2186.806691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2186.816548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2187.529562] Bluetooth: hci2: command 0x0419 tx timeout 11:26:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) 11:26:48 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:26:48 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f18"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:26:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8911, &(0x7f0000000140)={'lo\x00'}) 11:26:48 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:26:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:26:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8910, &(0x7f0000000140)={'lo\x00'}) 11:26:48 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000140)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004300010100000000000000000000000008000100858357d9dc210f4123cb6ef4dfea461721430aa92b4c567771df8c129f09c93426cea277fa16c94636671640add126903e9f1a9ff0ef6d92d9acb43e2e1078c5cd6047586683755f15", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r3 = semget$private(0x0, 0x0, 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f00000000c0)=[{0x3, 0x400, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4, 0x9, 0x1800}], 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000003c0)={{0x0, r5, r6, 0x0, 0x0, 0x0, 0x5}, 0x1697, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf1a7}) keyctl$revoke(0x3, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) unshare(0x48020200) [ 2202.213431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2202.265414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:26:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) chroot(&(0x7f00000003c0)='./file0\x00') r0 = syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000400)="b1c2c70a2db67205690b3aac67e710952833038d03488c3bc11ced615b0e0f5676a2a07660d944f440c9ac829000dd877d9788d0c6b445bdd7d09cd14840f6f295086a1875e8fd89888367b945f03cb95644cfff36bbacd3f8bb84bbfbc1a4217706f793cbe832e42a02fc7942b77706b9acc89d243e0181ddc02cc5e17cb31d49047acfe25b1a97f3faa57c110d5f98b50441300a209360343b206218c8a4fc85363f2f998581ec3f3b309932d7485c4c0c53c1596f32a04dc18dcb6c3dbf377ffa", 0xc2, 0x9}, {&(0x7f0000000280)="7f5d250ce79a5688b85809a19c969f6484bbf38ae144e07996ed79de4c8234a790ad8ee65778227586010bc29da58d71c2591e9c83da5d01c95b7933e2d2ece96c15ed1b514d43042b2b1c87e9f8087d93d888b2", 0x54, 0x2}, {&(0x7f0000000500)="67c94472ccdf9319d5c526e5e773da9bdb9b402d46ce0b4acb2deb1b6ec0f7b7684293850e5ec2b154d6a3238ea3cfb44e1d6fe1d4dabc712f2a98a9a5eac7dbc06acf2fb76065e8ad5c49ea58652b63462b2c1d88c6e6d27d8be3cb329b97f7a145b3a350faaca161f26cf412219599b5f6ddbadbcd70b4aeea0a73b573667e31174498bb95eef2fad3d0502aafb62074c9a865088448a69d30a3928dea7a361cf457739721031c967870", 0xab, 0xff}], 0x800001, &(0x7f0000000740)={[{@mode={'mode', 0x3d, 0x10001}}, {@mode={'mode', 0x3d, 0x800}}, {@huge_never}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fowner_lt={'fowner<', 0xee00}}]}) fspick(r0, &(0x7f00000006c0)='./file0\x00', 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) getdents(r1, &(0x7f00000007c0)=""/129, 0x81) umount2(&(0x7f0000000700)='./file0\x00', 0x0) getdents64(r1, &(0x7f0000000300)=""/176, 0xb0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x0) getdents64(r2, &(0x7f00000001c0)=""/49, 0x31) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) fchownat(r1, &(0x7f0000000100)='./file0\x00', r3, 0x0, 0x1000) 11:26:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8912, &(0x7f0000000140)={'lo\x00'}) 11:26:48 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:26:48 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f18"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:26:48 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) [ 2202.569708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:26:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:26:48 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7002) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000004c0)={{}, "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"}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000180)) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x200c0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {0x308}, 0xac1414fb, {0x2, 0x0, @broadcast}}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) fallocate(r1, 0x1d, 0xfffffffffffffffe, 0xb35c) chmod(&(0x7f00000000c0)='./file0\x00', 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000240)=[{&(0x7f00000014c0)="6b832ed13592090893e012c0276278830f126789328b314851463faf21b6739d8cda55ce7db738cf3356b5787d6c77493269dc66947167b8e0f2d5e692a93d32c26d4737eb5818c9566326d6226dedc8f10568d6badf0672c5f0e00b473c553c5e96fa6b6c8831375299efdccc86aef549178032d16c98ae473739bce51353b514abf038e4140cfc5f641241cdce17730fb342c5fde52f5a4d5d9380e8c5c77c92dd9bb6dee3debd5c7b7a0e67f850813624e4cc09915d23292b74b85954a67483b856ac401b30ecc7", 0xc9}, {&(0x7f00000001c0)="ca3eb984239251b0cd29b1d2e183bd3ccff5a7a44c1c01c4f791b0f842c530110759270e63d8828ca17c7c82368eb235b7e3752b50cc0b0cac021bceee981c3b592cc6f0cc931905a4", 0x49}], 0x2) 11:26:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd68cba6}, 0x400, 0x0, 0x0, 0x0, 0x7ffffffe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = pidfd_open(r1, 0x0) r3 = dup(r2) process_madvise(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000003c0), 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xcff) r5 = dup3(r3, r4, 0x80000) openat$cgroup_type(r5, &(0x7f0000000280), 0x2, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4004) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000180)=0x1) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="24002eefb66e3697d6d418b935eef8274e00000000000000006fdcf9230400000073000080999e000084000000"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x3e, 0x90, 0x0, 0x0, 0x40001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7fff, 0x22}, 0x2188, 0x6, 0x100, 0x7, 0x8, 0x80, 0xa57, 0x0, 0x80, 0x0, 0x8001}, 0xffffffffffffffff, 0x8000000000005, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) [ 2202.769783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2202.787765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2207.529206] Bluetooth: hci2: command 0x0409 tx timeout [ 2209.577914] Bluetooth: hci2: command 0x041b tx timeout [ 2211.625242] Bluetooth: hci2: command 0x040f tx timeout [ 2212.968393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2212.970743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2212.977673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2213.009956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2213.012211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2213.014879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2213.195812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2213.214562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2213.221790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2213.674121] Bluetooth: hci2: command 0x0419 tx timeout 11:27:16 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8913, &(0x7f0000000140)={'lo\x00'}) 11:27:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) [ 2230.764480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2230.766507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:27:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:16 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0xffffffffffffffff, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:16 executing program 1: fallocate(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48000, 0x0, 0x0, 0x9, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0xc1, 0xb4700000, 0x3ff, 0x73cf}) r1 = timerfd_create(0x0, 0x0) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{}, {0x0, r2+60000000}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000140)) timerfd_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}}, &(0x7f00000002c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3a74, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x284}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE, 0x3f) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 11:27:16 executing program 0: lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x6000, 0x100, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x5, 0x0, &(0x7f0000000740), 0x40000, &(0x7f0000001c00)=ANY=[@ANYBLOB="7265736769643ddfcc77a3f7b22446e11763c9cda5fb988d5f025bf40b6d494093593819384610a3389dde48e79ae10948548fb02286080aae2fd11021697d19fd7b47f58f0d396a640ab837945a78cf8368b6154093c34a1f86ecfa71994b4555bfd7b7fab03139e1b072e2d8a367823621163abf", @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESDEC=0xee00, @ANYBLOB=',smackfshat=queue1\x00,euid=', @ANYRESDEC=r1, @ANYBLOB]) mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xe164, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000ac0)='[--\\}]\\\xb4,[@\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054c00)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "336545c2542a4c"}) r7 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 11:27:16 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) [ 2230.795769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2230.811397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2230.821632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:27:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x8000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) faccessat(r1, &(0x7f0000000080)='./file1\x00', 0x32) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc0001c, 0x100000f, 0x1f012, r0, 0x0) 11:27:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8915, &(0x7f0000000140)={'lo\x00'}) 11:27:17 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:27:17 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0xffffffffffffffff, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:17 executing program 0: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000001540)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) dup3(r0, r4, 0x0) io_uring_enter(r1, 0x3491, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="24d64ddea33952bf519f9cd537a10af513422effbfa03dcec11782342dc37b57f60855a603bcbe6a30758b1c6e485ce5dd19d144f46e80fe146324ca0704c23f032bd9a23d7a0edbd20317a8f1a316429b3a35ada4289a0c3c7a148fcc7a777aba55dc153ee5f6e24c06ebc059aacc0835715236ae7108f1d59a05a76b3075b87455d273005c08c2a0bca100b5520ccff2956b21c221b5b343ba6560652c76055249ec32b97ecd1310921c6bfcd792127a8d97c21874e298df9a88236d9db75893e0", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fddbdf251000000008003100060000000500380001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r6 = fork() syz_io_uring_setup(0x57df, &(0x7f0000000400)={0x0, 0x63c0, 0x8, 0x3, 0x3a9}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000500)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x7fffffff, 0x0, 0x8}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) r9 = fsmount(0xffffffffffffffff, 0x1, 0x49) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r10) ptrace(0x8, r10) clone3(&(0x7f0000000340)={0x20000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/64, 0x40, &(0x7f0000000200)=""/142, &(0x7f0000000300)=[r8, r6], 0x2, {r9}}, 0x58) 11:27:17 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) [ 2231.365134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:27:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x7fff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000700)=0x0) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, 0x0) io_pgetevents(r1, 0xa4, 0x1, &(0x7f0000000240)=[{}], 0x0, 0x0) r2 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0xa, 0x0) dup2(r5, r4) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x6, 0x42000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x80000000, &(0x7f0000000400)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r3, r3, 0xffffffffffffffff, r6, r5], 0xa, 0x0, 0x0, {0x0, r7}}, 0x101) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1536, r2, &(0x7f00000001c0)="b7d1b5ccd8cd57ddc94fe976bbad29769c73100a24ae06b97e99cad9cf8b59be743a6e4711626eea7842648029f1f65fd0458ff5bc91f0bac06c6e26b15a19ddfc36992d9cfd6c8f489df97f8afb9ac3ec05ea8658c25fdb387ca8248bd52b10c2e7", 0x62, 0x0, 0x0, 0x2, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f0000000240)="6ed75b64e98a1d48d67cdd2585ee52f2752679a0f93bf753048f2d3c3d7439e5607651527c55b826df4f5455a870397287edb5ad2ee3e0f17ef2ca2756ed2dab62d03f44dba5fa41b62b52613f013b2804efd4ce48714224ad75ebcedf7e9f5f7271e1e79b0f3b749d0ae6478de4227673559de948d17961677a76b4e564ba3cb1b1a1df6414cc496668afd3cd674e1e545f56ddc2ce5a3dc09d591230af59013a84a015e962ef3450039e12a198ac35a278db659e5c8b8ceb2e5fc55bc31a7538c0", 0xc2, 0x5, 0x0, 0x1, r0}]) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_setup(0x1c63, &(0x7f00000004c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) 11:27:31 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x6000, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0xffffffffffffffff, r1, 0x0) dup2(r1, r0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) r3 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001280)={0x0, 0x0, 0x1, 0x2}) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x2, 0x8, 0xa, 0x81, 0x0, 0x8, 0x40200, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffc0, 0x2, @perf_config_ext={0x0, 0xffff}, 0x0, 0x80, 0x3, 0x6, 0x8, 0x2, 0xf82f, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000180)='\x00', &(0x7f00000002c0)='./file1\x00', r3) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007d567b548016c6531"], 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4bc4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000001180)='./file1/file0\x00', &(0x7f00000011c0), 0x800008, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@nodevmap}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) openat(r5, &(0x7f0000000000)='./file1/file0\x00', 0x0, 0x96) openat(0xffffffffffffff9c, &(0x7f0000001080)='./file1/file0\x00', 0x42, 0x1fe) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@version_L}, {@posixacl}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 11:27:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8916, &(0x7f0000000140)={'lo\x00'}) 11:27:31 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:27:31 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0xffffffffffffffff, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) [ 2245.403929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2245.413646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2245.422273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:27:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8918, &(0x7f0000000140)={'lo\x00'}) [ 2245.548604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:27:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2, 0xa, 0x0) dup2(r6, r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x10, r5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000180)={0x7a3, 0x0, &(0x7f0000000140)=[r5]}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) dup3(r7, r3, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) io_uring_enter(r0, 0x3491, 0x0, 0x0, 0x0, 0x0) 11:27:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r0, 0x4, 0x1afc0000, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '}{@*:+/'}}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x32, 0x39, 0x30, 0x39, 0x50, 0x61, 0x31], 0x2d, [0x61, 0x65, 0x30, 0x34], 0x2d, [0x67, 0x61, 0x30], 0x2d, [0x37, 0x66, 0x35, 0x61], 0x2d, [0x34, 0x34, 0x63, 0x36, 0x0, 0x32, 0x34, 0x33]}}}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f00000001c0)="463e3d2a4278103cf0e6897c7c", 0xd, 0x1, 0x0, 0x0, r1}]) setxattr$incfs_size(&(0x7f0000000280)='./file1\x00', &(0x7f00000003c0), &(0x7f0000000400)=0x6, 0x8, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x8}}, './file1\x00'}) 11:27:31 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050"], 0x25) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:31 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) 11:27:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xa, 0x7b0b87d071652a5b, 0x0, 0x60038, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0xfeffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000, 0xff}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xaf12c13032a0b303, 0x8010, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000540)={0x200050300, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f0000000240)=""/95, &(0x7f0000000440)}, 0x58) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x891d, &(0x7f0000000140)={'lo\x00'}) 11:27:31 executing program 4: syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x25) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r0 = fork() ptrace(0x10, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040), &(0x7f0000000180)) 11:27:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x49a4}, @device_b, @device_b, @initial, {0x4, 0x1}}, 0x3ff, @default, 0xb0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, [{0xdd, 0xc6, "3b82b2b26701aa3781049dcca77f5cf1f1d6b120c97532359e27bdcb9109712498dca4b8e8cc196f7bda232a9c57c3a9196f16a3b5378ca94ca328e53cf4dd51ce723e7082eec4f5316fd89c7ba79e7f0a4507b2ce9d84ccabef831fdbd15b75bf056362eac44ea0f30f506062b96ad32ad6d916bf05432e00a2a97da319776b294ee5af6bea368c685bccf6f9ad56cfab5766a8faf8069549d9454101685d3a1b49e6ffe0eec1029f87bfa3d936d61ecb33a6adbc9a9cd3dded7a470900c7e640e9a4b9f346"}, {0xdd, 0x6, "cb7760979b3f"}, {0xdd, 0xbc, "8e7305980b60617d7d5b8b90fba6d8cb7c5894ffb313dbe21c939c1344b7f135f970aa4bf6e825c0636d3c2261035cd30307f42fef25c5f885771b74333c1fbcc04978bc4d8a6e310f4429f3d197419c850f827e4749287c07b6155958ec62b22f2ff09cf2bb6fe7584dfde4c998fbda18710d3de43347c2520efa5ffeeebb459cddd4e111fedb3e4ec378e3121414ea4f40b09f6f56a306d3c6196f6e0a89f8b18a3944902a6ef5c2ecef5e85fb45f063df6517e1d54d56a45db0a5"}]}, 0x1c0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=ANY=[@ANYBLOB="b0840300080211000000080a1100000050505050505005000000444100000300400010010012e8"], 0x25) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9d98, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x8001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="50000000080211861473f1729db395eae70a5293ae010000010010000000000064000100010853d0dd96a22f80848b960c123c992b7ef8b7858fad3bd9e42fad9f1824"], 0x2e) r1 = fork() perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x9, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200)}, 0x100c8, 0x1002, 0x4, 0x2, 0x4, 0x3, 0xf92, 0x0, 0x0, 0x0, 0xb59a}, r1, 0x9, 0xffffffffffffffff, 0x2) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040), &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000492b0beb83de4cdb", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0/file0\x00']) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400)=0x1) [ 2245.945764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2245.962849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2245.980388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2246.027495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2330.025250] Bluetooth: hci2: command 0x0406 tx timeout VM DIAGNOSIS: 11:32:39 Registers: info registers vcpu 0 RAX=ffffffff83e97d20 RBX=0000000000000000 RCX=ffffffff83e7f98c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e984e8 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85679ac8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e97d2e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4ef568b010 CR3=0000000015a58000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000dd060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004190a2caa0000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e97d2e RBX=ffffffff81302a10 RCX=ffffffff85d48901 RDX=1ffff1100d9e12de RSI=ffffffff83e97d2e RDI=ffff88806cf09760 RBP=ffff88806cf09730 RSP=ffff88806cf096a0 R8 =ffffffff85d489db R9 =ffff888008987dc8 R10=0000000000032046 R11=1ffff1100d9e12c2 R12=ffff88806cf09760 R13=0000000000000000 R14=ffff888008978000 R15=ffff88805cdedc00 RIP=ffffffff81302a10 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4ef4258828 CR3=0000000015a58000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000005000000050000000200000000 XMM02=646e616320636578650e0a0100010101 XMM03=6169727420636578650b006574616469 XMM04=7a696d696e696d20636578650d006567 XMM05=6511006c61746f7420636578650a0065 XMM06=737472617473657220726f7475636578 XMM07=6578650a007a7a756620636578650900 XMM08=636578650b006574616469646e616320 XMM09=696d20636578650d0065676169727420 XMM10=746f7420636578650a00657a696d696e XMM11=73657220726f74756365786511006c61 XMM12=7a7a7566206365786509007374726174 XMM13=78650800736465657320636578650a00 XMM14=616d7320636578650a006e6567206365 XMM15=000073746e696820636578650a006873